v1.0.0 — GitHub Marketplace release

First stable Marketplace release of the UnityInFlow Spec Compliance action.

What's included

• Typed status and report action outputs (matching the runtime core.setOutput calls)
• injection-scanner-version default bumped to v0.0.2 — the tag carrying the Linux musl binaries the action downloads at runtime
• Deterministic committed dist/ (no sourcemaps) guarded by a git diff --exit-code dist/ staleness gate in CI
• Public/fork CI runs secretless on GitHub-hosted runners; release automation stays on org self-hosted runners
• Moving v1 tag maintained automatically on release publish

Usage

- uses: UnityInFlow/spec-ci-plugin@v1

v0.0.1

Initial release of spec-ci-plugin -- a GitHub Action that enforces spec compliance on every PR.

Features

• Spec Validation -- runs @unityinflow/spec-linter (required sections, no secrets, file size, no wildcards, no duplicate headers)
• Security Scan -- runs injection-scanner for prompt injection pattern detection
• Scope Compliance -- compares PR changed files against spec-declared scope (## Scope sections and GSD <files> tags)
• Criteria Coverage -- matches acceptance criteria to test descriptions via fuzzy token matching
• PR Comment -- posts/updates a single structured compliance report comment on the PR
• Configurable failure -- fail-on: errors | warnings | never

Usage

- uses: UnityInFlow/spec-ci-plugin@v0.0.1
  with:
    spec-file: CLAUDE.md
    fail-on: errors

What's next (v0.1.0)

• ai-changelog integration
• Gradle plugin (specCheck task)
• GitHub Actions Marketplace listing
• Custom check plugins
• Monorepo support