v0.0.6

0.0.6 (2026-07-15)

⚠ BREAKING CHANGES

• security: mise now downloads binaries ONLY from GitHub Releases

ci

• dependabot: add path monitoring for mise toolchain config (ebc7227)
• deps: remove MISE_SKIP_CHECKSUM workaround (0a80645)

🚀 Features

• add advanced general commands (cache, generate) and silent/no-config flags (cf37c1c)
• add comprehensive performance testing and documentation infrastructure (c1d8996)
• add config placeholder and update edit command to use it (36ab555)
• add df, edit, and implode generic commands (a733069)
• add generate manpage command to CLI (4f95703)
• add missing performance and documentation scripts (fe65a58)
• add multi-os docker support (e12e9ed)
• add rocket icon to performance workflow name (e6a6146)
• add SQLite transaction manager for atomic multi-repo operations (c04dd2f)
• add support for riscv64, ppc64le, loong64, and s390x architectures in install script (26d48f0)
• add UNIRTM_HOOK_ALLOW_MISSING=1 to .unirtm.toml (a1ceab9)
• align df command with unirtm pterm implementation (0658356)
• align env command with pterm interactive output (fa7363d)
• align generate command with unirtm implementation (f143f2b)
• align implode command with UniRTM (ab558d3)
• align version command with UniRTM (fb53d44)
• archive: add ExtractArchive to support extracting entire archives to a directory (37bddb9)
• archive: add xz compression support (0ac0329)
• archive: implement symlinks, hardlinks, and best-effort uid/gid chown restoration (3e69a82)
• archive: modularize archive package with compression support (12fcc4a)
• archive: preserve file modification timestamps during compression and extraction (ca911cf)
• archive: support injecting advanced metadata (PAX, Zip Comment, Uid/Gid) during compression (e916786)
• cd: sync release orchestration enhancements from base repo (b00fee8)
• ci: add centralized Harden Runner endpoints configuration (5389a6e)
• ci: add GitHub API rate limit info to summary reports (8c4293a)
• ci: enable auto-merge for ALL dependabot updates including major (9c8bae2)
• ci: enable release-please for all configured branches (bc94753)
• ci: improve release-please configuration and remove fixed version (e1fcd64)
• ci: sync Harden Runner endpoints from centralized config (48b4221)
• cli: align global flags with UniRTM (02a3d8f)
• cli: enhance completion command with auto-detect and install (680cb47)
• cli: enhance doctor with proactive system environment checks (853677c)
• cli: port and adjust doctor command from UniRTM (67a4e8a)
• cli: port cache command from UniRTM with SQLite support (c941bad)
• cli: remove unused generate command (b0828ab)
• cli: remove unused license command and internal addlicense module (a961e45)
• cmd: add support for bzip2, xz, zstd, and lz4 archives in self-update (b688cd8)
• cmd: enhance self-update with checksum verification and smart archive extraction (ad0a163)
• core: atomic integration of GPG, Pterm logging and test coverage (c92795e)
• deps: consolidate all dependabot updates into single PR (e753902)
• deps: optimize dependabot configuration and grouping strategy (900f3af)
• dev: add POSIX-compatible CI simulation script (a587a39)
• devcontainer: add comprehensive SSH and GPG permission configuration (843180b)
• devcontainer: add Docker availability check in init script (7ca1fe4)
• devcontainer: add support for local git config file (2fb5e43)
• devcontainer: add volume cache for osv-scanner (95891da)
• devcontainer: add volume cache for trivy (9f931a1)
• devcontainer: add vscode extension customizations for auto-installation (efae646)
• devcontainer: enable GPG signing support (4d88e12)
• devcontainer: forward common development and web ports (35ff5f6)
• docker: add docker-compose file detection for hadolint and dockerfile-utils (836880d)
• implement lightweight doctor, config, cache, and generate commands (ab5863e)
• implement TOML and YAML parsing via go-toml/v2 and yaml.v3 (50c0b2d)
• initialize unigo go module and basic cobra structure (1f987db)
• integrate slog and wire up with debug and quiet flags (beffd4c)
• lint: add two-pass auto-fix mechanism to make lint (9fba0f1)
• make: add sync-harden-runner target for workflow endpoint management (d24708d)
• mise: add yamllint to core tools in mise.toml (406bbb3)
• port completion command (37c7b94)
• port database infrastructure and cgo-free sqlite driver (e2dde4f)
• port download infrastructure module from unirtm (0392664)
• port env command (11a6d81)
• port envpath and version infrastructure modules from unirtm (dd30534)
• port errors package from unirtm for robust categorization and exit codes (db2dbd9)
• port gpg verification infrastructure module from unirtm (68d0fff)
• port http client and utils modules from unirtm for solid foundation (d67ebb3)
• port internal env package from unirtm (0ca1202)
• port internal/updater with pterm and wire into root cmd (d1379bb)
• port license command (f82a5b1)
• port license management tool from unirtm (b063334)
• port missing general commands (doctor, config) and global flags (--cd, --verbose, --yes, --jobs) from unirtm (84864df)
• port self-update command (ba0c607)
• port sysinfo and global command flags (adc2585)
• port version command (a246ec8)
• release: add separate-pull-requests for future manifest mode (a543dde)
• release: enable manifest mode and native component support (8bfe724)
• release: revert manifest mode to global versioning (6eeeaa3)
• scripts: add missing performance and documentation scripts (f8d9c61)
• scripts: add tool to remove Windows wrapper scripts (5bfd3ef)
• security: add CDN and download mirror endpoints to harden runner (3ff8a5d)
• security: add DockerHub endpoints to harden runner (48b6416)
• security: add sigstore wildcard endpoint to harden runner (2e26b98)
• security: implement three-layer defense against Aqua Registry (ef13665)
• updater: force github proxy prefix on asset downloads to ensure stability (e403747)

