Release v0.2.0-rc.1

What's Changed

Documentation

• feat: remove feature authoring commands from CLI by @pofallon in #11
• docs: Podman experimental status + 1.0 roadmap + CHANGELOG bootstrap (PR-7 of 7) by @pofallon in #31
• docs: purge historical / pre-implementation artifacts (−55k lines) by @pofallon in #54
• fix: close developer-facing devcontainer spec surface gaps by @pofallon in #57
• docs(examples): add 25 spec-permutation scenarios as canaries by @pofallon in #75
• fix(cli): accept any --config / --override-config filename (#65) by @pofallon in #76
• fix(up): keep --workspace-folder for discovery; git root drives mount only (#67) by @pofallon in #78
• fix(read-configuration): accept --config alone (#66) by @pofallon in #77
• fix(examples): set-up/basic must pass --include-configuration (closes #92) by @pofallon in #98
• fix(compose): apply deacon devcontainer.* labels to compose-managed containers (#100) by @pofallon in #101
• docs(examples): make read-configuration canaries spec-compliant (#104) by @pofallon in #105
• fix(exec): keep workspace anchored to user-supplied path; spec-compliant exec canaries (#110, #111) by @pofallon in #112
• docs(examples): fix python heredoc stdin collision in 13 canaries (#115) by @pofallon in #116
• docs(examples): unblock 3 up canaries (compose layout, env-var, stderr capture) by @pofallon in #121
• fix(build): honor build.dockerfile, dedup image tags, layer features from a tagged base by @pofallon in #129
• fix(oci): parse feature refs with both a tag and a digest (name:tag@digest) by @pofallon in #131
• feat(build): support feature installation on image-reference configs by @pofallon in #134
• chore(specs): reconcile deferral tracking with implemented state by @pofallon in #136
• feat(build): support feature installation for Docker Compose configs by @pofallon in #139
• docs(examples): fix invalid python one-liner in with-features canary by @pofallon in #144
• docs(examples): add canary verification status manifest by @pofallon in #146
• fix(down): sweep stale containers by local_folder + idempotent teardown by @pofallon in #147
• docs(examples): make exec canaries monorepo-robust and portable by @pofallon in #149
• docs(examples): fix up/configuration-output, lifecycle-hooks, dotfiles fixtures by @pofallon in #151
• docs(examples): refresh canary sweep date and PR list by @pofallon in #152
• docs(examples): add Tier 1-3 compatibility canaries by @pofallon in #154
• fix(features): resolve dependsOn/installsAfter by features-object ref form by @pofallon in #158
• docs(examples): add observability/json-logs canary for output-streams contract by @pofallon in #159

CI/CD & Build

• feat: complete feature support during up command by @pofallon in #10
• feat: implement typed lifecycle command format support by @pofallon in #13
• chore: bump MSRV to 1.82 + cargo-deny security gate (PR-1 of 7) by @pofallon in #26
• chore(deps): bump actions/upload-artifact from 4 to 7 by @dependabot[bot] in #18
• chore(deps): bump actions/checkout from 4 to 6 by @dependabot[bot] in #19
• chore(deps): bump actions/download-artifact from 4 to 8 by @dependabot[bot] in #20
• chore(deps): bump actions/upload-pages-artifact from 3 to 5 by @dependabot[bot] in #21
• chore(deps): bump actions/cache from 4 to 5 by @dependabot[bot] in #22
• chore(deps): bump console from 0.15.11 to 0.16.3 by @dependabot[bot] in #24
• chore: SECURITY.md, CodeQL workflow, package metadata, refresh CONTRIBUTING by @pofallon in #47
• fix: shell-injection-safe command construction in dotfiles paths by @pofallon in #50
• refactor(core): migrate json5 → jsonc-parser (#52 task 5) by @pofallon in #61
• feat: workspace-trust gate for host-side lifecycle (#52 task 2) by @pofallon in #59
• refactor(async): replace blocking IO in async paths with tokio (#52 task 3) by @pofallon in #62
• fix(up): route lifecycle command stdout to stderr (#113) by @pofallon in #114
• chore: align workspace with Rust best practices (edition 2024, MSRV CI, deps, profiles) by @pofallon in #163
• chore: add cargo-bloat Makefile targets for binary-size analysis by @pofallon in #167
• build: raise MSRV to 1.95 to restore the MSRV CI gate by @pofallon in #166
• refactor: ship full consumer surface as one binary (remove MVP/full feature gate) by @pofallon in #165
• feat(ports): support appPort arrays and share build-config resolution by @pofallon in #173
• chore(release): prepare v0.2.0-rc.1 prerelease by @pofallon in #174

Other changes

• docs: update README for consumer-only scope by @pofallon in #12
• fix: correct ConfigMerger merge rules for booleans and arrays by @pofallon in #14
• refactor: lifecycle code deduplication + named config search spec (014) by @pofallon in #15
• fix(docker_retry): use /usr/bin/true for macOS portability by @pofallon in #28
• fix(build): emit devcontainer.metadata label as JSON array (PR-2 of 7) by @pofallon in #27
• feat: wire --container-id / --id-label for run-user-commands and read-configuration (PR-3 of 7) by @pofallon in #29
• feat: lockfile graduation — schema parity + CLI surface (PR-4 of 7, phase 1) by @pofallon in #33
• feat: set-up subcommand — MVP scaffold + lifecycle hooks (PR-6a) by @pofallon in #36
• feat: lockfile graduation — wire writer in up's feature pipeline (PR-4b) by @pofallon in #42
• feat: set-up — wire dotfiles installer (PR-6b) by @pofallon in #43
• feat: build — install features + write lockfile for Dockerfile builds (PR-4c) by @pofallon in #41
• feat: upgrade subcommand — regenerate-lockfile MVP (PR-5a) by @pofallon in #44
• feat: set-up — /etc/environment + /etc/profile root patches (PR-6c) by @pofallon in #38
• feat: upgrade — wire --feature / --target-version config pinning (PR-5b) by @pofallon in #40
• docs(changelog): add entries for upgrade subcommand and features-during-build by @pofallon in #45
• fix(cli): map InteractiveShell to its own ContainerProbeMode variant by @pofallon in #46
• fix(core): remove three runtime expect()/panic sites by @pofallon in #48
• fix(oci): HTTP client defaults — sensible timeouts + fail-fast on auth setup by @pofallon in #49
• fix(features): OptionValue::Display surfaces serialize errors instead of empty string by @pofallon in #53
• chore: delete deprecated --experimental-lockfile aliases and dormant scaffolding by @pofallon in #51
• docs(readme): refresh badges + shipped/limitations sections for 1.0 by @pofallon in #55
• feat(logging): wire redaction into tracing pipeline (#52 task 1) by @pofallon in #58
• refactor(core): anyhow → typed errors in core modules (#52 task 4) by @pofallon in #60
• refactor(core): async ConfigLoader (config.rs cluster from #62) by @pofallon in #63
• docs(readme): workspace-trust section + post-1.0 hardening recap by @pofallon in #64
• fix(config): preserve top-level secrets metadata (#72) by @pofallon in #79
• fix(lifecycle): ...