## microsoft/wassette — v0.4.0…v0.5.0

_95 commits._

### Features
- **feat(changelog): add agent-guided release notes** (5d45bbd)

### Fixes
- **Merge pull request #701 from microsoft/fix/local-prepare-release** (d763a5b)
- **fix: create release pull requests locally** (0381dad)
- **Merge pull request #700 from microsoft/fix/prepare-prerelease** (09ef69a)
- **fix: support prepared prereleases** (b350a08)
- **Merge pull request #697 from microsoft/fix/changelog-fragment-input** (45166d5)
- **fix: use changelog fragments as skill input** (71bcee4)
- **fix(ci): resolve dispatch inputs safely** (7eb9626)
- **fix(release): publish immutable releases from drafts** (281fa93)
- **fix(release): centralize downstream workflow dispatch** (0f159a7)
- **fix(release): keep prereleases binary-only** (83a3224)
- **fix(release): clarify prerelease version validation** (840df55)
- **fix(release): dispatch downstream workflows reliably** (47d691c)
- **fix(install): honor WASSETTE_GITHUB_REPO override** (270421c)
- **fix(release): drop nonessential tag comments** (0e4811b)
- **fix(release): make pipeline self-contained** (1483624)
- **Merge pull request #695 from microsoft/fix/ci-dependency-security** (a332a86)
- **fix: complete Streamable HTTP migration** (b553d56)
- **fix(ci): repair dependency updates and migrate HTTP transport** (4edf598)
- **Merge pull request #675 from microsoft/yoshuawuyts/fix-config-env-test-race** (b985416)
- **Fix flaky config env-var test race** (76bee79)
- **Fix docs CI: pin mdbook-tabs to 0.2.3 and bump mdBook to 0.4.52** (878f4bf)
- **Merge pull request #674 from microsoft/yoshuawuyts/fix-corrupted-cargo-lock** (2a21329)
- **fix: resolve security audit CI failures** (74c19a8)
- **fix: align oci-client/oci-wasm dev-dependencies with workspace versions** (de5c647)
- **fix: repair corrupted Cargo.lock with duplicate package entries** (9058271)

### Backend
- **Merge pull request #704 from microsoft/release/v0.5.0** (fb6c9c7)
- **Merge pull request #696 from microsoft/test/dns-rebinding** (bd91205)
- **Merge pull request #703 from microsoft/chore/node24-actions** (8956d7c)
- **Merge pull request #699 from microsoft/docs/update-readme-and-mcp-clients** (87990cc)
- **Merge pull request #698 from asw101/update-go-tinygo** (39157ec)
- **Merge pull request #694 from microsoft/release-1** (02aa1c7)
- **Merge pull request #676 from microsoft/yoshuawuyts/declutter-project-root** (1fe5152)
- **Declutter root configs: remove dead audit.toml, move typos/deny to .config** (5f44666)
- **Declutter root: drop Claude.md, relocate compose example and gitattributes** (531fb08)
- **Move lychee config to .config/lychee.toml** (203e2a7)
- **Remove orphaned root policy.yaml** (8a61c61)
- **Merge pull request #670 from yoshuawuyts/strip-version-prefixes-on-publish** (a261198)
- **Rename example WIT worlds and packages to match component names** (0255458)
- **ensure semver for examples** (940ff84)

### Tests
- **test: cover DNS rebinding protection** (8790dc6)
- **test: isolate OCI loading from metadata extraction** (f30056a)

### Docs
- **docs: clarify release usage commands** (9fa4bba)
- **docs: remove stale SSE references** (a98cbff)
- **docs: address DNS rebinding review feedback** (b445365)
- **docs: refresh architecture and MCP clients** (128aaa1)
- **docs: add mdbook-tabs theme files (#672)** (4241efc)

