CHANGELOG.md

title	Changelog
description	Automatically generated changelog tracking all notable changes to the Azure NVIDIA Robotics Reference Architecture using semantic versioning
author	Edge AI Team
ms.date	2026-09-19
ms.topic	reference

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

Note: This file is automatically maintained by release-please. Do not edit manually.

0.8.0 (2026-05-08)

⚠ BREAKING CHANGES

• dataviewer: bump frontend stack to React 19, Vite 8, Tailwind v4, MSAL 5, ESLint 10 (#524)

✨ Features

• agents: add automated validation for high-risk Dependabot bumps (#574) (8c3686a), closes #573
• data: add camera selector to annotation workspace and fix AV1 frame extraction (#591) (c809d2f)
• data: seed dataviewer frontend test foundation and per-section codecov flags (#594) (c06c4e3)
• dataviewer: add OWASP security middleware stack (#439) (239edb9)
• infrastructure: add conversion pipeline Terraform module (#542) (244531e)
• infrastructure: upgrade OSMO to chart 1.2.1 / image 6.2 with secure auth and skrl 2.0.0 compatibility (#492) (edfd7a5)
• pipeline: add ACSA setup for ROS2 bag sync to Blob (#451) (c271a54)
• workflows: add advisory Dependabot PR reviewer agentic workflow (#498) (d4bb140)
• workflows: trigger AW Dependabot PR reviewer after PR Validation (#580) (7ab3d16)

🐛 Bug Fixes

• ci: correct stale version comment for actions/create-github-app-token (#506) (b2e9a54)
• ci: restore data-pipeline and training broken tests by domain folder restructure (#547) (06d8472)
• docs: update remaining stale 'Coming soon' labels in docs/README.md (#507) (02439d6)
• docs: update stale coming soon label for Training section (#472) (46db49b)
• evaluation: scope SIL AzureML validation code path and script reference (#387) (9f138a9)
• infrastructure: OSMO workflow execution, PostgreSQL public access, and quickstart corrections (#477) (9ed2da6)
• scripts: exclude CHANGELOG.md from changed-files msdate check (#644) (8133bdc)
• workflows: allow dependabot[bot] to activate AW Dependabot PR Review (#586) (39dc022)
• workflows: correct branches filter on AW Dependabot PR Review workflow_run trigger (#584) (fe06b52)
• workflows: normalize validate.yaml placeholder env/compute values (#510) (340ff44)
• workflows: recompile aw-dependabot-pr-review lock file (#576) (d77c167)
• workflows: switch AW Dependabot PR Review to pull_request_target (#589) (3f1edd1)

📚 Documentation

• docs: Fix deployment guide links (#614) (0070b04)
• document dependency-pinning-artifacts directory purpose (#508) (50e0010)

📦 Build System

• training: standardize on Python 3.12 across manifests, containers, and runtime scripts (#541) (7ad014a)

🔧 Operations

• build: add Copilot cloud agent setup-steps workflow (#593) (c912668)