🐛 Bug Fixes

• archive: preserve file permissions during compression (b4605c6)
• cd: delete remote tag before re-push to trigger downstream docker build (be75906)
• cd: disable persist-credentials to ensure WORKFLOW_SECRET PAT is used for tag push (bedf7bf)
• ci: adapt docker build workflow and context for golang project (2c8f487)
• ci: add DCO signoff to dependabot-sync commits (cfe7546)
• ci: add DCO signoff to release-please commits (8fd8b67)
• ci: add GITHUB_TOKEN to all make commands for API rate limit prevention (2060bca)
• ci: add missing endpoints for trivy and sigstore (115a19d)
• ci: add node-audit special handling in CI fallback (d82624c)
• ci: detect docker-compose files in dependabot generator (530ca75)
• ci: disable paranoid mode in CI for lockfile sync (1b282ce)
• ci: disable shellcheck integration in actionlint to prevent Windows hang (1d711d8)
• ci: enable release-please for dev branch and fix DCO signoff (ab8f065)
• ci: exclude unreleased version compare links from lychee checks (6165757)
• ci: explicitly specify checkmake mise tool spec to avoid aqua registry lookup (acefebb)
• ci: fix PSScriptAnalyzer and yamllint configuration (166826a)
• ci: fix yamllint truthy error in performance workflow (7e7dfd0)
• ci: make link checker non-blocking to avoid false failures (99c2ec9)
• ci: pass GITHUB_TOKEN to lychee for link checking (dfb9fd1)
• ci: pin GitHub Actions to commit SHA in performance workflow (13623d9)
• ci: quote 'on' keyword in performance workflow (4710acd)
• ci: remove unsupported signoff parameter and add release-as 0.5.0 (d01b2df)
• ci: replace head -n -1 with sed for macOS compatibility (67aaa95)
• ci: resolve Docker Buildx container restart race condition (01a1c2d)
• ci: resolve npm-pnpm-audit hook failure on Windows (095f3a5)
• ci: restrict release-please to main branch only (0db8a91)
• ci: restrict release-please to main branch only (b97162a)
• ci: skip DCO check for snowdream user in release-please PRs (dde607b)
• ci: suppress zizmor findings for performance.yml and skip flaky tests (0616771)
• ci: temporarily disable npm-pnpm-audit hook due to API compatibility (6ed58d9)
• ci: update node-audit to use new npm bulk advisory endpoint (526ca79)
• ci: use GITHUB_TOKEN for release-please to enable DCO signoff (51051ba)
• ci: use GITHUB_TOKEN for release-please to prevent tag creation issues (73266aa)
• ci: use npm instead of pnpm for audit to avoid API compatibility issues (641c9f7)
• ci: use valid log level for lychee verbose option (171e721)
• ci: use WORKFLOW_SECRET for release-please to enable chain-triggering (9339b9c)
• cli: disable global help shorthand to allow -h for subcommands (e734417)
• cli: resolve df command shorthand flag conflict (1f0d147)
• dco: use PR author instead of branch name to prevent bypass (eb55adf)
• deps: correct devcontainers directory to root (9d83806)
• deps: correct indentation in test script for editorconfig compliance (0a44088)
• deps: exclude .devcontainer from docker ecosystem detection (67e96c3)
• devcontainer: add command availability checks before usage (a0a4ce0)
• devcontainer: add command to keep container running (5484045)
• devcontainer: add workspace volume mount and fix configuration (9ff708b)
• devcontainer: add YAML document start marker for yamllint (44ccf81)
• devcontainer: correct updateContentCommand to use make install (774bba2)
• devcontainer: handle missing host directories gracefully (9b79301)
• devcontainer: make git config cross-platform compatible (600052a)
