[fas89]

Release 0.20.0

Cuts 0.20.0 from the unreleased changes and adds the Security advisories section for the six advisories fixed on main today (merged from their temporary private forks):

Advisory	Severity
A: config files in an untrusted checkout redirect catalog credentials and start a program	High
B: workspace roots and project .env files widen the sandbox and set trust and endpoint settings	High
C: an MCP client uses the host's cloud identity or stored credentials	High
D: federation credential handling	Medium
E: MCP output-port gateway trusts unverified client-cert headers	Medium
F: fluid init --discover prints and writes the connection URI password	Medium

Each entry carries upgrade notes; several change behaviour (refusals, operator-only settings, git >= 2.31 for authenticated federation fetches). The advisory IDs are added to the CHANGELOG after the advisories are published.

CHANGELOG.md only. After merge: tag v0.20.0 on the merge commit (the release workflow requires a green ci.yml on it), then publish the six advisories with patched_versions = 0.20.0.

Documentation

• No docs needed — CHANGELOG-only release commit; the docs for the fixes are in the advisories and the repo docs the fix PRs changed.

[github-actions]

📄 Documentation Reminder

This PR appears to be missing a documentation reference. Our docs live in a separate repo.

Please update the PR description with one of:

• Link a docs PR — check the "Docs PR linked" box and paste the URL
• Mark as no docs needed — check "No docs needed" with a justification
• Acknowledge docs TODO — check "Docs TODO" and create the docs PR before merge

See the Contributing Guide for details.