v0.3.1

What's Changed

• build(deps): bump the github-actions group across 1 directory with 7 updates by @dependabot[bot] in #77
• build(deps-dev): bump the python-dependencies group across 1 directory with 3 updates by @dependabot[bot] in #81
• ci: lock installed-wheel dependency checks by @dannysauer in #94
• fix: isolate release scanning from publication by @dannysauer in #105
• fix: harden untrusted input boundaries by @dannysauer in #106
• chore: add governance drift checks [skip release] by @dannysauer in #107
• fix: harden OSV and generated output boundaries by @dannysauer in #108

Full Changelog: v0.3.0...v0.3.1