🔧 Miscellaneous

• build: exclude auto-generated CHANGELOG.md from cspell and seed dictionary (#582) (de1dd57)
• build: redesign codecov flags and split pytest CI per component (#520) (357e745)
• dataviewer: bump frontend stack to React 19, Vite 8, Tailwind v4, MSAL 5, ESLint 10 (#524) (50f8ad4)
• dataviewer: repoint stale src/dataviewer references to data-management/viewer (#504) (88fa1b4), closes #503
• deps-dev: bump basic-ftp from 5.3.0 to 5.3.1 (#618) (ca10f2a)
• deps-dev: bump globals from 15.15.0 to 17.5.0 in /data-management/viewer/frontend (#527) (0e0b2ae)
• deps-dev: bump ip-address from 10.1.0 to 10.2.0 (#616) (816c9cf)
• deps-dev: bump lint-staged from 16.4.0 to 17.0.2 in the root-npm-dependencies group across 1 directory (#626) (0e2f293)
• deps-dev: bump pydantic from 2.13.3 to 2.13.4 in the python-dependencies group across 1 directory (#629) (c24f1c1)
• deps-dev: bump the python-dependencies group across 1 directory with 2 updates (#514) (8410f4b)
• deps: bump azure-core from 1.39.0 to 1.40.0 in /evaluation in the inference-dependencies group across 1 directory (#597) (6141db4)
• deps: bump cryptography from 46.0.6 to 46.0.7 in /data-management/viewer (#424) (5fb6d58)
• deps: bump cryptography from 46.0.6 to 46.0.7 in /data-management/viewer/backend (#423) (b516ad5)
• deps: bump lucide-react from 0.469.0 to 1.8.0 in /data-management/viewer/frontend (#528) (1bdfc1e)
• deps: bump nginx from 8aa63af to 5616878 in /data-management/viewer/frontend (#511) (9e7e20e)
• deps: bump nginx from 1.27-alpine to 1.29-alpine in /data-management/viewer/frontend (#484) (0e5c3dd)
• deps: bump node from 435f353 to e49fd70 in /data-management/viewer/frontend (#560) (2884649)
• deps: bump react-is from 18.3.1 to 19.2.5 in /data-management/viewer/frontend (#530) (d51318c)
• deps: bump tensordict from 0.11.0 to 0.12.1 in /evaluation in the inference-dependencies group across 1 directory (#456) (b24e733)
• deps: bump the dataviewer-backend-dependencies group across 1 directory with 2 updates (#531) (171a1da)
• deps: bump the dataviewer-backend-dependencies group across 1 directory with 5 updates (#516) (4f9a577)
• deps: bump the dataviewer-backend-dependencies group across 1 directory with 5 updates (#602) (6c27ab5)
• deps: bump the dataviewer-dependencies group across 1 directory with 2 updates (#529) (8646971)
• deps: bump the dataviewer-dependencies group across 1 directory with 3 updates (#601) (d28fb50)
• deps: bump the dataviewer-dependencies group across 1 directory with 3 updates (#632) (4ca5f3e)
• deps: bump the dataviewer-dependencies group across 1 directory with 5 updates (#515) (109ee81)
• deps: bump the dataviewer-frontend-patch-minor group across 1 directory with 6 updates (#630) (04d5dfd)
• deps: bump the dataviewer-frontend-patch-minor group across 1 directory with 9 updates (#563) (c08f450)
• deps: bump the docusaurus-dependencies group across 1 directory with 4 updates (#627) (f5825fc)
• deps: bump the docusaurus-dependencies group across 1 directory with 6 updates (#599) (b859344)
• deps: bump the github-actions group across 1 directory with 4 updates (#459) (2609c52)
• deps: bump the github-actions group across 1 directory with 4 updates (#517) (f54bf5d)
• deps: bump the inference-dependencies group across 1 directory with 11 updates (#562) (087f53a)
• deps: bump the inference-dependencies group across 1 directory with 2 updates (#628) (4a3be47)
• deps: bump the pip group across 2 directories with 1 update (#494) (a14b6b0)
• docs: update stale Python 3.11 references to 3.12 (#575) (6f85c95)
• scripts: remove redundant SC1091 disables in OSMO deploy scripts (#509) (ae1cb82)

