0.88.0

What's Changed

• feat(list-versions): show cooldown status and upload timestamps by @shifa-khan in #1127
• build(deps): bump github/codeql-action from 4.36.0 to 4.36.1 by @dependabot[bot] in #1183
• test(bootstrapper): add unit tests for iterative phase handlers by @jskladan in #1179
• feat(graph): add suggest-collection command for collection optimization by @smoparth in #1030
• build(deps): bump actions/checkout from 6.0.2 to 6.0.3 by @dependabot[bot] in #1182
• build(deps): bump github/codeql-action from 4.36.1 to 4.36.2 by @dependabot[bot] in #1192
• Adding proposal for test-mode retrospectively by @LalatenduMohanty in #1176
• feat: source resolver configuration by @tiran in #1052
• fix(bootstrap): handle RESOLVE-phase errors in multiple versions mode by @rd4398 in #1196
• fix(output): standardize --output to work for all formats by @shifa-khan in #1193

Full Changelog: 0.87.0...0.88.0

0.87.0

What's Changed

• refactor(resolver): move age filter fallback to resolver with cache server lookup by @rd4398 in #1163

Full Changelog: 0.86.0...0.87.0

0.86.0

What's Changed

• docs: add structured bug report issue template by @ryanpetrello in #1158
• feat(bootstrapper): record bootstrap stack state on each loop iteration by @dhellmann in #1159
• build(deps): bump github/codeql-action from 4.35.3 to 4.35.4 by @dependabot[bot] in #1138
• build(deps): bump github/codeql-action from 4.35.4 to 4.35.5 by @dependabot[bot] in #1160
• test(bootstrapper): fix caplog assertion that depends on global pytes… by @shifa-khan in #1164
• build(deps): bump github/codeql-action from 4.35.5 to 4.36.0 by @dependabot[bot] in #1167
• test(sources): add coverage for source pipeline by @mnadzam in #1161
• test(threading_utils): add coverage for thread safety decorator by @mnadzam in #1172
• feat(auth): add URL-dispatched session auth for GitHub and GitLab by @tiran in #1173
• [proposal] wheel_build_tag hook for unique wheel file names by @tiran in #1066

Full Changelog: 0.85.0...0.86.0

0.85.0

What's Changed

• refactor(bootstrapper): convert recursive bootstrap to iterative proessing by @rd4398 in #1116
• fix(list-overrides): update stale and missing plugin hook names by @LalatenduMohanty in #1112
• feat(resolver): provide an INFO level summary log for packages that are skipped due to cooldown settings by @ryanpetrello in #1136
• feat(finders): add PyPICacheProvider for cache server lookups by @tiran in #1143
• fix(http): fail fast on GitHub API rate limit instead of hanging by @LalatenduMohanty in #1120
• docs(agents): add rules for DCO sign-off, .test TLD, backtick formatting, and Sphinx version directives by @tiran in #1144
• feat(bootstrapper): skip already-cached versions in multiple version mode by @rd4398 in #1148
• docs(how-tos): add multiple version bootstrap guide by @rd4398 in #1152
• fix(sources): PEP 625 sdist name by default by @tiran in #1151

Full Changelog: 0.84.0...0.85.0

0.84.0

What's Changed

• feat(resolver): exempt top-level == pins from release cooldown by @LalatenduMohanty in #1124
• tests: fix type annotation in test_pyproject by @tiran in #1133
• feat: implement multiple constraint files by @tiran in #1129
• feat(constraints): support <0 specifier to block packages by @tiran in #1132

Full Changelog: 0.83.0...0.84.0

0.83.0

What's Changed

• fix(finders): filter find_wheel glob to .whl files only by @jlarkin09 in #1088
• fix(e2e): chain on_exit in constraint test EXIT traps by @jlarkin09 in #1091
• fix(deps): drop requests-mock from runtime deps by @booxter in #1094
• test(unit): mark PyPI-backed tests as network by @booxter in #1093
• feat(bootstrap): add --max-release-age for multiple-versions mode by @rd4398 in #1089
• fix(resolver): make resolution cache values immutable to prevent corr… by @smoparth in #1095
• docs(proposal): add iterative bootstrap proposal by @rd4398 in #1097
• feat(list-overrides): show per-package min_release_age in --details output by @shifa-khan in #1100
• build(deps): bump github/codeql-action from 4.35.2 to 4.35.3 by @dependabot[bot] in #1111
• refactor: move Cooldown class from context to candidate module by @tiran in #1114
• test(context): add coverage for WorkContext by @mnadzam in #1076
• fix(dependency_graph): remove orphaned children in remove_dependency by @jskladan in #1106
• docs(proposals): use glob toctree to prevent merge conflicts by @smoparth in #1115
• feat(sbom): use annotated data types in Pydantic config by @smoparth in #1090
• tests: pass GITHUB_TOKEN to tests by @tiran in #1117
• chore(hooks): enforce Conventional Commits with pre-commit hook by @jskladan in #1104
• feat(cli): add option for a single output-dir and hide options by @jlarkin09 in #1099
• feat: combine and validate constraints by @tiran in #1125

