Skip to content

Releases: vaam-apps/.github

Release list

v0.2.1

v0.2.1 Latest
Latest

Choose a tag to compare

View all tags
@vaam-apps vaam-apps released this 21 Sep 14:19
v0.2.1
2e736e4
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

0.2.1 (2026-09-19)

Documentation

  • releasing: a language release-type derives a component and then cannot tag itself (bc19b6a)
Assets 2
Loading

v0.2.0

v0.2.0

Choose a tag to compare

View all tags
@vaam-apps vaam-apps released this 19 Sep 08:01
v0.2.0
747fe2d
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

0.2.0 (2026-09-19)

Features

  • add ai-governance issue templates (#2) (2f06d3e)
  • ci: add a reusable sync-repo-settings workflow (#7) (686295f)
  • governance: add org-wide PR template and PR governance workflow (#4) (cdf7d2b)
  • let trivy gate without uploading SARIF (8231877)
  • org-wide SAST, linting, Trivy and issue-governance workflows (7605ffc)
  • pass ignore files to Trivy explicitly (24fa3b0)

Bug Fixes

  • check out the merge ref super-linter needs, replay fixes onto the head (6dac296)
  • clear the failure comment when an issue starts conforming (1a919e2)
  • lint: stop MD024 failing every release-please changelog (#8) (b04a3ff)
  • mint the App token with client-id, and let shfmt actually run (16f86a4)
  • only commit when there is a tracked change to commit (c3c6bc3)
  • stop blocking on the SARIF processing poll (5569c8a)
  • upload SARIF as the App via the public endpoint (d9c2a1b)

Refactoring

  • upload SARIF with GITHUB_TOKEN, not the org App (2278bc3)

Documentation

  • adr: propose an SSDLC and CPSA strategy for the org (#5) (d673060)
  • architecture docs as preferred source of truth, plus SSDLC control map (#1) (54af9a3)
  • governance: one source of truth for the mandatory arc42 sections (#6) (57da409)
  • how releases work org-wide, and the ten ways they have failed silently (#9) (38266fa)
  • releasing: internal path dependencies, and when NOT to use release-type dart (e26463f)
  • releasing: PR_TITLE only governs squash, and the skills repos are a deliberate exception (187fa65)
  • releasing: squash-only is now set org-wide; record the canonical shape (8fd63e6)
  • releasing: ten repos, not nine — the private one was missed (ba8bfa3)
  • releasing: token scoping, the changed-files lint gap, and Dart build numbers (8a70317)

Continuous Integration

  • adopt release-please for this repo's own changelog and tag (#10) (310ee37)

Chores

  • A/B the SARIF upload with both tokens in one run (ef716fb)
  • probe the Actions permission, stop super-linter commenting (ab3bbe0)
  • probe what the App token can reach, drop the YAML prettier fix (2a95142)
Loading