v2.0.0

[sayantikabanik]

About this release

This update brings several infrastructure and security improvements, enhancing reliability, strengthening the security posture, and laying the groundwork for reproducible builds.

🔐 Security & Compliance

• Drafted security.md for clearer disclosure practices.
• Enabled CodeQL with manual trigger support.
• Refined CI workflows to include required permissions.
• Added GitHub Action to generate SBOM

📦 Package Management

• Initialized Pixi environment with pinned versions.
• Synced package metadata and versions across configs.

Release type

• Major
• Minor
• Patch

What's Changed

• Flask: Mode fix by @sayantikabanik in Flask: Mode fix #159
• Minor: Dashboard checks by @sayantikabanik in Minor: Dashboard checks  #163
• Create scorecard.yml by @sayantikabanik in Create scorecard.yml #167
• Pixi: Package versions initialised by @sayantikabanik in Pixi: Package versions initialised #168
• Disable scorecard action temporarily by @sayantikabanik in Disable scorecard action temporarily #171
• CodeQL: Manual trigger updated by @sayantikabanik in CodeQL: Manual trigger updated #172
• Potential fix for code scanning alert no. 3: Workflow does not contain permissions by @sayantikabanik in Potential fix for code scanning alert no. 3: Workflow does not contain permissions #173
• Repo stats fix: Workflow does not contain permissions by @sayantikabanik in Repo stats fix: Workflow does not contain permissions #174
• CI: Workflow does not contain permissions by @sayantikabanik in CI: Workflow does not contain permissions #175
• Reviews CI: Workflow does not contain permissions by @sayantikabanik in Reviews CI: Workflow does not contain permissions #176
• Draft security.md by @sayantikabanik in Draft security.md #166
• Package managment: Additional details and version sync by @sayantikabanik in Package managment: Additional details and version sync  #178
• GHA: SBOM generation via .lock by @sayantikabanik in GHA: SBOM generation via .lock #177

Full Changelog: v1.3.0...v2.0.0

---

This discussion was created from the release v2.0.0.