14 commits since 0.43.0 (same-sandbox driver mode, driver-variant registry,
research-benchmark suite, OIDC-only publish). First release via tokenless OIDC
trusted publishing.