v0.3.0

What's Changed

• ci: add adversarial security audit workflow by Conrad Rockenhaus (@skyphusion) in #49
• fix(ci): use ADVERSARIAL_AUDIT_CF_API_TOKEN for audit by Conrad Rockenhaus (@skyphusion) in #50
• ci: add adversarial security audit workflow by Conrad Rockenhaus (@skyphusion) in #51
• ci: add adversarial security audit workflow by Mackaye (@skyphusion-mackaye) in #52
• deps: bump postcss from 8.5.16 to 8.5.22 by Dependabot (@dependabot)[bot] in #53
• ci(audit): repoint adversarial-audit workflow at public security-audit by Albini (@skyphusion-albini) in #54
• feat(sync,widget): fail-closed corpus allowlist, manifest citations, per-origin prompts by Joan (@skyphusion-joan) in #57
• deps: bump the cloudflare-toolchain group with 2 updates by Dependabot (@dependabot)[bot] in #55
• deps: bump @aws-sdk/client-s3 from 3.1090.0 to 3.1096.0 in the npm-minor-patch group across 1 directory by Dependabot (@dependabot)[bot] in #56
• feat(sync): make the includePaths allowlist fail loudly, not empty by Rollins (@skyphusion-rollins) in #60
• feat(escrow): escrow SKYPHUSION_TARGETS_JSON with a provable restore by Rollins (@skyphusion-rollins) in #64
• deps: bump @cloudflare/workers-types from 5.20260727.1 to 5.20260728.1 in the cloudflare-toolchain group by Dependabot (@dependabot)[bot] in #67
• deps: bump the cloudflare-toolchain group with 2 updates by Dependabot (@dependabot)[bot] in #68
• deps: bump @aws-sdk/client-s3 from 3.1096.0 to 3.1100.0 in the npm-minor-patch group by Dependabot (@dependabot)[bot] in #69
• deps: bump postcss from 8.5.22 to 8.5.25 by Dependabot (@dependabot)[bot] in #70
• docs(claude): document exact release/tag ship procedure by Conrad Rockenhaus (@skyphusion) in #71
• chore(release): v0.3.0 by Conrad Rockenhaus (@skyphusion) in #72

New Contributors

• Joan (@skyphusion-joan) made their first contribution in #57

Full Changelog: v0.2.1...v0.3.0