Skip to content

v1.0.10

Choose a tag to compare

View all tags
@sergebulaev sergebulaev released this 07 Jul 02:33
v1.0.10
bf41818

v1.0.10

Security and supply-chain hardening release.

  • New: HOL Plugin Scanner runs in CI on every push and PR (.github/workflows/hol-plugin-scanner.yml), SHA-pinned actions, min_score: 80, fails on high severity
  • New: SECURITY.md vulnerability disclosure policy
  • New: plugin icon (assets/icon.svg) wired via interface.composerIcon in the Codex manifest
  • New: requirements-lock.txt pinned dependency lockfile, .codexignore, Dependabot config
  • Sync script now mirrors README, SECURITY.md, assets, and the lockfile into the Codex marketplace package
  • Scanner result: 88/100 (B), 0 critical, 0 high findings
Assets 2
Loading