Tags give the ability to mark specific points in history as being important
-
v5.3.1
Release: pipeline v5.3.13978c047 · ·v5.3.1: automerge-gate fail-open guard + osv-verdict merge-base reachability - automerge-gate now blocks (exit 1) when zero required checks were evaluated (empty/typo'd required-checks no longer fail-OPENs to GREEN). - Bundles the osv-verdict merge-base reachability fixes that were on main since v5.3.0 but never tagged (v5.3.0 was 6 commits behind main). - All template image pins bumped to v5.3.1.
-
v5.3.0
Release: pipeline v5.3.0e469ecae · ·pipeline v5.3.0 Fail-closed Renovate automerge gate (L1 verdict contract): osv-verdict, cargo-verdict, automerge-gate. cargo-verdict added on estate evidence (0.x caret-breaking crate bumps dominate the backlog; OSV cannot catch a build/test break). Image pins synced to v5.3.0.
-
v5.2.2
Release: pipeline v5.2.2858e876f · ·pipeline v5.2.2 -- image-pin lockstep (maturity): nomograph image refs pinned to release version + coherence gate + sync script
-
v5.2.1
Release: pipeline v5.2.1db26f331 · ·pipeline v5.2.1 -- registry-coherence semver-correct pre-release handling (#2)
-
v5.2.0
Release: pipeline v5.2.07ababa3d · ·v5.2.0 — latex: just in image; justfile-first build-pdfs
-
v5.0.1
Release: pipeline v5.0.19b6a2115 · ·v5.0.1 — kit-registry: delete-on-merge review branch hygiene
-
v5.0.0
Release: pipeline v5.0.0e5a044a1 · ·v5.0.0 — kit-registry: secure the core, delete the automation (no LLM, no auto-merge)
-
v4.4.2
Release: pipeline v4.4.2d430964a · ·v4.4.2 — fix kit-registry audit job (drop obsolete --registry flag)
-
v4.4.1
Release: pipeline v4.4.1fbad2f8f · ·kit-registry v4.4.1 — fix review push (checkout -B + plain --force)
-
v4.4.0
Release: pipeline v4.4.02e89b204 · ·kit-registry v4.4.0 — stable rolling review MR (stop MR stacking)
-
v4.3.0
Release: pipeline v4.3.05090b93f · ·pipeline v4.3.0: SemVer pre-release convention (accept vX.Y.Z-<pre>; pre-releases skip latest + public indexes)
-
v4.2.5
Release: pipeline v4.2.58fa773c8 · ·kit-registry: install nodejs+npm in sense npm-source tools (mmdc, wrangler, claude-code) now surface in CI sense. Completes the detection fix begun in v4.2.4 (GITHUB_TOKEN).
-
v4.2.4
Release: pipeline v4.2.44af041db · ·kit-registry: export GITHUB_TOKEN in sense/audit jobs Authenticates GitHub release + GHSA polls so sense stops silently returning zero findings under the 60/hr unauthenticated quota. Clean patch on v4.2.3 (only change is +1 export line in .install-kit).
-
v4.2.3
Release: pipeline v4.2.38cae4424 · ·fix: Add rustup target for aarch64-unknown-linux-gnu The build:linux-arm64 job needs both the C cross-compiler AND the Rust standard library for the target. Added rustup target add in before_script.
-
v4.2.2
Release: pipeline v4.2.2a1dac186 · ·fix: Install aarch64-linux-gnu cross-compiler for linux-arm64 builds The build:linux-arm64 job requires the aarch64-linux-gnu C cross-compiler to compile dependencies with C code. Added before_script to install gcc-aarch64-linux-gnu on the runner.
-
v4.2.1
66eccee7 · ·release: v4.2.1 - Add Linux ARM64 (aarch64-unknown-linux-gnu) build target to tool-rust template - Projects using tool-rust component now automatically build for three platforms: * macOS ARM64 (darwin-arm64) * Linux x86_64 (linux-amd64) * Linux ARM64 (linux-arm64) ← NEW - build:linux-arm64 job: Compiles with cargo zigbuild for aarch64-unknown-linux-gnu - sign:linux-arm64 job: Cosign-signs binary and SBOM - publish and release jobs updated with linux-arm64 artifacts - Release notes templates include linux-arm64 install instructions No breaking changes. Existing projects continue to work as-is. New projects or projects tagging after this release will automatically get linux-arm64 binaries.
-
v4.2.0
Release: pipeline v4.2.0ccea5de4 · ·pipeline v4.2.0 First minor release of the v4 line. Changed (BREAKING): - Removed legacy templates: rust-cli@v2.x, agent-shape@v2.x, latex-paper@v1.0.0. Consumers must migrate to v4 meta-components (tool-rust / lib-rust / latex-template) before referencing components from this release. Added: - hygiene gate's disable_default_forbidden bool input. When true, skips DEFAULT_FORBIDDEN regex list. For repos whose primary artifacts legitimately match a default pattern (e.g. sysml-bench-results ships *.log benchmark artifacts). Fixed: - latex-template screenshot-pdfs uses basename so it resolves PDF paths consistently with where build-pdfs moves them in v4.1.7+. Was looking at latex/example-academic.pdf; real file is at example-academic.pdf in project root. Lockstep version bump v4.1.10 -> v4.2.0.
-
v4.1.10
Release: pipeline v4.1.1098050d0d · ·v4.1.10 -- registry-coherence prunes deleted upstream tags before lookup
-
v4.1.9
Release: pipeline v4.1.948227d0e · ·pipeline v4.1.9 Fixed: - latex-template build-pdfs now cd's into the .tex's directory before invoking pdflatex so \usepackage finds sibling .sty files. PDFs are moved to project root after build to match the artifacts glob. Surfaced when design's main pipeline tried to build latex/example-academic.tex. - latex-template screenshot-pdfs uses dnf -y --quiet poppler-utils instead of apt-get; the latex container is fedora-based. screenshot-pdfs's rule was main+tag only, so MR pipelines never exercised it -- the latents surfaced as soon as latex / design / arxiv-sysml-bench-2026 ran on main. - screenshot-pdfs now also runs on merge_request_event so future template regressions surface on the MR pipeline.