• devcontainer: use dynamic workspace folder variable (73421d6)
• devcontainer: use find instead of ls for directory permissions (ffeaee8)
• devcontainer: use global git config instead of local (934bb1c)
• docs: ensure make docs build works correctly (6a0df9c)
• docs: fix broken relative links in documentation (c13692c)
• docs: regenerate pnpm lockfile to match overrides (b553918)
• docs: update TPGi CCA link to GitHub releases page (b061ca1)
• lint: ensure pre-commit runs exactly 2 times, not 3 (4085676)
• lint: fix yamllint, markdownlint, and editorconfig issues (b7925a2)
• lint: ignore CHANGELOG.md in all directories for markdownlint (ebe338c)
• lint: restore color output in Pass 1 auto-fix stage (fe3d523)
• linux: use -perm /111 instead of +111 for better compatibility (512e69b)
• macos: avoid -perm flag for BSD find compatibility (79b98b0)
• make version regex robust against initial release in cd.yml (f560288)
• make version regex robust against initial release in cd.yml (b6c115f)
• mise: add additional paranoid mode disable flags (7e83141)
• mise: disable attestation checks in sync-lock to prevent false positives (3f09708)
• mise: permanently disable paranoid mode for lockfile sync (49dbb04)
• mise: remove provenance fields from lockfile to prevent attestation errors (f7790b5)
• mise: update yamllint version to match versions.sh (d9bcf61)
• mise: workaround for GitHub attestation verification failures (2911054)
• node: auto-install bash in Alpine for npm compatibility (0042fa2)
• node: configure mise for musl binaries in Alpine environments (232bce2)
• node: explicitly set MISE_NODE_* env vars for Alpine (25d506d)
• node: export ALPINE_VERSION for mise.toml template evaluation (62d9344)
• node: use boolean false for node.compile setting (97d5bd5)
• python: install build dependencies for Alpine/musl environments (3f53883)
• release: set separate-pull-requests to false for unified PR (07054f5)
• resolve devcontainer startup with docker-compose configuration (fa788e4)
• resolve govulncheck and yamllint errors reported by unirtm verify (04b3889)
• scripts: ensure summary table displays by default (a0d1b69)
• scripts: fix JSON output formatting issues (7b30a64)
• scripts: install PyYAML via pip instead of pipx in sync-harden-runner (16285a8)
• scripts: prevent sync-harden-runner from deleting workflow content (32a4228)
• security: add docker.yml to zizmor ignore rules (66e35cf)
• security: add template-injection rule to zizmor config (92396c1)
• setup: ensure yaml and toml modules are always installed locally (7ca7026)
• setup: handle mise bin tools verification (5c386fa)
• setup: handle non-zero exit codes in smoke tests (3fe6c05)
• setup: normalize version strings in is_version_match to handle v prefix (e5efefd)
• setup: use mise which for binary verification in CI (ded29c1)
• tasks: make osv-scanner recursive and allow missing lockfiles (fc5913d)
• tools: complete taplo provider migration to npm (cdeaf76)
• tools: switch taplo from GitHub source to npm precompiled binary (18de234)
• trigger release workflow (13c6e34)
• update goreleaser brew template key from unigo to template (ffb7377)
• updater: add network retries and implement atomic binary replacement for Windows (9909391)
• windows: check root directory in verify_tool_atomic fallback (9e2ace6)
• windows: skip command check for binaries without .exe extension (a5ed6ca)
• windows: skip executable permission checks in lint-wrapper (035ae54)

