release: prepare v0.5.0 (#50)

## What

- finalize the changelog and package metadata for v0.5.0
- refresh vulnerable transitive dependencies in the committed lockfile
- remove stale packaging and README references to the deleted Mestre
migration guide
- describe the core accurately as vendor-SDK-free now that jsonschema is
required

## Why

The changes merged since v0.4.0 include intentional pre-1.0 breaking
behavior, new task control, readiness, compatibility preflight,
structured-output enforcement, and stronger domain invariants. They
belong in a minor release.

The committed lockfile also contained five Dependabot alerts across four
transitive packages. This refresh moves them to patched versions without
changing the declared vendor SDK ranges.

## Checks

- `uv sync --locked --all-extras --python 3.11`
- `ruff check .`
- strict `mypy`
- 418 passed, 3 skipped; 90.33% coverage
- wheel and sdist build
- `twine check --strict`
- clean Python 3.11 wheel install/import smoke
- v0.5.0 tag/package-version match
- sdist content check

Author: ebarti

.github/workflows/publish-pypi.yml

@@ -107,8 +107,8 @@ jobs:
         run: python -m twine check --strict dist/*
 
       - name: Smoke test the built wheel
-        # The dependency-free core promise, checked on the artifact itself: the
-        # wheel installs into a bare venv and imports with zero dependencies.
+        # The vendor-SDK-free core promise, checked on the artifact itself: the
+        # wheel installs into a bare venv with only its declared core dependencies.
         run: |
           python -m venv /tmp/smoke
           /tmp/smoke/bin/pip install --quiet dist/*.whl

CHANGELOG.md

@@ -5,7 +5,7 @@ All notable changes to this project are documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
-## Unreleased
+## 0.5.0 - 2026-07-11
 
 ### Added
 

README.md

@@ -34,7 +34,7 @@ If you want all first-party runtimes available, install the `all` extra:
 pip install "agent-runtime-kit[all]"
 ```
 
-Install the dependency-free core when you only need the public models, fake
+Install the vendor-SDK-free core when you only need the public models, fake
 runtime, registry, diagnostics types, or you plan to add provider SDKs later:
 
 ```bash
@@ -179,5 +179,4 @@ built-in runtime populates it yet, so it is always an empty tuple today.
 - [API stability](https://github.com/ebarti/agent-runtime-kit/blob/main/docs/api-stability.md)
 - [Live smoke tests](https://github.com/ebarti/agent-runtime-kit/blob/main/docs/live-smoke.md)
 - [Deadlines and cancellation](https://github.com/ebarti/agent-runtime-kit/blob/main/docs/task-control.md)
-- [Mestre migration notes](https://github.com/ebarti/agent-runtime-kit/blob/main/docs/mestre-migration.md)
 - [SDK evolution agent](https://github.com/ebarti/agent-runtime-kit/blob/main/docs/sdk-evolution-agent.md)

docs/quickstart.md

@@ -6,7 +6,7 @@ Install all first-party runtime adapters:
 pip install "agent-runtime-kit[all]"
 ```
 
-Or install only the dependency-free core:
+Or install only the vendor-SDK-free core:
 
 ```bash
 pip install agent-runtime-kit

pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "agent-runtime-kit"
-version = "0.4.0"
+version = "0.5.0"
 description = "One typed runtime API for Claude, Codex, and Antigravity agent SDKs."
 readme = "README.md"
 requires-python = ">=3.10"
@@ -107,7 +107,6 @@ include = [
     "docs/api-stability.md",
     "docs/capability-matrix.md",
     "docs/live-smoke.md",
-    "docs/mestre-migration.md",
     "docs/providers.md",
     "docs/quickstart.md",
     "docs/sdk-evolution-agent-design.md",

src/agent_runtime_kit/registry.py

@@ -127,7 +127,7 @@ def create_default_registry(
     include_fake: bool = True,
     extra_factories: Iterable[tuple[AgentRuntimeKind | str, RuntimeFactory]] = (),
 ) -> RuntimeRegistry:
-    """Create a registry with built-in dependency-free runtimes."""
+    """Create a registry with built-in runtimes that need no provider SDK extras."""
 
     registry = RuntimeRegistry()
     if include_fake: