Releases: xeonvs/open-code-review-toolkit
Releases · xeonvs/open-code-review-toolkit
Release list
v0.2.0
Immutable
release. Only release title and notes can be modified.
0.2.0 - 2026-07-21
Features
- Target Open Code Review 1.7.14 in preflight validation and the checksum-pinned GitLab CI example. (#11)
- Replace the ambiguous
/ocr keepand/ocr skipdiscussion replies with/ocr resolveand/ocr suppress, preserve human-owned deduplication, and document the complete GitLab review lifecycle for developers and CI operators. (#8)
Bug fixes
- Allow stable release verification to coexist with previously published development builds of the same base version on TestPyPI. (#10)
- Treat ordinary merged pull requests as a successful no-op in the production release workflow while keeping release-branch authorization fail-closed. (#7)
Security
- Mark every source-distribution smoke install as hash-required while retaining the no-dependency boundary, and document the single-maintainer security posture and Scorecard triage policy. (#6)
Documentation
v0.1.0
Immutable
release. Only release title and notes can be modified.
0.1.0 - 2026-07-20
Features
- Publish one deterministic, checksum-verified TestPyPI development build after every merge into
main, with bounded registry downloads and idempotent reruns. (#4) - Target Open Code Review 1.7.13 in preflight validation and the pinned GitLab CI example. (#4)
- Support and continuously test Python 3.14 while retaining Python 3.10-3.13 compatibility. (#4)
- Publish reproducible 0.1.0 distributions to TestPyPI and PyPI with exact hash verification, provenance attestations, and immutable GitHub Release assets.
- Introduce the standalone
ocr-citoolkit with safe context generation, GitLab posting, runtime configuration, MCP configuration, and preflight checks.
Bug fixes
- Bind production release smoke tests to the exact reviewed wheel and sdist hashes, with bounded HTTPS downloads from TestPyPI and PyPI. (#4)
- Use
OCR_REVIEW_LANGUAGEas the single safe language setting for OCR configuration and generated review context, with English as the default and Russian as an explicit option. (#4) - Preserve bounded context and version discovery with a 7,950-character ceiling, improve provider billing classification, and prevent cross-file remapping of findings that already name a path. (#3)
Security
- Require secure credential endpoints, block unsafe GitLab redirects, redact secret-shaped environment values, and reduce GitHub Actions credential persistence and permissions. (#3)
Documentation
- Document the checksum-verified TestPyPI prerelease path used before the public stable release. (#2)
Changelog
Changes for each release are assembled from changelog.d/ by Towncrier.