v0.5.2: fix pip-audit CVE skip, fix PyPI logo URL

Author: madeinplutofabio

CHANGELOG.md

@@ -5,6 +5,13 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.5.2] - 2026-03-25
+
+### Fixed
+
+- Skip pygments CVE-2026-4539 in pip-audit (no upstream fix available)
+- Use absolute URL for logo so PyPI renders it correctly
+
 ## [0.5.1] - 2026-03-25
 
 ### Fixed

README.md

@@ -56,7 +56,7 @@ agent -> command contract -> policy gate -> constrained executor -> execution re
 
 ## Status
 
-**v0.5.1 — bounded production-ready**
+**v0.5.2 — bounded production-ready**
 
 The reference runner implements the full CSC v0.1 protocol:
 

csc_runner/__init__.py

@@ -1 +1 @@
-__version__ = "0.5.1"
+__version__ = "0.5.2"

pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "csc-runner"
-version = "0.5.1"
+version = "0.5.2"
 description = "Reference runner for Command Scope Contract"
 readme = "README.md"
 license = "Apache-2.0"