New Contributors

• @jlarkin09 made their first contribution in #1088
• @jskladan made their first contribution in #1106

Full Changelog: 0.82.0...0.83.0

0.82.0

What's Changed

• test(e2e): add bootstrap --test-mode failure tests by @shifa-khan in #988
• feat(resolver): add release-age cooldown to protect against supply-chain attacks by @ryanpetrello in #1018
• docs: fix spelling issues and update word list by @tiran in #1085
• fix(sources): catch FileNotFoundError for broken symlinks by @andre-motta in #1087

New Contributors

• @ryanpetrello made their first contribution in #1018

Full Changelog: 0.81.0...0.82.0

0.81.0

What's Changed

• test(hooks): add coverage for hook plugin system by @mnadzam in #1034
• fix(bootstrap): don't call get_resolver_provider hook in cache lookups by @LalatenduMohanty in #1051
• mergify: switch from rebase to update action by @LalatenduMohanty in #1060
• docs: Add version-removed for resolve_source by @tiran in #1061
• fix(bootstrap): auto-disable constraints and extend e2e test coverage by @rd4398 in #1057
• [proposal] New resolver configuration by @tiran in #938
• docs: add docstrings and comments to complex functions by @LalatenduMohanty in #1047
• fix(bootstrapper): log specific error types in wheel cache lookup by @LalatenduMohanty in #1029
• fix(mergify): remove auto-update rule that adds merge commits by @LalatenduMohanty in #1070
• feat(sbom): build purls with packageurl-python by @mprpic in #1032
• docs(proposal): add release cooldown design for version resolution by @LalatenduMohanty in #1000
• build(deps): bump github/codeql-action from 4.35.1 to 4.35.2 by @dependabot[bot] in #1074

New Contributors

• @mnadzam made their first contribution in #1034

Full Changelog: 0.80.0...0.81.0

0.80.0

What's Changed

• ci: fix mergify configuration by @tiran in #1005
• ci: pin GitHub Actions to full commit SHAs by @mprpic in #1014
• ci: add minimal permissions to GitHub Actions workflows by @tiran in #1015
• Add a Security policy file by @mprpic in #1013
• refactor(sources): use EAFP pattern instead of is_file() check by @mikedep333 in #1011
• Generate minimal SBOM by @mprpic in #977
• docs(agents): reduce duplication and add concise writing guidance by @LalatenduMohanty in #1010
• refactor(resolver): return lists of matching versions by @rd4398 in #975
• ci: add OpenSSF Scorecard workflow by @mprpic in #1020
• ci: add CodeQL static analysis workflow by @mprpic in #1022
• fix(build_environment): re-raise exception for the JSON parse failure by @LalatenduMohanty in #1026
• build(deps): bump github/codeql-action from 7fc1baf373eb073c686865bd453d412d506a05a2 to 5c8a8a642e79153f5d047b10ec1cba1d1cc65699 by @dependabot[bot] in #1028
• [proposal] New patcher config by @tiran in #940
• fix: use proper URL parsing for GitHub API domain by @mprpic in #1039
• test(sbom): add SPDX 2.3 schema validation with spdx-tools by @mprpic in #1040
• feat(test): add hatch scripts and docs for coverage reports by @LalatenduMohanty in #1043
• feat(bootstrap): add --multiple-versions flag to bootstrap all matching versions by @rd4398 in #1035
• build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 by @dependabot[bot] in #1056
• mergify: add auto-rebase and conflict notification rules by @LalatenduMohanty in #1058
• build(deps): bump github/codeql-action from 3.35.1 to 4.35.1 by @dependabot[bot] in #1055
• build(deps): bump pypa/gh-action-pypi-publish from 1.13.0 to 1.14.0 by @dependabot[bot] in #1054

New Contributors

• @mikedep333 made their first contribution in #1011

Full Changelog: 0.79.0...0.80.0

0.79.0

What's Changed

• revert(e2e): remove setuptools-scm<10 constraint by @LalatenduMohanty in #993
• chore: add CodeRabbit configuration for AI-assisted code review by @smoparth in #992
• test: add option to run tests with network access by @tiran in #994
• feat: add override_download_url to resolvers by @tiran in #991
• build(lint): consolidate linters under pre-commit by @MichaelYochpaz in #903
• fix(sources): skip non-regular files in scan_compiled_extensions by @pmattsso in #1004

New Contributors

• @MichaelYochpaz made their first contribution in #903

Full Changelog: 0.78.0...0.79.0