🛠 Refactoring

• apply black formatting style to all pre-commit hook scripts (b9fe7ff)
• ci: deduplicate *.githubusercontent.com:443 in Harden Runner (ee235af)
• ci: deduplicate harden runner endpoints using wildcards (542b6e4)
• ci: remove redundant VENV environment variable (72c4af5)
• ci: standardize token usage across all workflows (54b8445)
• cli: remove empty placeholder flags (ce93a29)
• cli: remove unsupported flags and environment options (f1dffff)
• cmd,updater,archive: extract GitHub API logic and archive extraction (61c720c)
• completely remove pnpm configuration and lockfiles (d6a7e6d)
• devcontainer: enhance init.sh with improved logging and error handling (61a8c52)
• devcontainer: move initialization logic to shell script (944119a)
• devcontainer: remove direct SSH mount in favor of copy approach (c5dabca)
• devcontainer: remove duplicate containerEnv configuration (b2943e9)
• devcontainer: remove duplicate mise bootstrap from init.sh (a2108d5)
• devcontainer: remove duplicate VS Code extensions config (3657b5d)
• devcontainer: remove redundant chown command (5f79cc6)
• devcontainer: remove redundant trivy cache settings (1ffa32d)
• devcontainer: remove updateContentCommand (363840f)
• devcontainer: simplify configuration and add credential forwarding (38f8445)
• devcontainer: simplify SSH configuration by copying from host (62458b0)
• flatten internal/pkg directory into internal (df339d8)
• lint: merge Pass 1 and auto-fix into single step (7cd02aa)
• mise: use sed instead of perl for better POSIX compatibility (80059f0)
• pre-commit: clean up redundant exclude fields and optimize filtering (d95b727)
• pre-commit: optimize configuration and extract python scripts (f712d68)
• remove unnecessary whitespace in manpage generation command (0b6a549)
• remove Windows wrapper scripts (19820e4)
• rename root.go to 0.root.go for ordering (6ba7c02)
• scripts: remove MISE_GITHUB_TOKEN in favor of GITHUB_TOKEN (ec135c4)
• security: deduplicate harden runner endpoints (29c4faa)
• setup: remove rarely-used tools from default installation (da6ffc5)
• switch Go download mirror to go.dev, remove harden-runner from GitHub workflows, and update vite to 8.1.3 (5b38466)
• test: remove PowerShell test support (eaf7e6c)
• update pre-commit hooks to use unirtm hook-exec instead of lint-wrapper.sh (ea80e6c)
• use slog and pterm for diagnostic logs instead of fmt.Printf (cadec57)

