v0.5.0

Changelog

Features

• feat(analyze): flag the span a dead process left open
• feat(ingest): accept process gauges on /v1/metrics
• feat(sdk): sample process cpu and rss against the open span
• feat(store): record process resource samples per span
• feat(tui): mark a run whose process died
• feat(tui): show the last reading and mark a span left open
• feat: add LangSmith export, fix phoenix llm content roles
• feat: add a CI template that gates PRs on findings
• feat: add answer-relevance llm judge and a composite CI action
• feat: braille resource graphs with gpu, live during a run
• feat: convert Arize Phoenix traces to capybara's import jsonl
• feat: convert Langfuse traces to capybara's import jsonl

Fixes

• fix(ci): pin cosign-installer to a tag that exists
• fix(ci): sign into a sigstore bundle
• fix: bump goldmark and x/text past known CVEs
• fix: harden replay entrypoint, tui rendering, and otlp http intake
• fix: migrate langfuse export to the v2 observations api
• fix: migrate langsmith export to the v2 runs api
• fix: tui layout gaps, duration overflow, and pane-focus clarity

Dependencies

• build(deps): bump actions/checkout from 4 to 7 (#5)
• build(deps): bump actions/download-artifact from 4 to 8 (#12)
• build(deps): bump actions/setup-go from 6 to 7 (#7)
• build(deps): bump actions/setup-node from 4 to 7 (#3)
• build(deps): bump actions/upload-artifact from 4 to 7 (#8)
• build(deps): bump astral-sh/setup-uv from 5 to 7 (#1)
• build(deps): bump go.opentelemetry.io/collector/pdata (#9)
• build(deps): bump google.golang.org/grpc from 1.83.0 to 1.83.1 (#10)
• build(deps): bump google.golang.org/grpc from 1.83.1 to 1.83.2 (#13)
• build(deps): bump modernc.org/sqlite from 1.54.0 to 1.57.0 (#11)

Other

• added monitoring (suggested by @mahoangbaongoc2002)

---

Verify a download against the signed checksums:

cosign verify-blob checksums.txt \
  --bundle checksums.txt.sigstore.json \
  --certificate-identity-regexp 'https://github.com/tonquoc0407/capybara/.*' \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com
sha256sum --check --ignore-missing checksums.txt