release: v0.1.8

CHANGELOG.md

@@ -7,6 +7,29 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.1.8] - 2026-06-02
+
+### Fixed
+
+- **`unwrap()` → `expect()`** in ProgressStyle templates (llm.rs, scanner.rs) — clearer panic messages on template parse failure (#87)
+- **Consolidated duplicate `impl Severity` blocks** into single implementation (#83)
+- **`file_content_hash` returns `Option<String>`** instead of empty string on read failure — prevents infinite rescan loop on unreadable files (#77)
+- **Permission errors logged in scanner** — file walk now logs permission errors at debug level instead of silently skipping (#76)
+- **Auth file permission warning** — warns if `~/.cora/auth.toml` has overly permissive file permissions (Unix only) (#72)
+- **SARIF upload size validation** — validates SARIF file size against GitHub's 10MB limit before upload (#82)
+- **Float division for MB display** — SARIF size error now shows accurate fractional MB (was integer division truncating to 0) (#82)
+- **Non-deterministic `DefaultHasher` → `sha2`** — scan cache now uses SHA-256 for deterministic hashing across Rust versions (#81)
+
+### Added
+
+- **`checksums-sha256.txt` in release artifacts** — release workflow generates SHA-256 checksums for all platform binaries (#109)
+
+### Changed
+
+- **Official CodeCora branding assets** — logo, favicon, and OG image updated from ajianaz/cora SaaS repo (#110)
+- **Standalone `cora-review.yml` workflow** — CI action extracted from inline `ci.yml` job to dedicated workflow with concurrency control (#107)
+- **Action v2 hardened** — all third-party actions pinned to commit SHA, checksum verification for binary downloads, env var indirection for inputs, `grep` pipefail fix, empty file guard, Node 24 strict mode compatibility (#107)
+
 ## [0.1.7] - 2026-06-01
 
 ### Added
@@ -159,7 +182,12 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - **Cross-platform** — Linux (x86_64, ARM64), macOS (Apple Silicon), Windows (x86_64)
 - **MIT License** — fully open source
 
-[Unreleased]: https://github.com/ajianaz/cora-cli/compare/v0.1.3...develop
+[Unreleased]: https://github.com/ajianaz/cora-cli/compare/v0.1.8...develop
+[0.1.8]: https://github.com/ajianaz/cora-cli/compare/v0.1.7...v0.1.8
+[0.1.7]: https://github.com/ajianaz/cora-cli/compare/v0.1.6...v0.1.7
+[0.1.6]: https://github.com/ajianaz/cora-cli/compare/v0.1.5...v0.1.6
+[0.1.5]: https://github.com/ajianaz/cora-cli/compare/v0.1.4...v0.1.5
+[0.1.4]: https://github.com/ajianaz/cora-cli/compare/v0.1.3...v0.1.4
 [0.1.3]: https://github.com/ajianaz/cora-cli/compare/v0.1.2...v0.1.3
 [0.1.2]: https://github.com/ajianaz/cora-cli/compare/v0.1.1...v0.1.2
 [0.1.1]: https://github.com/ajianaz/cora-cli/compare/v0.1.0...v0.1.1

Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "cora-cli"
-version = "0.1.7"
+version = "0.1.8"
 edition = "2024"
 description = "CLI-first AI code review — BYOK, diff/scan/branch, pre-commit hooks"
 license = "MIT"

README.md

@@ -1,6 +1,6 @@
 <div align="center">
 
-<img src="assets/icon.png" alt="cora" width="120" />
+<img src="assets/logo.png" alt="CodeCora" width="120" />
 
 **AI-Powered Code Review CLI**
 
@@ -46,10 +46,10 @@ Download the latest release from [GitHub Releases](https://github.com/ajianaz/co
 
 ```bash
 # Determine your platform tag from the releases page, e.g.:
-#   cora-aarch64-unknown-linux-gnu-v0.1.7.tar.gz
-#   cora-x86_64-unknown-linux-gnu-v0.1.7.tar.gz
-#   cora-aarch64-apple-darwin-v0.1.7.tar.gz
-#   cora-x86_64-pc-windows-msvc-v0.1.7.zip
+#   cora-aarch64-unknown-linux-gnu-v0.1.8.tar.gz
+#   cora-x86_64-unknown-linux-gnu-v0.1.8.tar.gz
+#   cora-aarch64-apple-darwin-v0.1.8.tar.gz
+#   cora-x86_64-pc-windows-msvc-v0.1.8.zip
 
 # Example: Linux aarch64
 VERSION=$(curl -s https://api.github.com/repos/ajianaz/cora-cli/releases/latest | grep tag_name | cut -d'"' -f4)

website/src/app.html

@@ -2,7 +2,7 @@
 <html lang="en">
 	<head>
 		<meta charset="utf-8" />
-		<link rel="icon" href="data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 32 32'%3E%3Crect width='32' height='32' rx='8' fill='oklch(0.13 0.01 270)'/%3E%3Ctext x='16' y='23' font-family='Inter,system-ui,sans-serif' font-weight='700' font-size='20' fill='oklch(0.65 0.22 270)' text-anchor='middle'%3EC%3C/text%3E%3C/svg%3E" />
+		<link rel="icon" href="/favicon.png" />
 		<meta name="viewport" content="width=device-width, initial-scale=1" />
 		<meta name="theme-color" content="oklch(0.13 0.01 270)" />
 		<meta name="color-scheme" content="dark" />