chore(release): hooray 0.9.0 - #338
Merged
Merged
Conversation
## 0.9.0 (2026-09-22) ### Features - **scanners:** IaC checks for docker-compose and GitHub Actions (3a6cbe6) ### Bug Fixes - **parsers:** resolve lockfile edge, scope, and abort defects from audit (985a893) - **reports:** harden SBOM ingestion, renderers, model, monitor, and store (362111e) - **parity:** harden corpus loading, comparison keys, gates, and recording validation (7767d39) - **parsers:** harden archive readers and expose OCI filesystem builder (99a1f78) - **engine:** harden OSV matching, graph classification, and input handling (0a5caaa) - **scanners:** close audit findings in secret, IaC, service-config, SAST, and license (9ec9d45) - **parsers:** resolve quoted and multi-version Yarn classic dependencies (9a7fa8a) - **store:** require FULL synchronous for commit durability (35e3491) - **risk:** rank Unknown severity above Low in severity_points (43cee0a) - **input:** bound serde_yaml alias expansion on untrusted lockfiles (9a24589) - **parsers:** accept multi-document pnpm-lock.yaml (#337) (2f1cd6f) ### Other Changes - **ci:** align dependabot naming with hoolicy policy (#116) (de8f062) - **parity:** harden recording integrity and corpus coverage assertions (54112a3) - bump actions/github-script from 8.0.0 to 9.0.0 (#117) (847f10b) - bump rusqlite from 0.37.0 to 0.40.2 (#118) (776a160) - bump zstd from 0.13.3 to 0.14.0 (#119) (1c59e21) - bump toml from 0.9.12+spec-1.1.0 to 1.1.6+spec-1.1.0 (#120) (9ed037b)
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
0.9.0 (2026-09-22)
Features
Bug Fixes
Other Changes