🔒 Security

• build: pin dependencies and hash-verify downloads (#465) (0289f49)
• build: remediate dependency security advisories (#479) (7196d6d)
• deps-dev: bump basic-ftp from 5.2.1 to 5.2.2 (#454) (cb158f1)
• deps-dev: bump basic-ftp from 5.2.2 to 5.3.0 (#495) (e983b8b)
• deps-dev: bump hypothesis from 6.152.3 to 6.152.4 in the python-dependencies group (#598) (83384d2)
• deps-dev: bump markdownlint-cli2 from 0.22.0 to 0.22.1 in the root-npm-dependencies group (#559) (32bde35)
• deps-dev: bump picomatch from 2.3.1 to 2.3.2 in /docs/docusaurus (#455) (66f86ca)
• deps-dev: bump postcss from 8.5.10 to 8.5.12 in /data-management/viewer/frontend (#569) (a652dba)
• deps-dev: bump the python-dependencies group with 2 updates (#457) (749d231)
• deps-dev: bump the python-dependencies group with 2 updates (#485) (71b44fd)
• deps-dev: bump the python-dependencies group with 3 updates (#564) (9fc52fd)
• deps-dev: bump typescript from 6.0.2 to 6.0.3 in /docs/docusaurus in the docusaurus-dependencies group (#513) (5694dbc)
• deps: bump azureml/openmpi4.1.0-ubuntu22.04 from 20260303.v5 to 20260409.v4 in /evaluation/sil/docker (#480) (25d4df8)
• deps: bump cryptography from 46.0.6 to 46.0.7 in /evaluation in the uv group across 1 directory (#538) (92c5b2e)
• deps: bump diffusers from 0.35.2 to 0.38.0 in /training/il/lerobot (#638) (6261d19)
• deps: bump follow-redirects from 1.15.11 to 1.16.0 in /docs/docusaurus (#469) (0458908)
• deps: bump gitpython and mako for lerobot IL training (#623) (9f8022b)
• deps: bump node from 24.14.1-slim to 25.9.0-slim in /data-management/viewer/frontend (#482) (1532d09)
• deps: bump packaging from 26.0 to 26.1 in /evaluation in the inference-dependencies group (#483) (f4afb6c)
• deps: bump pillow from 12.1.1 to 12.2.0 (#467) (39fb663)
• deps: bump python from 3.11-slim to 3.14-slim in /data-management/viewer/backend (#481) (7af9dfc)
• deps: bump the dataviewer-backend-dependencies group across 1 directory with 15 updates (#428) (e4446a2)
• deps: bump the dataviewer-backend-dependencies group in /data-management/viewer/backend with 4 updates (#487) (0f57c5b)
• deps: bump the dataviewer-backend-dependencies group in /data-management/viewer/backend with 8 updates (#566) (d6e7869)
• deps: bump the dataviewer-dependencies group across 1 directory with 5 updates (#464) (24c208d)
• deps: bump the dataviewer-dependencies group in /data-management/viewer with 2 updates (#486) (90149f3)
• deps: bump the dataviewer-dependencies group in /data-management/viewer with 6 updates (#565) (f0bb36b)
• deps: bump the dataviewer-frontend-patch-minor group across 1 directory with 10 updates (#613) (e481f83)
• deps: bump the github-actions group across 1 directory with 4 updates (#534) (5478ab6)
• deps: bump the github-actions group with 2 updates (#488) (4e6ce98)
• deps: bump the github-actions group with 3 updates (#567) (48c38dc)
• deps: bump the github-actions group with 3 updates (#634) (00cfb49)
• deps: bump the github-actions group with 6 updates (#603) (73eb79a)
• deps: bump the training-dependencies group across 1 directory with 23 updates (#463) (d5a8656)
• deps: bump yaml from 2.8.2 to 2.8.3 in /data-management/viewer/frontend (#453) (10449df)
• pytest harness, dependabot advisories, and OSSF Scorecard remediations (#501) (e8756e8)
• scripts: pin and hash-verify all shell script downloads (#468) (0c2bb9c)

0.7.4 (2026-04-10)

🔧 Miscellaneous

• deps: bump cryptography from 46.0.6 to 46.0.7 in /training/rl (#422) (f220042)

0.7.3 (2026-04-09)

🔒 Security

• deps: bump the training-dependencies group in /training/rl with 7 updates (#408) (7d980eb)

0.7.2 (2026-04-09)

🔒 Security

• deps: bump the dataviewer-dependencies group in /data-management/viewer with 13 updates (#405) (fb7b4a4)

0.7.1 (2026-04-09)

🔒 Security

• deps: bump the docusaurus-dependencies group in /docs/docusaurus with 14 updates (#404) (ada7211)

0.7.0 (2026-04-09)

✨ Features

• build: add hve-core release pipeline with dependency SBOM and signing artifacts (#420) (2ff839a)
• build: enforce strict warnings across all linters (#392) (b75e217)
• evaluation: add fuzz testing infrastructure and property-based tests (#416) (d97d42c)
• infrastructure: add optional ADLS Gen2 data lake storage account (#398) (3bb9012)
• settings: add HVE Core extension to workspace and devcontainer recommendations (#226) (f0735d8)

🐛 Bug Fixes

• docs: fix broken links, harden Docusaurus config, and integrate CI workflow (#430) (ea99997)
• scripts: join shellcheck version output before -match to populate $Matches (#432) (8768e76)
• scripts: map unmapped ShellCheck severity levels and harden version parsing (#434) (1e95a17)
• scripts: resolve ShellCheck SC2034 and enable source-path resolution (#443) (04438ea)

🔧 Miscellaneous

• deps-dev: bump basic-ftp from 5.2.0 to 5.2.1 (#429) (438660a)
• deps: bump cryptography from 46.0.6 to 46.0.7 (#425) (2366647)

