v1.5.0

What's Changed

• docs(release): file v1.4.0 release evidence by @msambare in #32
• fix(v1.5.0): correctness & security fixes from post-v1.3 red-team (CSV injection + checker FNs) by @msambare in #33

Full Changelog: v1.4.0...v1.5.0

v1.4.0

What's Changed

• docs(release): file v1.3.0 release evidence by @msambare in #30
• feat(v1.4.0): image vulnerability layer via OSV.dev (SBOM CVE fusion) by @msambare in #31

Full Changelog: v1.3.0...v1.4.0

v1.3.0

What's Changed

• docs(release): file v1.2.0 release evidence by @msambare in #28
• feat(v1.3.0): 40 new security checks (110 → 150) + framework mappings by @msambare in #29

Full Changelog: v1.2.0...v1.3.0

v1.2.0

What's Changed

• docs(release): file v1.1.0 release evidence by @msambare in #26
• feat(v1.2.0): validating admission webhook — real-time deny/warn by @msambare in #27

Full Changelog: v1.1.0...v1.2.0

v1.1.0

What's Changed

• docs(release): file v1.0.0 release evidence; refresh krew manifest by @msambare in #22
• ci(e2e): make suite fully green — hermetic mocks + live-scan JSON fix by @msambare in #23
• docs(release): GHCR image public and verified — close final checklist item by @msambare in #24
• feat(v1.1.0): CEL custom policy engine + baseline/drift detection by @msambare in #25

Full Changelog: v1.0.0...v1.1.0

v1.0.0

What's Changed

• docs: fix exit-code, version, compliance, and gate-coverage accuracy by @msambare in #19
• feat(release): sign and attest container images, harden release gate by @msambare in #18
• ci(e2e): isolate mock Bats suite from preinstalled kubectl by @msambare in #17
• fix(core): red-team fixes — pathguard Windows CI, deadlock guard, governance reconcile by @msambare in #20
• test(fix,mcp): raise critical-path coverage to enforced 96% per-package floor by @msambare in #21

Full Changelog: v1.0.0-rc.1...v1.0.0

v1.0.0-rc.1

What's Changed

• fix(doc-gate): stop requiring internal audit closeout by @msambare in #8
• docs(readme): remove retired Go Report Card badge by @msambare in #9
• docs: v1.0 prep — compliance counts, orphaned pages, mcp-server reference by @msambare in #10
• fix(pathguard): restore Windows build with best-effort confined open by @msambare in #11
• feat(release): supply-chain hardening — SBOM, cosign, provenance, GHCR images by @msambare in #13
• ci(e2e): run kind+bats e2e suite nightly and on demand by @msambare in #12
• feat(ci): first-party GitHub Action for manifest scanning by @msambare in #14
• docs(release): v1.0.0 changelog, release notes, and governance updates by @msambare in #15
• ci(e2e): fix bats install permissions and teardown flag by @msambare in #16

Full Changelog: v0.5.0...v1.0.0-rc.1

v0.5.0

Full Changelog: v0.4.5...v0.5.0

v0.4.5

Full Changelog: v0.4.0...v0.4.5

v0.4.0

Full Changelog: v0.3.0...v0.4.0