v1.1.0

Features

• Check proposed pre-commit hook dependency pins without changing the configuration (#31) by @gaborbernat.
• Export one selectable pylock.toml for a project's runtime dependencies, groups, extras, Python range, and platforms (#31) by @gaborbernat.

Bug fixes

• Ignore contextual pull request URLs when checking a changelog entry's linked author credit (#31) by @gaborbernat.

Removals

• Remove the unused package changelog CLI mode while keeping render_preview for Python callers (#31) by @gaborbernat.

PyPI release

Full Changelog

v1.0.1

Security

• Keep the required pull request check distinct from dispatch and push checks, so a skipped hook cooldown cannot satisfy branch protection (#30) by @gaborbernat.

PyPI release

Full Changelog

v1.0.0

Bug fixes

• Accept trailing slashes and the www.github.com host in verified release-note author links (#29) by @gaborbernat.
• Accept valid YAML comments and quoting in Knope changeset front matter during news validation (#29) by @gaborbernat.
• Apply one author credit to adjacent pull request references separated by whitespace or semicolons (#29) by @gaborbernat.
• Do not count reviewer mentions as pull request author credits (#29) by @gaborbernat.
• Escape URL punctuation when converting reStructuredText links to GitHub release Markdown (#29) by @gaborbernat.
• Finalize a CalVer prerelease in the current month before incrementing its patch number (#29) by @gaborbernat.
• Find the introducing commit for renamed fragments and fragments whose filenames contain non-ASCII characters (#29) by @gaborbernat.
• Identify fragment commits by full path so nested files with the same name cannot change pull request attribution (#29) by @gaborbernat.
• Ignore numeric fragments of unrelated bare URLs when checking release-note pull request credits (#29) by @gaborbernat.
• Ignore pull request references inside code when linking changelog fragments (#29) by @gaborbernat.
• Keep a numbered issue in a changelog entry when its digits only appear as the start of a longer pull request number (#29) by @gaborbernat.
• Keep direct dependencies in a flow-style list when a trailing comment contains the managed-pin marker (#29) by @gaborbernat.
• Keep fenced package headings inside their changelog section and reject unsupported pending fragment files in documentation previews (#29) by @gaborbernat.
• Keep generated hook dependency pins with a folded or literal dependency item when another YAML key follows it (#29) by @gaborbernat.
• Keep literal tildes in reStructuredText changelog entries when rendering GitHub Markdown (#29) by @gaborbernat.
• Leave fenced code examples unchanged when repairing Markdown release anchors (#29) by @gaborbernat.
• Match explicit GitHub author credits without case sensitivity and treat GitHub mannequin authors as unavailable accounts (#29) by @gaborbernat.
• Pin ranged and unpinned Python hook dependencies before they run in release preparation. Preserve the caller's version range across updates and reject YAML aliases that share an edited dependency list (#29) by @gaborbernat.
• Preserve comments on direct dependencies when updating a flow-style hook mapping (#29) by @gaborbernat.
• Preserve wrapped reStructuredText release notes and verify credits on short, repository-prefixed, and issue-form pull request links. Ignore pull request syntax inside code spans and blocks when checking credits (#29) by @gaborbernat.
• Reject misleading pull request labels and GitHub author links after resolving Markdown references and nested markup (#29) by @gaborbernat.
• Reject raw HTML hyperlinks in release entries so an @handle credit cannot point to another person (#29) by @gaborbernat.
• Reject release-note lines that embed markup inside a category anchor (#29) by @gaborbernat.
• Reject unsupported or empty changelog fragments in the pull request news check (#29) by @gaborbernat.
• Render package release anchors when the package name contains underscores (#29) by @gaborbernat.
• Require the merged pull request author in the fragment's author list; a later reviewer mention does not count as a credit (#29) by @gaborbernat.
• Rerun eligible hook cooldown checks daily so an unchanged bot update can become mergeable after seven days (#29) by @gaborbernat.
• Resolve Python hook dependencies for the manifest's language_version when the caller does not override it (#29) by @gaborbernat.
• Resolve hook dependencies from PyPI even when the caller sets uv or pip index and resolver environment variables (#29) by @gaborbernat.
• Stop package release notes at the next version anchor, even when the following heading is missing (#29) by @gaborbernat.

