Release v0.2.0 · vaam-apps/.github

0.2.0 (2026-09-19)

add ai-governance issue templates (#2) (2f06d3e)
ci: add a reusable sync-repo-settings workflow (#7) (686295f)
governance: add org-wide PR template and PR governance workflow (#4) (cdf7d2b)
let trivy gate without uploading SARIF (8231877)
org-wide SAST, linting, Trivy and issue-governance workflows (7605ffc)
pass ignore files to Trivy explicitly (24fa3b0)

check out the merge ref super-linter needs, replay fixes onto the head (6dac296)
clear the failure comment when an issue starts conforming (1a919e2)
lint: stop MD024 failing every release-please changelog (#8) (b04a3ff)
mint the App token with client-id, and let shfmt actually run (16f86a4)
only commit when there is a tracked change to commit (c3c6bc3)
stop blocking on the SARIF processing poll (5569c8a)
upload SARIF as the App via the public endpoint (d9c2a1b)

adr: propose an SSDLC and CPSA strategy for the org (#5) (d673060)
architecture docs as preferred source of truth, plus SSDLC control map (#1) (54af9a3)
governance: one source of truth for the mandatory arc42 sections (#6) (57da409)
how releases work org-wide, and the ten ways they have failed silently (#9) (38266fa)
releasing: internal path dependencies, and when NOT to use release-type dart (e26463f)
releasing: PR_TITLE only governs squash, and the skills repos are a deliberate exception (187fa65)
releasing: squash-only is now set org-wide; record the canonical shape (8fd63e6)
releasing: ten repos, not nine — the private one was missed (ba8bfa3)
releasing: token scoping, the changed-files lint gap, and Dart build numbers (8a70317)