v0.6.0

Two new stacks, two new Python project kinds, and a lot of hardening.

Highlights

• Rust and Go stacks. Each comes as a library or a binary, with strict linting, tests, CI and
  Dependabot.
• Python web-service: a FastAPI app in a container, with /health and opt-in OpenTelemetry.
• Python data-pipeline: downloads third-party data, records a checksum for each file and
  rebuilds a dataset from it.
• Dependency audits in just check and CI for Python, TypeScript, Rust and Go. New releases
  wait a week before uv or pnpm install them.
• Safer answers. Copier rejects answers that used to produce a broken project, such as a name
  that starts with a digit.
• A CHANGELOG.md in every new project.

Breaking changes

• Secret scanning uses Betterleaks instead of gitleaks.
• Vale is gone. rumdl still lints Markdown.
• The web service's config.py and telemetry.py are gone. OpenTelemetry turns on only when
  OTEL_EXPORTER_OTLP_ENDPOINT is set.

Upgrading from v0.5.0

1. Run copier update. If you added dependencies, you get one conflict in pyproject.toml. Keep
   your dependencies and take the new comment below them.
2. Run uv lock and pnpm install, then commit the lockfiles.
3. If a SKIP list names gitleaks, change it to betterleaks.
4. Delete the .vale/ folder.

The full list is in
CHANGELOG.md.