Release 0.1.6

Added

• check-chars: Dangerous character blacklist (bidi controls + zero-width chars, CVE-2021-42574) with comment-aware detection — flags in code, allows in comments
• check-chars: is_dangerous_char() public function and DANGEROUS_CODEPOINTS constant
• check-chars: Comment region detection state machine for Python (#) and JS/TS (//, /* */) with string literal tracking
• check-imports: Relative import support — from .foo import x and from . import foo now resolve correctly for cycle detection

Fixed

• check-imports: ImportAnalyzer now handles node.level > 0 (relative imports) by resolving against current_module with correct package vs module distinction

Release 0.1.5

Changed

• Use language-prefixed git tags (python/v0.1.5) to support monorepo with independent package versions
• URL-encode tag in GitHub API calls to handle / in tag names

Release 0.1.4

Fixed

• Fix release script version check to use PACKAGE_NAME when reading init.py

Release 0.1.3

Fixed

• Fix release script version check to use Python package import name derived from project name (hyphen to underscore)

Release 0.1.2

Fixed

• Fix PyPI version check false positives: use exact match instead of grep -w to prevent partial version matching (e.g. 0.2.0 matching 0.2.0.1)
• Fix sed RE error on macOS when detecting GitHub repo from git remote (BSD sed doesn't support non-greedy .+?)