v0.13.0

0.13.0 (2026-04-28)

Features

• ci: enable auto-merge for ALL dependabot updates including major (9c8bae2)
• deps: consolidate all dependabot updates into single PR (e753902)

Bug Fixes

• deps: correct devcontainers directory to root (9d83806)
• deps: exclude .devcontainer from docker ecosystem detection (67e96c3)

v0.12.0

0.12.0 (2026-04-27)

Features

• security: add CDN and download mirror endpoints to harden runner (3ff8a5d)
• security: add DockerHub endpoints to harden runner (48b6416)

v0.11.0

0.11.0 (2026-04-24)

Features

• ci: add GitHub API rate limit info to summary reports (8c4293a)
• deps: optimize dependabot configuration and grouping strategy (900f3af)

Bug Fixes

• ci: replace head -n -1 with sed for macOS compatibility (67aaa95)
• deps: correct indentation in test script for editorconfig compliance (0a44088)

v0.10.0

0.10.0 (2026-04-22)

Features

• add rocket icon to performance workflow name (e6a6146)

v0.9.2

0.9.2 (2026-04-20)

Bug Fixes

• lint: ensure pre-commit runs exactly 2 times, not 3 (4085676)
• release: set separate-pull-requests to false for unified PR (07054f5)

v0.9.1

0.9.1 (2026-04-20)

Bug Fixes

• lint: ignore CHANGELOG.md in all directories for markdownlint (ebe338c)

v0.9.0

0.9.0 (2026-04-19)

Features

• lint: add two-pass auto-fix mechanism to make lint (9fba0f1)

Bug Fixes

• lint: restore color output in Pass 1 auto-fix stage (fe3d523)

v0.8.2

0.8.2 (2026-04-19)

Bug Fixes

• ci: add GITHUB_TOKEN to all make commands for API rate limit prevention (2060bca)
• ci: skip DCO check for snowdream user in release-please PRs (dde607b)
• ci: use GITHUB_TOKEN for release-please to prevent tag creation issues (73266aa)

Reverts

• ci: restore WORKFLOW_SECRET fallback for release-please (4a1956b)

v0.8.1

0.8.1 (2026-04-19)

Bug Fixes

• ci: resolve Docker Buildx container restart race condition (01a1c2d)

v0.7.0

0.7.0 (2026-04-18)

Features

• ci: add centralized Harden Runner endpoints configuration (5389a6e)
• ci: sync Harden Runner endpoints from centralized config (48b4221)
• docker: add docker-compose file detection for hadolint and dockerfile-utils (836880d)
• make: add sync-harden-runner target for workflow endpoint management (d24708d)

Bug Fixes

• ci: add missing endpoints for trivy and sigstore (115a19d)
• ci: restrict release-please to main branch only (0db8a91)
• scripts: ensure summary table displays by default (a0d1b69)
• scripts: install PyYAML via pip instead of pipx in sync-harden-runner (16285a8)
• scripts: prevent sync-harden-runner from deleting workflow content (32a4228)