v0.6.56

What's Changed

• fix(resolve): count exclusive providers per target by @johngrantdev in #46
• chore(release): bump to 0.6.56 by @johngrantdev in #47

Full Changelog: v0.6.55...v0.6.56

v0.6.55

What's Changed

• feat(build): read no library at generate or build by @johngrantdev in #41
• feat(import): refuse an edited tracked module by @johngrantdev in #42
• feat(fetch): refresh tracked modules from CI by @johngrantdev in #43
• docs(tutorial): show a tracked copy in the walkthrough by @johngrantdev in #44
• chore(release): bump to 0.6.55 by @johngrantdev in #45

Full Changelog: v0.6.54...v0.6.55

v0.6.54

What's Changed

• fix(import): list a held module and skip nested ones by @johngrantdev in #39
• chore(release): bump to 0.6.54 by @johngrantdev in #40

Full Changelog: v0.6.53...v0.6.54

v0.6.53

What's Changed

• fix(emit): relocate /usr/local like /opt by @johngrantdev in #37
• chore(release): bump to 0.6.53 by @johngrantdev in #38

Full Changelog: v0.6.52...v0.6.53

v0.6.52

What's Changed

• test: adopt cargo-mutants by @johngrantdev in #25
• chore(deps): bump common by @johngrantdev in #26
• refactor(parsers): use maintained decoders by @johngrantdev in #28
• test: fuzz untrusted-input parsers by @johngrantdev in #29
• fix: refuse the ext transport for asset pins by @johngrantdev in #30
• fix: lint audit by @johngrantdev in #31
• chore(deps): bump common by @johngrantdev in #32
• feat: add the threat model and close trust gaps by @johngrantdev in #33
• fix: order nothing for an after with no provider by @johngrantdev in #35
• chore(release): bump to 0.6.52 by @johngrantdev in #36

Full Changelog: v0.6.51...v0.6.52

v0.6.51

What's Changed

• ci: enforce DCO on pull requests by @johngrantdev in #11
• docs: rewrite the project README by @johngrantdev in #12
• docs: document repository scaffold paths by @johngrantdev in #13
• fix(create): prompt for module declarations by @johngrantdev in #14
• ci: enforce dependency policy by @johngrantdev in #15
• feat: simplify repository editing by @johngrantdev in #16
• test: adopt nextest runner by @johngrantdev in #17
• test: adopt insta snapshots by @johngrantdev in #18
• test: refactor tests by @johngrantdev in #19
• test: give each flow case its own setup by @johngrantdev in #20
• feat(schema): file versions, typed sources, declared libraries by @johngrantdev in #21
• feat(import): group modules and map providers by @johngrantdev in #22
• docs: update tutorial by @johngrantdev in #23
• chore(release): bump to 0.6.51 by @johngrantdev in #24

Full Changelog: v0.6.50...v0.6.51

v0.6.50

What's Changed

• docs: add governance files and a Scorecard workflow by @johngrantdev in #6
• feat: add a security-policy network rule by @johngrantdev in #7
• feat: nested modules, generated scripts and a docs site by @johngrantdev in #8
• fix: bump common, pin choices read optional by @johngrantdev in #9
• chore(release): bump to 0.6.50 by @johngrantdev in #10

Full Changelog: v0.6.49...v0.6.50

v0.6.49

What's Changed

• ci: check that a pull request title is typed by @johngrantdev in #1
• ci: cap a pull request title at 64 characters by @johngrantdev in #2
• build: pin the rust toolchain and test on rust-version by @johngrantdev in #3
• feat(release): ship an SBOM with each release by @johngrantdev in #4
• chore(release): bump to 0.6.49 by @johngrantdev in #5

New Contributors

• @johngrantdev made their first contribution in #1

Full Changelog: v0.6.48...v0.6.49

v0.6.48

Full Changelog: v0.6.47...v0.6.48

v0.6.47

Migration for boot/uki consumers. This release carries the UKI chain
schema and the pcr-signing key profile that the collection's boot/uki
module declares. A repository that already imports boot/uki must run
tect create key pcr before its next generate or build, or the module
declares a key with no public half.

Provisional. The UKI chain's on-machine proofs are not complete; a
re-cut will follow when they are.

Full Changelog: v0.6.46...v0.6.47