ZstdScope v0.3.0

Package versions

• zstdscope: remains at 0.2.0; no parser or public Rust API release is required.
• zstdscope-cli: 0.3.0; first crates.io release of the CLI package.

Breaking changes

• zstdscope inspect --json now emits an explicit schema-version-1 DTO instead of serializing the public Rust model directly.
• The top-level document includes "schema_version": 1.
• Values originating from Rust u64 fields are decimal strings rather than JSON numbers. This includes input size, byte offsets and lengths, derived window size, and Frame Content Size values.
• Existing JSON consumers must parse those decimal strings explicitly, for example with BigInt in JavaScript when exact arithmetic is required.

Added

• Dedicated private CLI JSON DTOs, decoupled from future Rust model refactors.
• Explicit CLI JSON compatibility and breaking-change policy.
• crates.io packaging metadata for zstdscope-cli; the package installs the zstdscope binary.
• Package-boundary publish dry-run, install, --version, text-output, and JSON smoke tests.
• Immutable GitHub Actions revisions, least-privilege permissions, superseded-PR cancellation, and job timeouts.
• cargo-deny advisory, license, dependency-ban, and source checks.
• Weekly Dependabot updates for Cargo and GitHub Actions.
• wasm32-unknown-unknown compile-only coverage for the dependency-light core crate.

Unchanged

• Zstandard parsing and validation behavior.
• Public Rust API of the zstdscope library.
• Human-readable CLI output.
• Bounds checking, resource-limit semantics, and malformed-input handling.