PolicyMesh v0.5.2: git-ref injection guard on diff --base-ref (core 1…

….3.0)

Release v0.5.1: core matchSecret + severity-aware annotations

Ships the switch to agent-gov-core's matchSecret (replacing the stale
vendored copy) and makes GitHub annotations severity-aware: high/critical
findings emit ::error instead of ::warning, matching core/GovVerdict. Exit
gating unchanged (still --fail-on). Rolls up the core ^1.2.1 bump.

Co-Authored-By: Claude Opus 4.7 <[email protected]>

v0.5.0: bump readme + lockfile + workflow.test version refs

The previous v0.5.0 commit landed the migration but missed the
version pinning surface (README @v0.4.0 tags, package-lock.json version,
workflow.test.mjs regex).

Release v0.4.0

Release v0.3.0

Release v0.2.0

Merge pull request #36 from Conalh/codey/codeium-plugin-mcp-surface

[codey] Support Codeium plugin MCP config

Merge pull request #34 from Conalh/codey/readable-surface-messages

[codey] Use readable surface names in findings

Merge pull request #32 from Conalh/codey/track-action-dist

[codey] Track bundled Action dist

Merge pull request #31 from Conalh/codey/release-0-1-15

[codey] Prepare v0.1.15 release