📖 Documentation

• adapt UniRTM documentation to UniGo template (adb7cbb)
• add comprehensive token usage audit report (9983421)
• add GitHub API rate limit monitoring documentation (05b8fdf)
• add internal/pkg/README.md for unigo (841ec8f)
• add tool installation and API documentation (6357510)
• add Windows shell migration guide (1d44801)
• ai: add file modification best practices to AI interaction guidelines (4e31796)
• changelog: replace MISE_GITHUB_TOKEN with GITHUB_TOKEN (7cffbd9)
• ci: improve dependabot auto-merge workflow documentation (c47f53e)
• clean up broken and dead markdown links (4a14786)
• clear root CHANGELOG.md (38ccfc4)
• fix dead links in documentation (7682cf9)
• mise: add comprehensive mise configuration best practices (18968e9)
• mise: document attestation verification error and workarounds (7f07ae7)
• replace mise and make with unirtm across all documentation (139c952)
• replace remaining UniRTM mentions with UniGo in documentation and specs (7f26d17)
• restore .md extension in links for lychee compatibility (782b1f5)
• revert .unigo.toml back to .unirtm.toml in documentation (a19c849)
• scripts: update Chinese README to reflect removal of Windows wrappers (2aac80a)
• scripts: update README to reflect POSIX-only strategy (8b72ab6)
• scripts: update README to reflect removal of Windows wrappers (b4c0341)
• security: add comprehensive asdf supply chain risk analysis (515eea1)
• security: add mise supply chain security analysis and mitigation (c0c72f8)
• security: fix broken mise documentation links (8c3f625)
• update README to reflect UniGo project details (e22031b)
• update READMEs to reflect migration from mise to unirtm (39386e5)

