v0.1.0-rc1

Changelog

• 5231569: Initial commit (skil-lock 284403476+skil-lock@users.noreply.github.com)
• f57f6de: build: GoReleaser config + release workflow for v0.1.x (skil-lock 284403476+skil-lock@users.noreply.github.com)
• a81d6f2: chore(deps): cut dependabot noise (skil-lock 284403476+skil-lock@users.noreply.github.com)
• b03d9fa: deps(actions)(deps): bump actions/checkout from 4 to 6 (#2) (dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>)
• be0563a: deps(actions)(deps): bump actions/setup-go from 5 to 6 (#6) (dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>)
• 7dd9c9d: deps(actions)(deps): bump actions/upload-artifact from 4 to 7 (#5) (dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>)
• 493e6bb: deps(actions)(deps): bump github/codeql-action from 3 to 4 (#4) (dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>)
• 3d9fff4: deps(actions)(deps): bump golangci/golangci-lint-action from 6 to 9 (#3) (dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>)
• 4b45de6: deps(go)(deps): bump github.com/spf13/cobra from 1.8.1 to 1.10.2 in the go-deps group (#7) (dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>)
• a1f44fd: feat(t1.1): go module scaffold + cobra CLI skeleton (skil-lock 284403476+skil-lock@users.noreply.github.com)
• a9dcd14: feat(t1.10): skil-lock lock subcommand (skil-lock 284403476+skil-lock@users.noreply.github.com)
• 8601ebf: feat(t1.11): skil-lock init --baseline subcommand (skil-lock 284403476+skil-lock@users.noreply.github.com)
• deb8440: feat(t1.12): skil-lock list subcommand (skil-lock 284403476+skil-lock@users.noreply.github.com)
• a27c93f: feat(t1.13): skil-lock diff subcommand + diff engine (skil-lock 284403476+skil-lock@users.noreply.github.com)
• 95a535c: feat(t1.14): end-to-end CLI fixtures + truncate generated_at to seconds (skil-lock 284403476+skil-lock@users.noreply.github.com)
• 0bcba84: feat(t1.2): model package — runtime-agnostic domain types (skil-lock 284403476+skil-lock@users.noreply.github.com)
• 17c6297: feat(t1.3): lockfile package — canonical yaml v0.1 round-trip (skil-lock 284403476+skil-lock@users.noreply.github.com)
• 58d8543: feat(t1.4): claude code SKILL.md parser (skil-lock 284403476+skil-lock@users.noreply.github.com)
• d677092: feat(t1.5): codex parser adapter (skil-lock 284403476+skil-lock@users.noreply.github.com)
• 020e0f1: feat(t1.6): shell-exec detector (skil-lock 284403476+skil-lock@users.noreply.github.com)
• 0519a6a: feat(t1.7): network URL detector (skil-lock 284403476+skil-lock@users.noreply.github.com)
• 7cdb3d4: feat(t1.8): protected-path detector (skil-lock 284403476+skil-lock@users.noreply.github.com)
• 49be2ac: feat(t1.9): skil-lock scan subcommand + scan orchestrator (skil-lock 284403476+skil-lock@users.noreply.github.com)
• d6bf652: feat(t2.1): skil-lock ci subcommand + policy.Apply severity lift (skil-lock 284403476+skil-lock@users.noreply.github.com)
• d255c2b: feat(t2.2): PR-comment renderer — Reason column + copy-paste approvals snippet (skil-lock 284403476+skil-lock@users.noreply.github.com)
• 0b3d975: feat(t2.4): .skil-lock.yaml schema + loader (skil-lock 284403476+skil-lock@users.noreply.github.com)
• 8d8602a: feat(t2.5): .skil-lock-approvals.yaml consumer + ci wiring (skil-lock 284403476+skil-lock@users.noreply.github.com)
• bfa862f: fix(ci): bash shell on windows + skip codeql while repo is private (skil-lock 284403476+skil-lock@users.noreply.github.com)