chore: release main

[vaam-apps]

🤖 I have created a release beep boop

0.2.0

0.2.0 (2026-09-19)

Features

• add ai-governance issue templates (#2) (2f06d3e)
• ci: add a reusable sync-repo-settings workflow (#7) (686295f)
• governance: add org-wide PR template and PR governance workflow (#4) (cdf7d2b)
• let trivy gate without uploading SARIF (8231877)
• org-wide SAST, linting, Trivy and issue-governance workflows (7605ffc)
• pass ignore files to Trivy explicitly (24fa3b0)

Bug Fixes

• check out the merge ref super-linter needs, replay fixes onto the head (6dac296)
• clear the failure comment when an issue starts conforming (1a919e2)
• lint: stop MD024 failing every release-please changelog (#8) (b04a3ff)
• mint the App token with client-id, and let shfmt actually run (16f86a4)
• only commit when there is a tracked change to commit (c3c6bc3)
• stop blocking on the SARIF processing poll (5569c8a)
• upload SARIF as the App via the public endpoint (d9c2a1b)

Refactoring

• upload SARIF with GITHUB_TOKEN, not the org App (2278bc3)

Documentation

• adr: propose an SSDLC and CPSA strategy for the org (#5) (d673060)
• architecture docs as preferred source of truth, plus SSDLC control map (#1) (54af9a3)
• governance: one source of truth for the mandatory arc42 sections (#6) (57da409)
• how releases work org-wide, and the ten ways they have failed silently (#9) (38266fa)
• releasing: internal path dependencies, and when NOT to use release-type dart (e26463f)
• releasing: PR_TITLE only governs squash, and the skills repos are a deliberate exception (187fa65)
• releasing: squash-only is now set org-wide; record the canonical shape (8fd63e6)
• releasing: ten repos, not nine — the private one was missed (ba8bfa3)
• releasing: token scoping, the changed-files lint gap, and Dart build numbers (8a70317)

Continuous Integration

• adopt release-please for this repo's own changelog and tag (#10) (310ee37)

Chores

• A/B the SARIF upload with both tokens in one run (ef716fb)
• probe the Actions permission, stop super-linter commenting (ab3bbe0)
• probe what the App token can reach, drop the YAML prettier fix (2a95142)

---

This PR was generated with Release Please. See documentation.

[vaam-apps]

🤖 Created releases:

• v0.2.0

🌻