From 3c5741f9b44ec8c966f775a058bbd7388c961b8d Mon Sep 17 00:00:00 2001 From: sacha Date: Sun, 26 Apr 2026 14:00:24 +0200 Subject: [PATCH] docs(changelog): cut 1.0.0-preview.2 with quality sweep notes Rotates [Unreleased] into [1.0.0-preview.2]: - Changed: CodeQL Default Setup switched to extended query suite (security + maintainability/quality, csharp + actions). - Security: softprops/action-gh-release pinned to commit SHA (CodeQL actions/unpinned-tag, CWE-829, alert #28 closed). Tag v1.0.0-preview.2 will be cut from this commit on main to trigger the Release workflow. --- CHANGELOG.md | 13 ++++++++++++- 1 file changed, 12 insertions(+), 1 deletion(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index ae2f970..bf39b3d 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -7,6 +7,16 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0 ## [Unreleased] +## [1.0.0-preview.2] - 2026-04-26 + +### Changed + +- CodeQL Default Setup switched from `default` to `extended` query suite — adds maintainability/quality queries on top of security (csharp + actions). + +### Security + +- Pinned `softprops/action-gh-release` to commit SHA in `.github/workflows/release.yml` (CodeQL `actions/unpinned-tag`, CWE-829). 3rd-party action refs are now immutable. + ## [1.0.0-preview.1] - 2026-04-24 ### Added @@ -51,5 +61,6 @@ First public preview release of Compendium, extracted from the - Git history preserved from the originating Nexus monorepo via `git filter-repo`. - Full MIT license. -[Unreleased]: https://github.com/sassy-solutions/compendium/compare/v1.0.0-preview.1...HEAD +[Unreleased]: https://github.com/sassy-solutions/compendium/compare/v1.0.0-preview.2...HEAD +[1.0.0-preview.2]: https://github.com/sassy-solutions/compendium/releases/tag/v1.0.0-preview.2 [1.0.0-preview.1]: https://github.com/sassy-solutions/compendium/releases/tag/v1.0.0-preview.1