0.6.1 (2026-04-08)

📦 Build System

• build: upgrade to Node 24 and bump npm devDependencies (#414) (e46ddcd)

0.6.0 (2026-04-08)

✨ Features

• build: add terraform-docs generation pipeline (#378) (78e90d0)
• infrastructure: enable optional AML diagnostic logs (#400) (58dd8db)
• scripts: consolidate scripts library paths and enhance dataviewer (#383) (176d9c9)

🐛 Bug Fixes

• build: remediate CVEs, enforce equality pinning, repair Dependabot config (#391) (0c29148)
• infrastructure: add Storage File Data Privileged Contributor role for ML identity (#380) (378f7ed)
• infrastructure: replace hardcoded NAT Gateway availability zones with variable (#356) (a1397bd)
• infrastructure: resolve TFLint violations and enable hard-fail (#376) (dfb55cd)
• scripts: add dot-source guard to Invoke-MsDateFreshnessCheck.ps1 (#397) (f6f22c3)
• training: validate AzureML and OSMO RL submissions end to end (#372) (49904d3)

📚 Documentation

• infrastructure: add terraform-docs tooling and improve developer experience (#365) (a0fb03a)
• reference: centralize workflow template docs and convert workflow READMEs to pointer index (#379) (68097e4)

🔧 Miscellaneous

• deps-dev: bump the npm_and_yarn group across 1 directory with 2 updates (#374) (d848c8b)
• deps-dev: bump vite from 6.4.1 to 6.4.2 in /data-management/viewer/frontend in the npm_and_yarn group across 1 directory (#395) (6ec7f19)
• deps: bump the github-actions group across 1 directory with 7 updates (#370) (4d1b951)
• deps: bump the uv group across 2 directories with 1 update (#373) (ba66ed9)

🔒 Security

• deps-dev: bump brace-expansion from 1.1.12 to 1.1.13 in /docs/docusaurus in the npm_and_yarn group across 1 directory (#389) (27129d9)
• deps-dev: bump the npm_and_yarn group across 2 directories with 2 updates (#363) (aeae624)
• deps-dev: bump the python-dependencies group with 5 updates (#403) (bb85560)
• deps: bump cryptography from 46.0.5 to 46.0.6 in /training/rl (#367) (a82dd68)
• deps: bump the inference-dependencies group in /evaluation with 2 updates (#401) (c88d253)
• deps: bump the pip group across 4 directories with 2 updates (#411) (1230fe0)
• deps: bump the training-dependencies group across 1 directory with 67 updates (#375) (8e05172)
• deps: bump the uv group across 2 directories with 1 update (#382) (b6c7aea)
• deps: update marshmallow requirement from <4.3.0,>=3.5 to >=3.5,<4.4.0 in /evaluation in the inference-dependencies group (#393) (599c7eb)

0.5.0 (2026-03-26)

✨ Features

• add dataviewer web application for dataset analysis and annotation (#375) (c44d7bb)
• add return type annotations to cli_args functions (#476) (35523ee)
• add YAML config schema with pydantic validation for ROS 2 recording (#376) (1fa5243)
• agents: Copilot agents and skills for dataviewer and OSMO training workflows. (#444) (8b72daf)
• build: add automated ms.date freshness checking (#448) (f92ddbc)
• build: add CLA section, Dependabot security prefix, and OWASP ZAP DAST scan (#241) (083a8af)
• build: add coverage.py configuration to pyproject.toml (#428) (eac7426)
• build: add Go CI pipeline with golangci-lint and go test (#351) (b27e4fb)
• build: add OpenSSF Scorecard workflow and badge (#431) (98a62e7)
• build: add release artifact signing and SBOM attestation (#480) (b226e96)
• build: add TFLint reusable GitHub Actions workflow (#229) (34d5575)
• build: split Go CI into separate lint and test pipelines (#354) (2dec155)
• dataviewer: add authentication middleware and CSRF protection for mutation endpoints (#432) (77c8a01)
• docs: create training documentation hub with guides and migration (#380) (0fdccc5)
• docs: port Docusaurus documentation site with full build validation (#182) (29dd640)
• fix and deploy dataviewer (#498) (c922d49)
• inference: add AzureML and local LeRobot inference workflows (#438) (f7d786a)
• inference: add MLflow trajectory plots and multi-source support to OSMO inference workflow (#421) (8637458)
• infra: add blob storage lifecycle policies and folder structure (#179) (101a6e8)
• infrastructure: add optional observability and compute feature flags (#437) (9eba0da)
• infrastructure: add private Linux Isaac Sim VM deployment option (#348) (3748c2d)
• infrastructure: add terraform-docs auto-generation pipeline (#358) (6565caa)
• infrastructure: harden Isaac Sim VM deployment with encryption and spot options (#355) (6ebc1f2)
• repo: migrate to domain-driven architecture (#270) (a339e70)
• scripts: add --config-preview and deployment summary to submission scripts (#499) (4069806)
• scripts: add Copilot attribution footer validation to frontmatter linting (#378) (4d595f2)
• src: add dataviewer web application with storage adapter layer (#404) (8a9fb70)