♻️ Miscellaneous Chores

• add .release-please-manifest.json (9601e06)
• add egress network allowlist entries to all GitHub Actions workflows (9616592)
• add numbering prefix to newly ported commands (1e4ce06)
• add unigo binary to .gitignore (7b5ae61)
• bump version to 0.0.2 in release-please configuration (197b72c)
• bump version to 0.0.3 (652f05d)
• bump version to 0.0.4 (95b7ede)
• ci: disable goreleaser workflow (b3b83bf)
• clean up .bak files and update dependabot-sync workflow (9475a55)
• clear placeholder readme files in npm packages (06ceb45)
• configure root package for manifest mode (8b1c28b)
• correct sequential numbering for newly ported commands (093f326)
• deps: bump @commitlint/cli in the all-dependencies group (0a3d231)
• deps: bump mise to v2026.4.14 (2bf29e3)
• deps: bump postcss (7badf33)
• deps: bump the all-dependencies group in /docs with 2 updates (64b0880)
• deps: bump the all-dependencies group with 2 updates (5f6a1b3)
• deps: bump the all-dependencies group with 2 updates (f390fc0)
• deps: bump the all-dependencies group with 2 updates (43cddbb)
• deps: bump the all-dependencies group with 2 updates (76dac5a)
• deps: bump unirtm version to 0.25.3 (49f7888)
• deps: bump vite in /docs in the all-dependencies group (f3e5f8f)
• deps: bump vite in /docs in the all-dependencies group (8ed895d)
• deps: regenerate unirtm.lock with v0.25.0 format (9227ed1)
• deps: sync dependabot config and mise toolchain [skip ci] (b1f5025)
• deps: sync dependabot config and mise toolchain [skip ci] (99a5407)
• deps: sync dependabot config and mise toolchain [skip ci] (d11dc23)
• deps: sync dependabot config and mise toolchain [skip ci] (7bcbf01)
• deps: sync dependabot config and mise toolchain [skip ci] (f647663)
• deps: sync dependabot config and mise toolchain [skip ci] (cc12ad8)
• deps: sync dependabot config and mise toolchain [skip ci] (894db7f)
• deps: sync dependabot config and mise toolchain [skip ci] (c0de47a)
• deps: sync dependabot config and mise toolchain [skip ci] (3a449a5)
• deps: sync dependabot config and mise toolchain [skip ci] (3048ce8)
• deps: sync dependabot config and mise toolchain [skip ci] (060e7f0)
• deps: sync dependabot config and mise toolchain [skip ci] (c25be9a)
• deps: sync dependabot config and mise toolchain [skip ci] (51ca272)
• deps: sync dependabot config and mise toolchain [skip ci] (96489e5)
• deps: sync dependabot config and mise toolchain [skip ci] (cd4628a)
• deps: sync dependabot config and mise toolchain [skip ci] (4b105cd)
• deps: sync dependabot config and mise toolchain [skip ci] (7bdfbef)
• deps: sync dependabot config and mise toolchain [skip ci] (6078b1b)
• deps: sync dependabot config and mise toolchain [skip ci] (443e9f5)
• deps: sync dependabot config and mise toolchain [skip ci] (ad7782e)
• deps: sync dependabot config and mise toolchain [skip ci] (74e1355)
• deps: sync dependabot config and mise toolchain [skip ci] (6c009ed)
• deps: sync dependabot config and mise toolchain [skip ci] (5668326)
• deps: sync dependabot config and mise toolchain [skip ci] (816f2d1)
• deps: sync dependabot config and unirtm toolchain (59628d4)
• deps: sync dependabot config and unirtm toolchain (5169535)
• deps: sync dependabot config and unirtm toolchain (465c551)
• deps: sync dependabot config and unirtm toolchain (b70d42e)
• deps: sync dependabot config and unirtm toolchain (2de6141)
• deps: sync dependabot config and unirtm toolchain [skip ci] (c193711)
• deps: sync dependabot config and unirtm toolchain [skip ci] (629f2b2)
• deps: update mise to v2026.4.11 (fcb9b01)
• deps: update mise.lock with yamllint 1.38.0 (72a0ca1)
• deps: upgrade alpine builder base image to golang 1.26.4 (252a2be)
• deps: upgrade mise from 2026.4.14 to 2026.4.15 (df1e37e)
• devcontainer: remove debug echo statements (301cf52)
• devcontainer: replace MISE_ variables with UNIRTM_ and remove redundant HOST_HOME (26e7368)
• devcontainer: update devcontainer image to latest (5988d66)
• dev: release 0.4.0 (eced437)
• dev: release 0.4.0 (5416f9a)
• docs: explicitly add esbuild and vite to devDependencies for tracking (ea50d16)
• docs: rename package name from template to unigo (fc32058)
• docs: resolve esbuild and vite vulnerabilities via overrides (f39d782)
• downgrade go version from 1.26.4 to 1.26.3 (ff7c3e2)
• downgrade Go version to 1.24.0 and update asset download URLs (355d9d8)
