Skip to content

Sentinel v0.1.1 Maintenance Release

Choose a tag to compare

@vedantggwp vedantggwp released this 01 Jun 01:49
· 16 commits to main since this release

Sentinel v0.1.1 Maintenance Release

Maintenance release focused on public OSS readiness and security posture.

Security and Reliability

  • Added CodeQL scanning for Python and JavaScript/TypeScript.
  • Fixed a CodeQL-reported high-severity polynomial regular expression risk in
    scarcity-claim extraction.
  • Added regression coverage for bounded scarcity-claim parsing, including a
    long-space adversarial input.
  • Added frontend npm audit --audit-level=moderate to CI.
  • Resolved the frontend PostCSS advisory with a narrow postcss@8.5.15
    override; npm audit now reports 0 vulnerabilities.

Maintainer Automation

  • Expanded CI to cover backend tests, seed eval, frontend audit, lint, and build.
  • Added Dependabot schedules for GitHub Actions, pip, and frontend npm packages.
  • Grouped React and React-DOM updates so runtime package bumps are reviewed
    together.
  • Deferred ESLint semver-major updates until the migration can be handled
    intentionally.

Verification