Skip to content

Changelog

All notable changes to this project are documented here. The format follows Conventional Commits and this file is generated by git-cliff from the release workflow.

0.2.0 - 2026-10-15

Features

  • action: The pixi-policy GitHub Action (#4) (#33) (d210508)
  • pre-commit: The pixi-policy pre-commit hook (#5) (#34) (b13fcd8)
  • policy: Extend shared policies by path (#1) (#36) (6f3cd0d)
  • policy: Extend pinned URLs, cached for offline use (#1) (#37) (a20fa03)
  • advisories: Fail on known vulnerabilities from OSV, KEV and EPSS (#3) (#38) (04239dc)
  • freshness: Build age, majors behind and archived feedstocks (#2) (#39) (be91702)

Bug Fixes

  • sarif: Link the tool and each rule to aesir-oss.github.io/pixi-policy (#18) (27b5830)
  • advisories: Trim advisory summaries (#40) (b71d42e)

Documentation

  • memory: Carry the pixi-policy memories over from pixi-ext-contrib (#32) (b1a3ee3)

CI and Build

  • release: Create a pixi-policy-action release on every final (#15) (#35) (f9759bc)

0.2.0-rc.2 - 2026-10-15

Features

  • action: The pixi-policy GitHub Action (#4) (#33) (d210508)
  • pre-commit: The pixi-policy pre-commit hook (#5) (#34) (b13fcd8)
  • policy: Extend shared policies by path (#1) (#36) (6f3cd0d)
  • policy: Extend pinned URLs, cached for offline use (#1) (#37) (a20fa03)
  • advisories: Fail on known vulnerabilities from OSV, KEV and EPSS (#3) (#38) (04239dc)
  • freshness: Build age, majors behind and archived feedstocks (#2) (#39) (be91702)

Bug Fixes

  • sarif: Link the tool and each rule to aesir-oss.github.io/pixi-policy (#18) (27b5830)
  • advisories: Trim advisory summaries (#40) (b71d42e)

Documentation

  • memory: Carry the pixi-policy memories over from pixi-ext-contrib (#32) (b1a3ee3)

CI and Build

  • release: Create a pixi-policy-action release on every final (#15) (#35) (f9759bc)

0.2.0-rc.1 - 2026-10-15

Features

  • action: The pixi-policy GitHub Action (#4) (#33) (d210508)
  • pre-commit: The pixi-policy pre-commit hook (#5) (#34) (b13fcd8)
  • policy: Extend shared policies by path (#1) (#36) (6f3cd0d)
  • policy: Extend pinned URLs, cached for offline use (#1) (#37) (a20fa03)
  • advisories: Fail on known vulnerabilities from OSV, KEV and EPSS (#3) (#38) (04239dc)
  • freshness: Build age, majors behind and archived feedstocks (#2) (#39) (be91702)

Bug Fixes

  • sarif: Link the tool and each rule to aesir-oss.github.io/pixi-policy (#18) (27b5830)

Documentation

  • memory: Carry the pixi-policy memories over from pixi-ext-contrib (#32) (b1a3ee3)

CI and Build

  • release: Create a pixi-policy-action release on every final (#15) (#35) (f9759bc)

0.1.1 - 2026-10-12

Refactoring

  • Fold the shared modules into the crate (279c722)

Documentation

  • Link the issues by their numbers in this repository (#14) (a400739)

CI and Build

  • Stand alone as aesir-oss/pixi-policy (82a0cbb)

0.1.1-rc.1 - 2026-10-12

Refactoring

  • Fold the shared modules into the crate (279c722)

Documentation

  • Link the issues by their numbers in this repository (#14) (a400739)

CI and Build

  • Stand alone as aesir-oss/pixi-policy (82a0cbb)

0.1.0 - 2026-10-12

Features

  • policy: Scaffold pixi-policy with the check command and the policy file (#60) (#110) (cab87c4)
  • policy: Text, JSON and SARIF output (#67) (#111) (1956ce4)
  • policy: Sources rules, where packages may come from (#61) (#112) (32a619f)
  • policy: Bans rule, packages and versions that are never allowed (#62) (#113) (b6f7292)
  • policy: Licenses rules, allow, review and deny lists of SPDX licenses (#63) (#114) (0ff1eb6)
  • policy: Waivers that expire (#66) (#115) (fb40d7c)
  • policy: Manifest hygiene rules (#64) (#116) (9f99553)
  • policy: Lock hygiene rules (#65) (#117) (da835fd)
  • policy: Pixi policy init and pixi policy explain (#68) (#119) (e62a1c7)
  • docs: One docs site with a section per extension (#6) (#126) (b57f9a4)
  • policy: The policy key reference, in explain and the docs (#70) (#129) (f65e5ee)

Bug Fixes

  • policy: Name the policy file as given in waiver findings' locations (#121) (#123) (b1ff5c1)
  • policy: Say why a ban's version range is invalid in one line (#122) (#124) (e0a232e)

CI and Build

  • release: Stop publishing to crates.io, and name the shared crate pixi-ext-common (#106) (#107) (b609721)
  • release: Release pixi-policy through the shared release workflows (#69) (#120) (070ffbe)