v0.7.0

What's Changed

• ci: make release workflow dispatchable by @ubugeeei in #49
• fix(shell): use sigaction and a checked pid cast in signal helpers by @ubugeeei in #66
• fix(compiler): remove panics on control-flow dispatch and silent canonicalize fallback by @ubugeeei in #67
• refactor(test): extract shared deadline-poll helper for signal/port tests by @ubugeeei in #70
• ci: add macOS test matrix, MSRV gate, and cargo-audit job by @ubugeeei in #68
• docs: add SECURITY, CONTRIBUTING, CHANGELOG, and issue/PR templates by @ubugeeei in #69
• ci: run no_std compiler tests, not just cargo check by @ubugeeei in #71
• ci: watch vendored rustyline against crates.io on a weekly cron by @ubugeeei in #73
• ci(release): add linux-aarch64 build and run tests per target by @ubugeeei in #72
• ci: gate parser and compile benchmarks against the main baseline by @ubugeeei in #74
• fix(compiler): enforce match exhaustiveness in the effects pass by @ubugeeei in #75
• chore: add .editorconfig for consistent editor settings by @ubugeeei in #77
• fix(install): harden install.sh (umask, pipefail, TLS pinning) by @ubugeeei in #76
• ci: add Shellcheck workflow for install.sh and scripts/ by @ubugeeei in #78
• ci: add cargo-deny check for licenses, sources, and advisories by @ubugeeei in #79
• ci: gate every example .ush through 'ush check' by @ubugeeei in #80
• docs(readme): add CI, shellcheck, dependencies, and license badges by @ubugeeei in #81
• build(docker): add .dockerignore and run as a non-root user by @ubugeeei in #82
• build: tighten the release profile (LTO, strip, single CU, panic=abort) by @ubugeeei in #83
• docs(changelog): record the production-readiness pass under [Unreleased] by @ubugeeei in #84
• fix(format): treat #[attr] as an attribute, not as a line comment by @ubugeeei in #85
• ci: add CodeQL SAST workflow for Rust by @ubugeeei in #86
• ci: add Gitleaks secret-scan workflow by @ubugeeei in #87
• ci: add CODEOWNERS and re-enable Dependabot for github-actions only by @ubugeeei in #88
• test(cli): add CLI smoke tests for --version, --help, unknown flag, -c by @ubugeeei in #89
• ci: gate cargo doc with RUSTDOCFLAGS=-D warnings by @ubugeeei in #90
• ci: auto-label PRs by changed paths by @ubugeeei in #91
• chore: bump MSRV to 1.88 and re-format the workspace for stable rustfmt by @ubugeeei in #93
• feat(lsp): add --version / --help flags and pin them with smoke tests by @ubugeeei in #94
• build: enrich Cargo.toml metadata for every workspace crate by @ubugeeei in #95
• build: enforce workspace-wide lints against todo!/dbg!/unimplemented! by @ubugeeei in #96
• docs(contributing): update local-CI list to match current main by @ubugeeei in #97
• docs(cli): document every ush subcommand in --help output by @ubugeeei in #98
• ci: allow BSL-1.0 in cargo-deny so vendored rustyline deps pass by @ubugeeei in #99
• ci: include cargo-deny bans in the gated check set (warn-level) by @ubugeeei in #100
• docs(cli): document every top-level ush flag in --help output by @ubugeeei in #101
• docs: document the release process (pre-flight, artefacts, rollback) by @ubugeeei in #102
• build: mark apps/ush and apps/ush_lsp as publish = false by @ubugeeei in #103
• chore: expand .gitignore for cargo caches, profiling, env, IDEs by @ubugeeei in #104
• test(cli): extend smoke suite with ush compile and ush check by @ubugeeei in #105
• ci: stop cancelling main-branch runs on every subsequent push by @ubugeeei in #106
• chore: add scripts/preflight.sh as a one-command CI mirror by @ubugeeei in #107
• feat(ush): install a user-facing panic hook on the CLI entrypoint by @ubugeeei in #108
• chore(release): bump version to 0.7.0 by @ubugeeei in #109

Full Changelog: v0.6.1...v0.7.0