🐛 Bug Fixes

• build: add GHSA to cspell custom dictionary (#315) (67db81a)
• build: correct codecov report_type input for terraform test uploads (#324) (d90d66d)
• build: expand CODEOWNERS coverage to critical paths (#505) (bafade1)
• build: pin Docker base image and pip dependencies with Dependabot coverage (#497) (d3d7ea4)
• build: pin pydantic version and use uv in config schema validation workflow (#493) (28d823f)
• build: pin uv installer to versioned URL (#495) (8d8541b)
• build: remediate GHSA vulnerabilities flagged by OSSF Scorecard (#271) (49b6e58)
• build: remove README frontmatter, add FrontmatterExcludePaths, enforce Pester 5 (#443) (641d0f3)
• build: resolve CI failures for release 0.5.0 PR (#174) (62c9900)
• build: resolve codecov PR comment suppression (#523) (5603bd7)
• build: use npm ci for deterministic frontend dependency install (#491) (ee8b5d3), closes #490
• ci: add wait_for_ci to Codecov configuration (#183) (370cf44)
• CI: Issue 116 clean up dataviewer tests (#184) (f466c23)
• ci: pin pydantic to ==2.12.5 across all references (#230) (9d841d5)
• dataviewer: add HTTP Range support for blob video streaming (#165) (8adde50)
• dataviewer: remediate CodeQL alerts and align ruff config (#419) (eb6fac9)
• dataviewer: remediate path traversal and input validation vulnerabilities (#413) (0a1d2ca)
• docs: remove trailingSlash: false for GitHub Pages compatibility (#228) (a78cb97)
• gpu: add GPU Operator validation dependencies to GRID driver installer (#441) (eec42da)
• infrastructure: add zone-redundant config to VPN gateway public IP (#352) (2d734f4)
• infrastructure: improve stdout handling for helm commands in GPU… (#311) (153f467)
• infrastructure: resolve remaining TFLint violations in SIL module and example configs (#298) (c0ce3e5)
• infrastructure: resolve TFLint violations in root and automation modules (#287) (b6a4604), closes #203
• infrastructure: update deprecated bgp vng variable name (#307) (f530734)
• scripts: pin uv version in OSMO workflow templates (#500) (7edf13a)
• scripts: replace lambda with def in lerobot_handler to satisfy R… (#176) (baf9e58)
• scripts: support OSMO control-plane deploys with in-cluster Redis (#317) (d4b70de)
• scripts: update compute target name derivation logic (#319) (bb20431)
• settings: update devcontainer name to match project context (#177) (745321e)
• terraform: create PostgreSQL Key Vault secret via ARM control plane (#304) (5d73b81)
• terraform: gate observability with feature flags (#303) (ea5e056)
• terraform: switch VPN gateway defaults to AZ SKUs (#309) (74989c5)
• training: correct learning rate mapping and pin LeRobot version (#439) (5cf9943)
• workflows: enable SARIF upload for dependency-pinning scans (#502) (124cad6), closes #501
• workflows: remove redundant top-level permissions from codeql-analysis (#489) (1490fda)
• workflows: use bash shell for uv.lock regeneration and add SARIF to dictionary (#225) (e6fa6ea)

