docs: complete v0.1.8 release with documentation improvements and workflow updates#13
Merged
ramonclaudio merged 13 commits intomainfrom Sep 6, 2025
Merged
Conversation
- Add "setup", "template", "ai", "agents", "hooks", and "config" keywords - Align keywords with package.json for consistency - Update abstract to match new project tagline - Improve citation metadata completeness
- Update description to new tagline emphasizing "just works" value proposition - Add CITATION.cff to files array for npm package inclusion - Add packageManager field specifying npm@11.6.0 - Add stability field marking package as stable - Add private: false for clarity - Bump version to 0.1.8
- Update tagline to emphasize "just works" value proposition - Add shortcuts section showcasing cld alias and npx usage - Add comprehensive Security section highlighting OpenSSF certification - Add Contributing section with validation workflow reference - Expand Links section to include Security documentation - Improve overall developer experience and project discoverability
- Document new project tagline emphasizing "just works" messaging - Record README.md enhancements including Security and Contributing sections - Note CITATION.cff keyword expansions for academic discoverability - Document package.json metadata improvements and file inclusions - Capture improved project messaging and value proposition refinements
- Update version example from 0.1.6 → 0.1.7 to 0.1.7 → 0.1.8 - Keep security documentation current with latest version
- Upgrade step-security/harden-runner to v2.12.0 with CVE-2025-32955 fix - Update actions/checkout to v5.0.0 with Node.js 24 runtime support - Enhance workflow security and performance following v0.1.8 updates
- Update Node.js runtime to v22 LTS for active maintenance support - Upgrade actions/checkout to v5.0.0 with improved caching - Upgrade actions/setup-node to v5.0.0 with enhanced package manager detection - Update npm to v11.6.0 for latest features and security patches
- Replace Jest with native Node.js test runner for better reliability - Update actions/checkout to v5.0.0 with Node.js 24 runtime support - Update actions/setup-node to v5.0.0 with enhanced caching - Resolve async issues in robustness tests that were causing CI failures
- Upgrade actions/attest-build-provenance to v3.0.0 with node24 runtime - Add minisign cryptographic signing with proper trusted comments - Update actions/upload-artifact to v4.6.2 with critical security updates - Upgrade softprops/action-gh-release to v2.3.2 with improved release management - Add Microsoft SBOM tool v4.1.2 with SPDX 3.0 support - Enhance supply chain security with verified commit hashes
- Upgrade ossf/scorecard-action to v2.4.2 with Scorecard v5.2.1 - Update actions/checkout to v5.0.0 with Node.js 24 runtime support - Upgrade actions/upload-artifact to v4.6.2 with security updates - Enhance security checks and health metrics collection
- Upgrade github/codeql-action to v2.23.0 with latest CodeQL CLI - Update actions/checkout to v5.0.0 with Node.js 24 runtime support - Fix CodeQL workflow permissions by moving security-events to job level - Enhance static analysis with improved vulnerability detection
- Add minisign.pub with key AB1267BB829E9492 for release signature verification - Enable users to verify package integrity using minisign - Part of enhanced cryptographic signing implementation - Follows official minisign specification with trusted comments
- Update lockfile with npm@11.6.0 for latest security patches - Refresh dependency tree following package.json metadata updates - Ensure consistent package manager version across development and CI
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Complete the v0.1.8 release with comprehensive documentation improvements, CI/CD workflow updates, and security enhancements.
Type of Change
Related Issues
Completes v0.1.8 release cycle with documentation and workflow modernization.
Changes Made
Documentation Enhancements
cldalias, Security section highlighting OpenSSF certification, and Contributing guidelinesCI/CD Workflow Updates
Security Improvements
Testing
Checklist
Review Notes
This completes the v0.1.8 release with improved messaging, enhanced documentation, and modernized CI/CD workflows. All commits are signed and follow commit message conventions.