v0.10.0

Changelog

• 531e062 Merge remote-tracking branch 'origin/main' into feat/browser-login-cmd
• 00af1d0 Merge remote-tracking branch 'origin/main' into feat/browser-login-cmd
• 98a0dad Merge remote-tracking branch 'origin/main' into feat/browser-login-cmd
• 50ddf5f Merge remote-tracking branch 'origin/main' into feat/browser-login-config
• 5427e7d Merge remote-tracking branch 'origin/main' into feat/browser-login-config
• 54c5fbc Merge remote-tracking branch 'origin/main' into feat/browser-login-exchange
• 6f4bf00 Merge remote-tracking branch 'origin/main' into feat/browser-login-run
• dd367ea Merge remote-tracking branch 'origin/main' into feat/browser-login-run
• 8107348 chore(release): prepare v0.10.0
• d1e930a ci(release): pass SEPTIEMBRE_COGNITO_CLIENT_ID to goreleaser
• 30aab52 docs(auth): add Cognito app-client provisioning guide for browser login
• 935fbd1 feat(authflow): add Cognito token exchange for browser login
• 792445a feat(authflow): add PKCE and CSRF-state primitives for browser login
• 0b0ab10 feat(authflow): add Run orchestrator for browser login
• aa97b52 feat(authflow): add loopback callback server for browser login
• e42656c feat(authflow): add per-OS browser opener abstraction for browser login
• d2dfe54 feat(cli): add septiembre login command
• b2867af feat(credentials): add Cognito config resolution (domain, client ID)
• ba3cd80 fix(authflow): make one-shot 410 test deterministic
• 40407e1 fix(authflow): satisfy errcheck and staticcheck in Run and its tests
• 21bacc4 fix(authflow): satisfy errcheck on response write and test cleanups
• 501c458 fix(authflow): satisfy errcheck on test connection closes
• 3deaef9 fix(cli): use fmt.Fprintf in login test stubs per staticcheck
• 38e3821 test(authflow): add concurrent one-shot and error_description leak coverage to loopback server
• 34c1aeb test(authflow): assert code-leak and verifier-leak on all Run subtests
• 818e938 test(authflow): hard-fail the concurrent callback invariant immediately
• 02fcc66 test(authflow): pin code_challenge_method=S256 in authorize URL
• a07df37 test(authflow): pin defaultBrowserOpener constructor contract
• b50004f test(cli): cover septiembre login command end to end
• 3d6cd15 test(credentials): pin http:// passthrough for Cognito domain

v0.9.0

v0.9.0

Added

• changes visual report now shows the repository name as the report title and includes repository metadata in machine-readable output.
• changes readiness checklist now detects database migrations.
• changes visual checklist items can be toggled as graph filters, making it possible to focus the file graph on tests, migrations, docs, source code, or changelog entries.

Changed

• changes diff panel now relies on red/green line color for deleted/added lines and hides redundant leading diff markers.

Fixed

• changes visual checklist filters now hide SVG nodes and edges reliably and keep filter controls aligned with the rest of the sidebar UI.
• Liquibase-style migration changelog files like db/changelog.xml and database/changelog.yaml are classified as database migrations, not release changelog entries.

Verification

• Release workflow passed.
• macOS and Windows install smoke tests passed.
• Homebrew smoke test passed.

v0.8.0

Highlights

septiembre changes now includes a readiness checklist — a quick, at-a-glance view of what a change set contains.

✨ Added

• Readiness checklist on the changes graph. Files are classified with regular expressions into four independent signals:
  • Source code — .go, .js/.ts/.tsx, .py, .astro, and more (tests excluded)
  • Tests — _test.go, *.test.*, *.spec.*, test_*.py, tests/, __tests__/
  • Documentation — .md/.mdx/.rst/.adoc, docs/, README (changelog excluded)
  • Changelog — CHANGELOG*
• Shown in the interactive HTML sidebar, the --output json payload (checklist), and --output table.

Each signal is matched independently, so a changelog is never miscounted as documentation and a test file is never miscounted as source code.

Full changelog: v0.7.0...v0.8.0

v0.7.0

Highlights

septiembre changes now works in any repository and resolves import edges across languages — not just Go.

🐛 Fixed

• septiembre changes no longer fails with read go.mod: no such file or directory in non-Go repositories. The graph now builds from the changed files even without a go.mod.

✨ Added

• Multi-language import edges — relationships are resolved for:
  • Go — module-internal imports
  • JavaScript / TypeScript — import / export … from, require(), and dynamic import(), including .astro, .vue, and .svelte single-file components
  • Python — import and from … import (relative and absolute)
• Only imports that resolve to files present in the repo become edges, so third-party dependencies are excluded automatically. Files in other languages still appear as nodes (with diffs, churn, and changelog) without edges.

📝 Notes

• Path aliases (e.g. @/… via tsconfig paths) are not resolved yet — only relative and package-root specifiers.

Full changelog: v0.6.0...v0.7.0

v0.6.0

Changelog

• add3dde feat(changes): add --release flag with changelog grouped by commit type
• 252d6cc feat(cli): add changes --release mode with changelog

v0.5.0

Changelog

• 7e459e9 feat(cli): add changes graph command

v0.4.0

Managed KVS CLI is now tables-only: removed services kvs enable/status/rotate/disable. Use services kvs tables .... Creating the first table activates the service.

BREAKING: the default-binding commands are removed.

v0.3.0

Changelog

• 85f437f ci: upgrade github actions to node 24
• 00a4841 feat(cli): add upgrade self-update command and brand banner (#17)

v0.2.1

Changelog

• a76e6bd ci: publish homebrew cask

v0.2.0

Changelog

• dd29c43 chore(security): harden public cli docs and secret inputs
• 0b1477c ci(release): add install smoke tests
• 9913705 ci: add lint and security validation
• 8a03e51 ci: fix validation workflow versions
• 8185142 feat(auth): implement token login
• e93c557 feat(cli): add validation guidance to help
• e89e317 feat(deploys): add cancel command
• 4dd5a69 fix(auth): correct token create help flag