Breaking changes

• release-creator hooks now uses a seven-day package cutoff and each hook's configured Python version without --exclude-newer or --python-version options (#29) by @gaborbernat.

Security

• Ignore inherited SSL_CERT_DIR and SSL_CLIENT_CERT when resolving hook pins from PyPI (#29) by @gaborbernat.
• Reject YAML merge keys in hook definitions so shared dependencies cannot bypass exact pin updates (#29) by @gaborbernat.
• Reject duplicate pre-commit YAML keys so effective hook dependencies cannot bypass cooldown and pin updates (#29) by @gaborbernat.
• Reject repository-level YAML merge keys before refreshing hook pins, so a merged source cannot hide the hook package (#29) by @gaborbernat.

PyPI release

Full Changelog

v0.6.7

Bug fixes

• Keep a pull request mentioned in prose from inheriting the author credit of a later pull request (#27) by @gaborbernat.
• Reject unclosed Markdown code fences and keep indented fences from moving fragment links into code (#27) by @gaborbernat.
• Report a missing Git, GitHub CLI, or uv executable by name instead of raising a type error (#27) by @gaborbernat.

PyPI release

Full Changelog

v0.6.6

Bug fixes

• Restore draft changelog pages for repositories with several packages in one Markdown changelog (#26) by @gaborbernat.

PyPI release

Full Changelog

v0.6.5

Changes

• Accept a symlinked plugin archive when its ZIP members match the Marketplace upload (#25) by @gaborbernat.

Bug fixes

• Keep fragment links outside trailing Markdown and RST code blocks (#25) by @gaborbernat.
• Keep frozen hook dependency pins attached to the correct hook across YAML styles (#25) by @gaborbernat.
• Reject GitHub release notes whose pull request credits do not match the merged authors (#25) by @gaborbernat.

Removals

• Stop validating surrounding whitespace in Marketplace plugin IDs and versions and content in ZIP directory entries (#25) by @gaborbernat.
• Stop validating GitHub author handle syntax and 40-character Git commit IDs before querying GitHub (#25) by @gaborbernat.
• Remove specific missing Git, GitHub CLI, and uv errors from fragment and hook commands; missing executables surface as a type error (#25) by @gaborbernat.

PyPI release

Full Changelog

v0.6.4

Changes

• Remove unused artifact reconciliation, package changelog preview, stable-tag filtering, and numbered-PR fragment options (#22) by @gaborbernat.

Bug fixes

• Keep hook dependency pins with their own hook when the pre-commit configuration uses block or flow YAML, and resolve ranged root requirements (#22) by @gaborbernat.
• Match contributor credits to the final pull request on each generated-notes line, escape RST text in GitHub Markdown, and place fragment links outside trailing code blocks (#22) by @gaborbernat.

PyPI release

Full Changelog

v0.6.3

Changes

• Show Full Changelog as a named link in GitHub Release notes and keep release headings nested in the Sphinx changelog (#21) by @gaborbernat.

PyPI release

Full Changelog

v0.6.2

Documentation

• Keep the release-creator documentation site and its versioned changelog in reStructuredText (#19) by @gaborbernat.

PyPI release

Full Changelog

v0.6.1

Bug fixes

• Accept Knope changelog sections configured with footers and no changeset types (#18) by @gaborbernat.
• Apply timeouts to the Git and Towncrier commands used for fragment checks and identify the full command when it times out (#18) by @gaborbernat.
• Ignore Towncrier guide and marker files in PR news checks, reject malformed fragment suffixes, and report unsupported Towncrier layouts clearly (#18) by @gaborbernat.
• Reject unknown files and renamed fragments in PR news checks while ignoring editor backup files (#18) by @gaborbernat.
• Resolve fragment pull requests in bounded batches, reject unmerged numbered requests, and credit deleted GitHub accounts as ghost (#18) by @gaborbernat.

PyPI release

Full Changelog