What's Changed
- chore(deps): Bump quinn-proto from 0.11.13 to 0.11.14 in the cargo group across 1 directory by @dependabot[bot] in #13
- chore(deps): Bump rustls-webpki from 0.103.9 to 0.103.10 in the cargo group across 1 directory by @dependabot[bot] in #15
- Add configurable rate limit controls for lockfile evaluation by @math280h with @Copilot in #14
- chore(deps): Bump rand from 0.9.2 to 0.9.4 in the cargo group across 1 directory by @dependabot[bot] in #16
- chore(deps): Bump rustls-webpki from 0.103.10 to 0.103.13 in the cargo group across 1 directory by @dependabot[bot] in #17
- chore(deps): Bump rmcp from 0.15.0 to 1.4.0 in the cargo group across 1 directory by @dependabot[bot] in #18
- feat: metrics/log schema for latency, cache, and registry errors by @math280h in #24
- feat: private registry authentication support by @math280h in #23
- feat: dependency confusion defenses for internal package names by @math280h in #20
- feat: remote config sources by @math280h in #21
- feat: policy simulation (what-if) mode by @math280h in #19
- fix: unbreak main — await async SafePkgsService::new in simulate command by @math280h in #25
- feat: remote audit storage backend by @math280h in #22
- fix(npm): tolerate boolean
deprecated; honor RUST_LOG for all commands by @math280h in #26 - fix(cargo): treat bare Cargo.toml versions as caret ranges, not exact pins by @math280h in #27
- 1.0.0 readiness: version-resolution, parser, security, and release fixes by @math280h in #28
New Contributors
- @dependabot[bot] made their first contribution in #13
- @math280h with @Copilot made their first contribution in #14
Full Changelog: 0.3.0...1.0.0
Contributors
math280h and dependabot