chore(main): release 0.6.0

[physical-ai-toolchain-release]

🤖 I have created a release beep boop

0.6.0 (2026-04-08)

✨ Features

• build: add terraform-docs generation pipeline (#378) (78e90d0)
• infrastructure: enable optional AML diagnostic logs (#400) (58dd8db)
• scripts: consolidate scripts library paths and enhance dataviewer (#383) (176d9c9)

🐛 Bug Fixes

• build: remediate CVEs, enforce equality pinning, repair Dependabot config (#391) (0c29148)
• infrastructure: add Storage File Data Privileged Contributor role for ML identity (#380) (378f7ed)
• infrastructure: replace hardcoded NAT Gateway availability zones with variable (#356) (a1397bd)
• infrastructure: resolve TFLint violations and enable hard-fail (#376) (dfb55cd)
• scripts: add dot-source guard to Invoke-MsDateFreshnessCheck.ps1 (#397) (f6f22c3)
• training: validate AzureML and OSMO RL submissions end to end (#372) (49904d3)

📚 Documentation

• infrastructure: add terraform-docs tooling and improve developer experience (#365) (a0fb03a)
• reference: centralize workflow template docs and convert workflow READMEs to pointer index (#379) (68097e4)

🔧 Miscellaneous

• deps-dev: bump the npm_and_yarn group across 1 directory with 2 updates (#374) (d848c8b)
• deps-dev: bump vite from 6.4.1 to 6.4.2 in /data-management/viewer/frontend in the npm_and_yarn group across 1 directory (#395) (6ec7f19)
• deps: bump the github-actions group across 1 directory with 7 updates (#370) (4d1b951)
• deps: bump the uv group across 2 directories with 1 update (#373) (ba66ed9)

🔒 Security

• deps-dev: bump brace-expansion from 1.1.12 to 1.1.13 in /docs/docusaurus in the npm_and_yarn group across 1 directory (#389) (27129d9)
• deps-dev: bump the npm_and_yarn group across 2 directories with 2 updates (#363) (aeae624)
• deps-dev: bump the python-dependencies group with 5 updates (#403) (bb85560)
• deps: bump cryptography from 46.0.5 to 46.0.6 in /training/rl (#367) (a82dd68)
• deps: bump the inference-dependencies group in /evaluation with 2 updates (#401) (c88d253)
• deps: bump the pip group across 4 directories with 2 updates (#411) (1230fe0)
• deps: bump the training-dependencies group across 1 directory with 67 updates (#375) (8e05172)
• deps: bump the uv group across 2 directories with 1 update (#382) (b6c7aea)
• deps: update marshmallow requirement from <4.3.0,>=3.5 to >=3.5,<4.4.0 in /evaluation in the inference-dependencies group (#393) (599c7eb)

---

This PR was generated with Release Please. See documentation.

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

Snapshot Warnings

⚠️: No snapshots were found for the head SHA 713cac6.

Ensure that dependencies are being submitted on PR branches and consider enabling retry-on-snapshot-warnings. See the documentation for more information and troubleshooting advice.

Scanned Files

None

[codecov-commenter]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 50.48%. Comparing base (58dd8db) to head (713cac6).

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #364   +/-   ##
=======================================
  Coverage   50.48%   50.48%           
=======================================
  Files         267      267           
  Lines       18188    18188           
  Branches     1903     1855   -48     
=======================================
  Hits         9182     9182           
  Misses       8716     8716           
  Partials      290      290           

Flag	Coverage Δ		*Carryforward flag
pester	81.21% <ø> (ø)
pytest	6.89% <ø> (ø)		Carriedforward from 07904db
pytest-dataviewer	61.97% <ø> (ø)
vitest	50.72% <ø> (ø)

*This pull request uses carry forward flags. Click here to find out more.

🚀 New features to boost your workflow:

• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[physical-ai-toolchain-release]

🤖 Created releases:

• v0.6.0

🌻