UnENVerse 0.55.1 (2026-10-17)
Public trust signals: an OpenSSF Scorecard workflow, build provenance attestations and CycloneDX software bills of materials for every release asset, a Vitest coverage floor enforced in CI, contributor guide, code of conduct, issue forms and a pull request template.
Added
- Public trust signals: an OpenSSF Scorecard workflow, build provenance attestations and CycloneDX software bills of materials for every release asset, a Vitest coverage floor enforced in CI, contributor guide, code of conduct, issue forms and a pull request template.
- Website:
llms.txt,agents.txtand asecurity.txtfile, and social, author, robots and breadcrumb tags on every page.
Changed
- Docker base images are pinned by digest and Dependabot watches both Dockerfiles; the CodeQL token is limited to the job that uploads results.
- The
zipcrate is upgraded to 9 to clear its extraction advisories.