• downgrade shfmt to v3.12.0 in unirtm.lock (2651bda)
• exclude addlicense testdata from generic pre-commit validations (14093f8)
• fine-tune pre-commit config to perfectly match UniRTM configuration (286f118)
• fix UniRTM reference in golangci-lint config comment (d1e15a6)
• formatting fixes and workflow updates (34fbbe8)
• generate package-lock.json files after migrating from pnpm to npm (972f7e8)
• improve devcontainer init script with better error handling and mise configuration (39493e2)
• main: release 0.0.1 (32370a4)
• main: release 0.0.2 (1296640)
• main: release 0.0.3 (d1e59d1)
• main: release 0.0.4 (673b664)
• main: release 0.0.4 (50f54df)
• main: release 0.0.4 (f0ef6ca)
• main: release 0.1.0 (eb020cd)
• main: release 0.10.0 (1139f92)
• main: release 0.11.0 (7e03bfd)
• main: release 0.12.0 (04ca93f)
• main: release 0.13.0 (0f9dd47)
• main: release 0.13.1 (07dea06)
• main: release 0.14.0 (0626ae4)
• main: release 0.14.0 (775a72f)
• main: release 0.14.0 (043d2a4)
• main: release 0.15.0 (6093285)
• main: release 0.2.0 (6707425)
• main: release 0.3.0 (2036489)
• main: release 0.4.0 (1c66ecb)
• main: release 0.5.0 (2e24c34)
• main: release 0.6.0 (f3c6b45)
• main: release 0.6.1 (c66f36b)
• main: release 0.7.0 (8b56095)
• main: release 0.7.0 (ae017c0)
• main: release 0.7.1 (907dec7)
• main: release 0.8.0 (de253c8)
• main: release 0.8.1 (661f828)
• main: release 0.8.2 (bdbb873)
• main: release 0.9.0 (2e6cf66)
• main: release 0.9.1 (bacb8c0)
• main: release 0.9.2 (748e5a8)
• merge upstream template updates (e52934d)
• mise: add PyYAML to core tools for YAML processing (fdfd2ee)
• pre-commit: remove duplicate online zizmor hook (0124b68)
• regenerate unirtm.lock with algorithm prefix (de2b74b)
• release 0.6.1 (f6fc042)
• release 0.7.1 (5535492)
• release main (7290dad)
• release main (40863d5)
• release main (f912256)
• release main (e0a7459)
• release main (5e48a77)
• release main (e715f5d)
• release main (14e1633)
• release main (cecfa9b)
• release main (f3d1a03)
• release main (d2b694c)
• release main (47bc9d2)
• release main (201d5db)
• release main (13ea78a)
• release main (88b235c)
• release main (782aa1a)
• release main (76bafd6)
• release: align .goreleaser.yaml with unirtm (1af870e)
• release: bump version to 0.0.5 across Dockerfiles and VERSION (8f6298d)
• release: bump version to 0.0.6 across manifest, VERSION, and Dockerfiles (24ddfda)
• release: configure root package in config (6d6254d)
• release: deduplicate CHANGELOG headers (53eabcf)
• release: deduplicate CHANGELOG headers (ece82fa)
• release: deduplicate CHANGELOG headers (639b069)
• release: force release-please to use 0.0.5 via release-as config (fef7d1d)
• release: remove legacy manifest file (64d599e)
• release: reset versions to 0.0.1 (08f9eec)
• release: synchronize lockfiles for version bump (ad0ea63)
• release: synchronize lockfiles for version bump (ea5dc5d)
• release: update packages to use docker prefix and add rocky support (81f21b2)
• release: update release-as version to 0.0.6 in release-please-config.json (713e552)
• release: update version to 0.0.6 in docker.yml (11f08b5)
• release: v0.4.0 - Fix Dependabot docker-compose detection (e91f7d8)
• remove .kiro/specs and update test command in unirtm.toml (d76deb8)
• remove harden-runner security audit from docker workflow (c376f0e)
• remove Makefile and mise.lock (4b63962)
• remove redundant generic go.yml workflow (3c21b25)
• remove temporary token audit report (50a73c7)
• remove unirtm.lock (2da4f50)
• remove unused package.json from project root (7648e2b)
• reset release-as versions to 0.0.1 and update docker.yml for unigo (cb5aa7b)
• set manifest version to 0.0.0 to allow release-please to trigger v0.0.1 release (07f31c8)
• sync upstream template changes for pre-commit and CI improvements (3ceda78)
• sync version numbers and add release-please markers for auto-update (6b40857)
• update cd workflow configuration (e06ee75)
• update dependencies in go.mod and go.sum (6b6f5ca)
• update Trivy scan skip-dirs from unirtm_data to unigo_data (f9771d3)
• update UniRTM template, IDE agent rules, and disable Goreleaser snap publishing (ff5d293)
• update zizmor configuration [skip ci] (9b58403)
• upgrade actions/checkout to v7.0.0 in goreleaser workflow (1330789)
• upgrade Go to 1.26.4 and shfmt to v3.13.1 (5f1a4a5)