From ef8e669bfd988bfbaadfc22017abd0ddff0b6e10 Mon Sep 17 00:00:00 2001 From: jmeridth Date: Thu, 8 Oct 2026 14:02:28 -0500 Subject: [PATCH] docs: fold v2.2.1 notes into v2.3.0 What/Why #69 added a v2.3.0 section above the v2.2.1 notes from #70 and #71, but only one release is going out. v2.3.0 now carries every entry, and its intro names spec v2.2.0, the current version, instead of v2.1.0. Proof it works Docs only. CHANGELOG.md has one unreleased section. Risk Low. Docs only. AI role Drafted by Claude Opus 5.5 and reviewed by the maintainer. Review focus None. Signed-off-by: jmeridth --- CHANGELOG.md | 7 +------ 1 file changed, 1 insertion(+), 6 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 35afdcc..6f53673 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -2,7 +2,7 @@ ## v2.3.0 -This release expands on the Security Insights v2.1.0 specification by adding a new micro-CLI for non-library use cases. It also contains discovery and fetching improvements to the library. +This release expands on the Security Insights v2.2.0 specification by adding a new micro-CLI for non-library use cases. It also contains discovery and fetching improvements to the library. ### Features @@ -11,11 +11,6 @@ This release expands on the Security Insights v2.1.0 specification by adding a n - `si fetch` command (`v2/cmd/si`) runs discovery and parsing over many targets and prints machine-readable JSON, for catalogues and dashboards built on Security Insights data. Each result carries a status of `ok`, `not-found`, `invalid` or `error`; the command exits 2 when any target hit a transport `error`, so an incomplete batch is never mistaken for a clean one - `si.Load` returns `si.ErrParentUnavailable` when the parent named in `project-si-source` cannot be fetched for a reason unrelated to its content; `si fetch` reports that as `error`, not `invalid` - All GitHub API calls, including the existing `si.Read`, now authenticate with `GITHUB_TOKEN` when set and honour `GITHUB_API_URL`; all requests time out after 30 seconds - -## v2.2.1 - -### Features - - `SecurityInsightsFilenames()` returns both accepted names, `security-insights.yml` and `security-insights.yaml`, matching the spec ### Deprecations