• v0.64.0 1bc49485f7

    v0.64.0 Stable

    release-bot released this 2026-10-02 20:39:00 +02:00 | 123 commits to main since this release

    Added

    None.

    Changed

    • release PAT scope: the release workflow now refuses a PAT without issue scope before any cut work (#1484)

    Fixed

    • prep: the release PR description now mirrors every cut-time changelog check, not only density (#1486)
    • prep: refuses [Unreleased] text it would have dropped from the release, and names each line (#1486)
    • recover-pending-cut: a re-prepared cut now renders each recovered fragment entry once instead of twice (#1487).
    • recover-pending-cut: refuses to fold a section back when the merge would lose text, and names each line (#1491)
    • forgejo: issue-comment reads are now a single request, because Forgejo ignores page and limit on that endpoint (#1495)
    • prep: the [Unreleased] refusal now shows each line it names on a CRLF CHANGELOG.md too (#1507)
    • security: a commit-SHA pin now refuses at bootstrap rt with a pin-a-release-tag remedy, and docs/SECURITY.md stops recommending it (#1514)
    • security: the release signature now names its tag; the reusables refuse one naming another tag or none (#1516)

    Removed

    None.

    Deprecated

    None.

    Upgrade

    None.

    Internal

    • internal: Windows checkouts now get LF line endings, so fixture-parsing tests no longer fail under core.autocrlf=true (#1485).
    Downloads