chore(release): bump version to 1.3.5 (#21)

* docs: add operational branch protection policy

Signed-off-by: PythonWoods <gianluca.catalano@gmail.com>

* docs(changelog): record branch protection policy updates

Signed-off-by: PythonWoods <gianluca.catalano@gmail.com>

* docs(changelog): prepare release 1.3.5 — move unreleased to [1.3.4] block

Signed-off-by: PythonWoods <gianluca.catalano@gmail.com>

* chore(deps): pin zenzic core to 0.10.4

Signed-off-by: PythonWoods <gianluca.catalano@gmail.com>

* release: bump version to 1.3.5

Signed-off-by: PythonWoods <gianluca.catalano@gmail.com>

* style(readme): fix badge centering — remove blank line inside <p align=center>

Signed-off-by: PythonWoods <gianluca.catalano@gmail.com>

* fix(ci): fetch tags in zenzic core clone for check-core-pin-local

The check-core-pin-local recipe validates the pinned core version by
looking for either pyproject.toml version or a git tag (v0.10.4).
A shallow clone without fetch-tags:true makes the tag invisible, causing
the check to fail even when the tag exists on the remote.

Signed-off-by: PythonWoods <gianluca.catalano@gmail.com>

* docs(contributing): add SSH signing setup instructions

Signed-off-by: PythonWoods <gianluca.catalano@gmail.com>

---------

Signed-off-by: PythonWoods <gianluca.catalano@gmail.com>

Update v1

chore(release): bump to v1.3.4 and core 0.10.3 (#20)

Signed-off-by: PythonWoods <gianluca.catalano@gmail.com>

Release v1.3.3: Pin Zenzic Core to v0.10.2 (#19)

* release: bump version to 1.3.2

* release: bump version to 1.3.3

* chore(deps): pin zenzic core to 0.10.2

fix(deps): disable setup-uv caching to suppress warnings on non-pytho…

…n repos (#18)

* fix(deps): disable setup-uv caching to suppress warnings on non-python repos

* docs(changelog): fix release date for v1.3.1

* ci(deps): bump the actions-all group across 1 directory with 2 updates

Bumps the actions-all group with 2 updates in the / directory: [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) and [actions/checkout](https://github.com/actions/checkout).


Updates `astral-sh/setup-uv` from 8.1.0 to 8.2.0
- [Release notes](https://github.com/astral-sh/setup-uv/releases)
- [Commits](astral-sh/setup-uv@0880764...fac544c)

Updates `actions/checkout` from 6.0.2 to 6.0.3
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@de0fac2...df4cb1c)

---
updated-dependencies:
- dependency-name: astral-sh/setup-uv
  dependency-version: 8.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-all
- dependency-name: actions/checkout
  dependency-version: 6.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions-all
...

Signed-off-by: dependabot[bot] <support@github.com>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

chore(release): prepare v1.3.1 (#15)

* chore: remove config args, add E2E tests, enforce CI naming

* chore(deps): pin zenzic core to 0.10.1

* release: bump version to 1.3.1

* feat: add working-directory input support for monorepos

* fix: make sarif output path absolute and fix fixture toml

* chore: manually apply missing commits from v1.2.1-prep to avoid conflicts

fix(brand): update action configuration to Magnetite codename (#14)

* fix(brand): update action configuration to Magnetite codename

* release: bump version to 1.3.0

* chore(deps): pin zenzic core to 0.10.0

* chore: add .zenzic_cache/ to gitignore

Release v1.2.1 - Core engine bump to v0.9.2 (#12)

* chore(deps): pin zenzic core to 0.9.2

* release: bump version to 1.2.1

release: v1.2.0 (#10)

Release v1.1.0