📚 Documentation

• add chunking and compression configuration guide for Jetson edge recording (#408) (787a322)
• add OpenSSF Best Practices badge to README (#282) (01ea384)
• add threat model cross-reference to SECURITY.md (#235) (88a461e)
• add vulnerability remediation timeline to SECURITY.md (#233) (5ead3ee)
• contributing: remove version-specific planning language from ownership tip (#407) (3191f9b)
• deploy: replace deploy/ READMEs with pointer files (#379) (b3c3abb)
• docs: add bug report response timeline for OSSF report_responses criterion (#485) (9b26212)
• docs: add component update process for OpenSSF Silver badge (#446) (6adc8a2)
• docs: Add data collection and training recipes (#343) (9c34f86)
• docs: add deprecation policy for external interfaces (#445) (229d5db)
• docs: add structure for recipes in repo (#322) (098757b)
• docs: add YAML frontmatter to SUPPORT.md (#478) (d94c15d), closes #347
• docs: clarify issue assignment requirement before starting work (#299) (1534462)
• docs: create inference and training docs hubs (#402) (7a20a2e)
• docs: create reference hub and migrate script documentation (#503) (03a31c6)
• docs: create training and inference documentation hubs (#403) (7be003b)
• operations: create operations hub and troubleshooting guide (#525) (31c7aaa)
• reference: add copilot artifacts documentation hub (#170) (9a45ca4)
• simplify root README and update prerequisites (#440) (c0c7710)

♻️ Code Refactoring

• build: align Python dependency workflows with uv (#447) (3102e03)
• docs: rename Docusaurus site to Physical AI Toolchain (#224) (cfdf47a)
• infrastructure: rename boolean variables to should_ prefix and add missing core variables (#292) (4496593)
• python: move runtime deps to workflow pyproject manifests (#405) (6c5fbeb)

📦 Build System

• build: add Codecov upload to pytest workflow (#434) (0110c17)
• deps-dev: bump the npm_and_yarn group across 2 directories with 1 update (#325) (59cf9e6)
• workflows: enable coverage parameters and fix Pester test infrastructure (#435) (528bbde)

🔧 Miscellaneous

• add gomod to cspell general-technical wordlist (#362) (1f93f47)
• build: add codecov.yml for unified coverage reporting (#430) (b0faf70)
• build: add Go toolchain devcontainer feature and Dependabot gomod (#337) (8a36620)
• deps: bump cryptography from 45.0.7 to 46.0.5 in /src/training (#506) (a06434e)
• deps: bump minimatch in /src/dataviewer/frontend (#416) (38a7607)
• deps: bump pyasn1 from 0.6.2 to 0.6.3 in /training/rl (#296) (7b42cf5)
• deps: bump rollup in /src/dataviewer/frontend (#417) (6302ce4)
• deps: bump the common-dependencies group in /src/common with 3 updates (#507) (db05074)
• deps: bump the github-actions group across 1 directory with 6 updates (#284) (c40eff6)
• deps: bump the github-actions group across 1 directory with 6 updates (#433) (2d9dd4f)
• deps: bump the github-actions group across 1 directory with 6 updates (#510) (c334a64)
• deps: bump the github-actions group with 2 updates (#163) (f25713e)
• deps: bump the inference-dependencies group in /evaluation with 3 updates (#279) (1d2d3dc)
• deps: bump the inference-dependencies group in /src/inference with 5 updates (#508) (2852ffb)
• deps: bump the lerobot-inference-dependencies group in /workflows/azureml with 4 updates (#511) (b7c5773)
• deps: bump the npm_and_yarn group across 2 directories with 1 update (#223) (6a261ab)
• deps: bump the training-dependencies group (#429) (66e43f4)
• deps: bump tornado from 6.5.4 to 6.5.5 in the uv group across 1 directory (#172) (d6caf29)
• docs: correct ms.date tooling and refresh stale documentation (#349) (ccaa1e8)
• infrastructure: add Go module and golangci-lint config for e2e tests (#347) (e0e6bbf)
• infrastructure: add root .terraform-docs.yml configuration (#312) (bb73bbb)
• migrate references from Azure-Samples to microsoft/physical-ai-toolchain (f58f0ef)
• workflows: update Dependabot, CodeQL, CODEOWNERS, and cspell for dataviewer coverage (#231) (6d8c2e8)