### Chore
- **chore(release): bump version to 0.5.0** (d362859)
- **ci: update examples workflow to Node 24 actions** (b25da7d)
- **build: update Go and TinyGo toolchains** (7dd9570)
- **ci: update cargo-deny config argument order** (19bcc1b)
- **style: apply current nightly rustfmt** (03474ae)
- **build: update Rust toolchain to 1.97.1** (474ec8c)
- **ci: lock security-tool installs and relax load-component test timeouts** (2063a94)
- **chore(deps): Bump oci-client from 0.16.1 to 0.17.0 (#684)** (bf23e49)
- **chore(deps): Bump http from 1.4.1 to 1.4.2 (#689)** (2467250)
- **chore(deps): Bump clap_complete from 4.6.5 to 4.6.7 (#693)** (1266bd8)
- **chore(deps): Bump clap from 4.6.1 to 4.6.3 (#692)** (4e5085b)
- **chore(deps): Bump anyhow from 1.0.102 to 1.0.104 (#691)** (aec26b6)
- **chore(deps): Bump sha2 from 0.10.9 to 0.11.0 (#683)** (095d29e)
- **chore(deps): Bump bytes from 1.11.1 to 1.12.1 (#690)** (278345a)
- **chore(deps): Bump http-body-util from 0.1.3 to 0.1.4 (#688)** (f20cc70)
- **chore(deps): Bump serde from 1.0.228 to 1.0.229 (#681)** (2587f84)
- **chore(deps): Bump tokio from 1.52.3 to 1.53.1 (#687)** (d4f2f28)
- **chore(deps): Bump rand from 0.9.4 to 0.10.1 (#686)** (0c6c600)
- **chore(deps): Bump wat from 1.251.0 to 1.254.0 (#685)** (c9530fd)
- **chore(deps): Bump serde_json from 1.0.150 to 1.0.151 (#682)** (b731447)
- **chore(deps): Bump oci-wasm from 0.4.0 to 0.6.0 (#680)** (13c48a4)
- **chore(deps): Bump serde_with from 3.20.0 to 3.21.0 (#678)** (53b1557)
- **style: apply rustfmt to src/lib.rs** (4e2020a)
- **chore(deps): Bump rand from 0.8.5 to 0.8.6 in /examples/fetch-rs (#668)** (0d427a4)
- **chore(deps): Bump yauzl, @bytecodealliance/componentize-js and @bytecodealliance/jco (#666)** (dc605ec)
- **chore(deps): Bump yauzl, @bytecodealliance/componentize-js and @bytecodealliance/jco (#665)** (47a165a)
- **chore(deps): Bump yauzl, @bytecodealliance/componentize-js and @bytecodealliance/jco (#664)** (c73f35f)
- **chore(deps): Bump wasmparser from 0.244.0 to 0.245.1 (#662)** (dc74939)
- **chore(deps): Bump futures-util from 0.3.31 to 0.3.32 (#661)** (7870655)
- **chore(deps): Bump clap_complete from 4.5.65 to 4.5.66 (#660)** (4cfb744)
- **chore(deps): Bump wat from 1.244.0 to 1.245.1 (#659)** (f4ceb0c)
- **chore(deps): Bump tempfile from 3.24.0 to 3.25.0 (#658)** (a70e117)
- **chore(deps): Bump clap from 4.5.57 to 4.5.58 (#657)** (5ee12cf)
- **chore(deps): Bump testcontainers from 0.25.2 to 0.27.0 (#656)** (cfee327)
- **chore(deps): Bump oci-wasm from 0.3.0 to 0.4.0 (#654)** (92ef055)
- **chore(deps): Bump anyhow from 1.0.100 to 1.0.101 (#655)** (b822111)
- **chore(deps): Bump oci-client from 0.15.0 to 0.16.0 (#653)** (07797c0)
- **chore(deps): Bump tracing-test from 0.2.5 to 0.2.6 (#652)** (34f1f20)
- **chore(deps): Bump hyper-util from 0.1.19 to 0.1.20 (#651)** (ebd1bcd)
- **chore(deps): Bump rand from 0.9.2 to 0.10.0 (#650)** (7f2a763)
- **chore(deps): Bump reqwest from 0.13.1 to 0.13.2 (#649)** (bfdb507)
- **chore(deps): Bump testcontainers from 0.25.2 to 0.27.0 (#648)** (b202776)
- **chore(deps): Bump clap from 4.5.54 to 4.5.57 (#647)** (a4e9e31)
- **chore(deps): Bump proptest from 1.9.0 to 1.10.0 (#646)** (46754f5)
- **chore(deps): Bump time from 0.3.45 to 0.3.47 (#644)** (3fc5342)
- **chore(deps): Bump git2 from 0.20.3 to 0.20.4 (#642)** (6150eef)
- **chore: update winget and homebrew for v0.4.0 (#641)** (0bb2a12)
- **chore(release): merge release/v0.4.0 back to main (#640)** (842815a)

_Recap by [Repo Wrapped](https://repowrapped.com/gh/microsoft/wassette?utm_source=github-action)._