v4.2.5

Changelog

🧰 Maintenance

• chore(deps): bump urllib3 from 2.6.3 to 2.7.0 @dependabot[bot] (#748)

See details of all code changes since previous release

v4.2.4

Changelog

🧰 Maintenance

• ci: adopt consolidated ospo-reusable-workflows release.yaml @jmeridth (#746)

See details of all code changes since previous release

v4.2.3

Changelog

🐛 Bug Fixes

• fix: suppress uv hardlink warning with UV_LINK_MODE=copy @zkoppert (#732)

🧰 Maintenance

• chore(deps): bump github-community-projects/contributors from 2.0.8 to 2.0.9 in the dependencies group @dependabot[bot] (#744)
• chore(deps): bump mypy from 1.20.1 to 1.20.2 in the dependencies group @dependabot[bot] (#742)
• chore(deps): bump step-security/harden-runner from 2.18.0 to 2.19.0 in the dependencies group @dependabot[bot] (#741)
• chore(deps): bump python from 3989a23 to 5b3879b @dependabot[bot] (#740)
• chore(deps): bump the dependencies group with 4 updates @dependabot[bot] (#738)
• chore(deps): bump python from bc389f7 to 3989a23 @dependabot[bot] (#737)
• chore(deps): bump mypy from 1.20.0 to 1.20.1 in the dependencies group @dependabot[bot] (#739)
• chore(deps): bump types-pytz from 2026.1.1.20260402 to 2026.1.1.20260408 @dependabot[bot] (#735)
• chore(deps): bump types-requests from 2.33.0.20260402 to 2.33.0.20260408 @dependabot[bot] (#736)
• chore(deps): bump python from 71b358f to bc389f7 @dependabot[bot] (#734)
• chore(deps): bump pytest from 9.0.2 to 9.0.3 @dependabot[bot] (#733)
• chore(deps): bump types-pytz from 2026.1.1.20260304 to 2026.1.1.20260402 @dependabot[bot] (#731)
• chore(deps): bump the dependencies group with 3 updates @dependabot[bot] (#730)
• chore(deps): bump github/codeql-action from 3.32.6 to 4.35.1 @dependabot[bot] (#729)
• chore(deps): bump astral-sh/setup-uv from 7.6.0 to 8.0.0 @dependabot[bot] (#728)
• chore(deps): bump the dependencies group with 3 updates @dependabot[bot] (#726)
• chore(deps): bump kenyonj/mark-ready-when-ready from b6279addd55dd13208965a9eff24b2cf1989a8ef to 0ef6176fc2ddef5bab6cb4ab9517a37f0c153ba4 @dependabot[bot] (#727)
• chore(deps): bump python from fb83750 to 71b358f @dependabot[bot] (#725)

See details of all code changes since previous release

v4.2.2

Changelog

🧰 Maintenance

• chore(deps): bump cryptography from 46.0.6 to 46.0.7 @dependabot[bot] (#723)
• chore(deps): bump types-requests from 2.32.4.20260107 to 2.32.4.20260324 @dependabot[bot] (#722)
• chore(deps): bump pytest-cov from 7.0.0 to 7.1.0 in the dependencies group @dependabot[bot] (#721)
• chore(deps): bump the dependencies group with 5 updates @dependabot[bot] (#720)
• chore(deps): bump requests from 2.33.0 to 2.33.1 @dependabot[bot] (#718)

See details of all code changes since previous release

v4.2.1

Changelog

🐛 Bug Fixes

• fix: correct TypeError test to exercise exception handler @zkoppert (#715)

🧰 Maintenance

• chore(deps): bump cryptography from 46.0.5 to 46.0.6 @dependabot[bot] (#716)

See details of all code changes since previous release

v4.2.0

Changelog

🚀 Features

• feat: add time_to_first_review metric for pull requests @meoyushi (#683)

See details of all code changes since previous release

v4.1.3

Changelog

🧰 Maintenance

• chore(deps): bump python from 584e89d to fb83750 @dependabot[bot] (#710)
• chore(deps): bump astral-sh/setup-uv from 7.3.1 to 7.6.0 in the dependencies group @dependabot[bot] (#711)

See details of all code changes since previous release

v4.1.2

Changelog

🐛 Bug Fixes

• fix: prevent dev dependency downloads at runtime @zkoppert (#704)
• fix: cast gh_app_id to string for JWT encoding compatibility @jmeridth (#705)
• fix: tighten workflow permissions, add security hardening, and fix uv tool invocations @jmeridth (#702)

🧰 Maintenance

• chore(deps): bump numpy from 2.4.2 to 2.4.3 in the dependencies group @dependabot[bot] (#708)
• chore(deps): bump kenyonj/mark-ready-when-ready from 33b13c51ba23786efb933701ef253352baf05bdd to b6279addd55dd13208965a9eff24b2cf1989a8ef @dependabot[bot] (#707)
• chore(deps): bump python from 6a27522 to 584e89d @dependabot[bot] (#706)

See details of all code changes since previous release

v4.1.1

Changelog

🐛 Bug Fixes

• fix: add --project flag to uv entrypoint for GitHub Actions compatibility @jmeridth (#700)
• fix: pin uv version and add caching to CI workflows @jmeridth (#691)
• fix: harden pip install against supply chain attacks @zkoppert (#686)

🧰 Maintenance

• ci: add mark-ready-when-ready workflow @zkoppert (#699)
• chore(deps): bump github/codeql-action from 4.31.9 to 4.32.6 in the dependencies group @dependabot[bot] (#698)
• chore(deps): switch dependabot package ecosystem from pip to uv @jmeridth (#697)
• chore(deps-dev): bump black from 26.1.0 to 26.3.1 in the uv group across 1 directory @dependabot[bot] (#696)
• chore(deps): bump pytz from 2025.2 to 2026.1.post1 @dependabot[bot] (#694)
• chore(deps): bump isort from 7.0.0 to 8.0.1 @dependabot[bot] (#695)
• chore(deps): bump types-pytz from 2025.2.0.20251108 to 2026.1.1.20260304 @dependabot[bot] (#693)
• chore(deps): bump python-dotenv from 1.2.1 to 1.2.2 in the dependencies group @dependabot[bot] (#692)
• build: migrate from pip to uv for dependency management @jmeridth (#689)
• chore(deps): bump actions/upload-artifact from 6.0.0 to 7.0.0 @dependabot[bot] (#688)

See details of all code changes since previous release

v4.1.0

Changelog

🚀 Features

• feat: add grouping and sorting options for shipped work report @anthropic-code-agent[bot] (#674)

See details of all code changes since previous release