🔒 Security

• deps: bump mlflow from 3.5.0 to 3.8.0rc0 in /training/rl (#297) (e9929df)
• deps: bump the github-actions group across 1 directory with 4 updates (#344) (6826929)
• deps: bump the inference-dependencies group in /evaluation with 2 updates (#339) (6804630)
• deps: bump the npm_and_yarn group across 3 directories with 1 update (#361) (6760857)
• deps: bump the training-dependencies group across 1 directory with 54 updates (#286) (d9ae04f)
• deps: bump the uv group across 3 directories with 1 update (#360) (dfbda06)

0.4.0 (2026-02-27)

✨ Features

• deploy: add PowerShell ports of deployment scripts (#330) (4797563)
• deploy: multi-node GPU support with dynamic OSMO pool configuration (#410) (6c98f05)
• scripts: add PowerShell dev environment bootstrap script (#329) (f599104)
• scripts: add SHA staleness checking script and Pester tests (#321) (1d0ccbc)
• settings: replace Black formatter with Ruff in VS Code workspace config (#323) (932a73b)
• workflows: configure pytest and ruff toolchain with full remediation and python-lint CI (#196) (06390d1)

🐛 Bug Fixes

• build: regenerate uv.lock in release-please PR to sync project version (#346) (ef0e704), closes #322
• build: resolve 255 cspell errors across 51 files (#345) (ab99655)

📚 Documentation

• add project governance model and PR inactivity policy (#343) (683a93a)
• add regression test policy for bug fix PRs (#320) (057653b)
• add threat model and security documentation hub (#373) (bed3045)
• create docs/ hub index for documentation navigation (#368) (fb7a217)
• deploy: create docs/deploy/ hub and migrate deployment documentation (#372) (57de949)
• docs: add getting-started hub and quickstart tutorial (#369) (3262f10)
• document internationalization scope as not applicable (#367) (b58fe65)

♻️ Code Refactoring

• build: standardize CI workflows to pwsh with composite action (#341) (c9822f9)

📦 Build System

• build: add CodeQL analysis to PR and main CI orchestrators (#324) (de1d49e)
• build: add OS matrix and -CI flag to Pester tests workflow (#195) (6806647)

🔧 Miscellaneous

• build: update stale GitHub Actions SHA pins and actionlint version (#342) (86074cd)
• deps: bump azure-core (#370) (e5a30ed)
• deps: bump flask from 3.1.2 to 3.1.3 (#318) (4a1dbe4)
• deps: bump the python-dependencies group across 1 directory with 4 updates (#319) (e9258ec)
• deps: bump the training-dependencies group across 1 directory with 11 updates (#186) (67580ac)
• deps: bump werkzeug from 3.1.5 to 3.1.6 (#317) (72c64ad)

0.3.0 (2026-02-19)

✨ Features

• add LeRobot imitation learning pipelines for OSMO and Azure ML (#165) (baef32d)
• linting: add YAML and GitHub Actions workflow linting via actionlint (#192) (e6c1730)
• scripts: add dependency pinning compliance scanning (#169) (5d90d4c)
• scripts: add frontmatter validation linting pipeline (#185) (6ff58e3)
• scripts: add verified download utility with hash checking (#180) (063dd69)

🐛 Bug Fixes

• build: remove [double] cast on JaCoCo counter array in coverage threshold check (#312) (6b196de)
• build: resolve release-please draft race condition (#311) (6af1d8b)
• scripts: wrap Get-MarkdownTarget returns in array subexpression (#314) (1c5e757)
• src: replace checkpoint-specific error message in upload_file (#178) (bc0bc7f)
• workflows: add id-token write permission for pester-tests (#183) (5c87ca8)

♻️ Code Refactoring

• scripts: align LintingHelpers.psm1 with hve-core upstream (#193) (f24bc04)
• scripts: replace GitHub-only CI wrappers with CIHelpers in linting scripts (#184) (033cc9c)
• src: standardize os.environ usage in inference upload script (#194) (5a82581)

🔧 Miscellaneous

• scripts: add Pester test runner and fix test configuration (#176) (4e54ae2)

0.2.0 (2026-02-12)

✨ Features

• build: add automatic milestone closure on release publish (#148) (18c72e5)

🐛 Bug Fixes

• build: restore release-please skip guard on release PR merge (#147) (d8ade84)
• workflows: quote if expression to resolve YAML syntax error (#172) (b3120a6)

