release: v0.9.8 — code-review-driven hardening (fuzz, coverage, lint, lib split)#27

Merged

Metbcy merged 9 commits into

mainfrom

Apr 30, 2026

Commits on Apr 30, 2026

ci: cargo-llvm-cov coverage job + sticky PR comment (no fail-under yet)

Metbcy
and
Copilot
committed
feat(fuzz): cargo-fuzz targets for cyclonedx/spdx/syft + scheduled CI

Metbcy
and
Copilot
committed
chore(safety): document all unsafe blocks + lint to enforce

Metbcy
and
Copilot
committed
chore(lib): warn on unwrap/expect/panic + audit production sites

Metbcy
and
Copilot
committed
refactor(lib): extract run_diff orchestration into src/run.rs

Metbcy
and
Copilot
committed
merge: v0.9.8 rust (SAFETY comments, unwrap-lint, run.rs extraction)
Metbcy
committed
merge: v0.9.8 platform (cargo-llvm-cov coverage job, cargo-fuzz targets)
Metbcy
committed
chore(release): prepare v0.9.8

Metbcy
and
Copilot
committed
fix(fuzz): bring SbomParser trait into scope in fuzz targets

Metbcy
and
Copilot
committed