Skip to content

Releases: xeonvs/open-code-review-toolkit

Release list

v0.2.0

Choose a tag to compare

@github-actions github-actions released this 21 Jul 09:33
Immutable release. Only release title and notes can be modified.
11a526e

0.2.0 - 2026-07-21

Features

  • Target Open Code Review 1.7.14 in preflight validation and the checksum-pinned GitLab CI example. (#11)
  • Replace the ambiguous /ocr keep and /ocr skip discussion replies with /ocr resolve and /ocr suppress, preserve human-owned deduplication, and document the complete GitLab review lifecycle for developers and CI operators. (#8)

Bug fixes

  • Allow stable release verification to coexist with previously published development builds of the same base version on TestPyPI. (#10)
  • Treat ordinary merged pull requests as a successful no-op in the production release workflow while keeping release-branch authorization fail-closed. (#7)

Security

  • Mark every source-distribution smoke install as hash-required while retaining the no-dependency boundary, and document the single-maintainer security posture and Scorecard triage policy. (#6)

Documentation

  • Reduce the routine Ubuntu CI matrix to the supported Python 3.10 and 3.14 endpoints, matching the macOS matrix. (#10)
  • Document accepted project decisions, their optional ocr-accept marker convention, and the guard that prevents a merge request from whitelisting its own findings. (#11)

v0.1.0

Choose a tag to compare

@github-actions github-actions released this 20 Jul 11:32
Immutable release. Only release title and notes can be modified.
96d6d33

0.1.0 - 2026-07-20

Features

  • Publish one deterministic, checksum-verified TestPyPI development build after every merge into main, with bounded registry downloads and idempotent reruns. (#4)
  • Target Open Code Review 1.7.13 in preflight validation and the pinned GitLab CI example. (#4)
  • Support and continuously test Python 3.14 while retaining Python 3.10-3.13 compatibility. (#4)
  • Publish reproducible 0.1.0 distributions to TestPyPI and PyPI with exact hash verification, provenance attestations, and immutable GitHub Release assets.
  • Introduce the standalone ocr-ci toolkit with safe context generation, GitLab posting, runtime configuration, MCP configuration, and preflight checks.

Bug fixes

  • Bind production release smoke tests to the exact reviewed wheel and sdist hashes, with bounded HTTPS downloads from TestPyPI and PyPI. (#4)
  • Use OCR_REVIEW_LANGUAGE as the single safe language setting for OCR configuration and generated review context, with English as the default and Russian as an explicit option. (#4)
  • Preserve bounded context and version discovery with a 7,950-character ceiling, improve provider billing classification, and prevent cross-file remapping of findings that already name a path. (#3)

Security

  • Require secure credential endpoints, block unsafe GitLab redirects, redact secret-shaped environment values, and reduce GitHub Actions credential persistence and permissions. (#3)

Documentation

  • Document the checksum-verified TestPyPI prerelease path used before the public stable release. (#2)

Changelog

Changes for each release are assembled from changelog.d/ by Towncrier.