📚 Documentation

• add deployer-facing security considerations (#161) (1f5c110)
• add hve-core onboarding to README and contributing guides (#153) (8fb63bb)
• add testing requirements to CONTRIBUTING.md (#150) (0116c4f)
• contributing: add accessibility best practices statement (#166) (2d5f239)
• contributing: publish 12-month roadmap (#159) (f158463)
• create comprehensive CONTRIBUTING.md (#119) (9c60073)
• define documentation maintenance policy (#162) (bd750ed)
• deploy: standardize installation and uninstallation terminology in README files (#168) (43427f3)
• docs: add test execution and cleanup instructions (#167) (d83b20e)
• docs: decompose and relocate detailed contributing guide (#156) (3783400)
• scripts: document submit script CLI arguments (#123) (adabdd5)
• src: add docstrings to training utils context module (#157) (b6312f5)
• src: add Google-style docstrings to metrics module (#151) (311886c)
• src: expand Google-style docstrings for training utils env module (#131) (29ab4f8)

🔧 Miscellaneous

• deps: bump protobuf from 6.33.3 to 6.33.5 (#51) (cab59e6)
• deps: bump the github-actions group with 4 updates (#155) (f73898f)
• deps: bump the python-dependencies group across 1 directory with 11 updates (#134) (09331ea)

0.1.0 (2026-02-07)

✨ Features

• .github: Add GitHub workflows from hve-core (#22) (96ae111)
• add PR template and YAML issue form templates (#16) (059ac48)
• automation: add runbook automation (#25) (c8f0fd4)
• build: integrate release-please bot with GitHub App auth and CI gating (#139) (f930b6b)
• build: migrate package management to uv (#43) (cfe028f)
• cleanup: remove NGC token requirement and add infrastructure cleanup documentation (#31) (51ed7d6)
• deploy: add Azure PowerShell modules for automation runbooks (#44) (0148921)
• deploy: add policy export and inference scripts for ONNX/JIT (#21) (94b6ff1)
• deploy: add support for workload identity osmo datasets (#24) (c948a3c)
• deploy: implement robotics infrastructure with Azure resources (#9) (103e31e)
• deploy: integrate Azure Key Vault secrets sync via CSI driver (#32) (864006b)
• devcontainer: enhance development environment setup (#28) (a930ac0)
• docs: documentation updates (#27) (3fcc6b6)
• initial osmo workflow and training on Azure (#1) (ff5f7df)
• instructions: add Copilot instruction files and clean up VS Code settings (#36) (6d8fb2c)
• repo: add root capabilities and reorganize README (#17) (4aede6f)
• robotics: refactor infra and finish OSMO and AzureML support (#23) (3b15665)
• scripts: add CIHelpers.psm1 shared CI module (#129) (467e071)
• scripts: add RSL-RL 3.x TensorDict compatibility and training backend selection (#26) (4986caa)
• scripts: reduce payload size by excluding any cache from python (#29) (8a20b46)
• training: add MLflow machine metrics collection (#5) (1f79dc0)

🐛 Bug Fixes

• build: strip CHANGELOG frontmatter and fix initial version for release-please (#142) (81755ec)
• deploy: ignore changes to zone in PostgreSQL flexible server lifecycle (#34) (80ef4a6)
• deploy: resolve hybrid cluster deployment issues (#39) (69f69d7)
• ps: avoid PowerShell ternary for compatibility (#124) (b8da8a1)
• script: replace osmo-dev function with direct osmo command usage (#30) (29c8b6d)

📚 Documentation

• deploy: enhance VPN and network configuration documentation (#38) (2992f07)
• deploy: enhance VPN documentation with detailed client setup instructions (#35) (4ded515)
• enhance README with architecture diagram and deployment documentation (#33) (7baf903)
• update README.md with architecture overview and repository structure (4accbdb)

🔧 Miscellaneous

• deps: bump azure-core from 1.28.0 to 1.38.0 (#45) (d25d14e)
• deps: bump azure-core from 1.28.0 to 1.38.0 in /src/training (#42) (b1bd20c)
• deps: bump pyasn1 from 0.6.1 to 0.6.2 (#46) (97a3b2c)
• instructions: add general instructions copilot instructions (44fc94d)
• settings: add development environment configuration (c3c8e32)
• settings: migrate cspell to modular dictionary structure (#15) (ff8ffd2)
• training: refactor SKRL training scripts for maintainability (#4) (8cdadac)