2.0.0

What's Changed

Security

• security: fix path traversal vulnerability in sidecar file endpoints by @wipash in #12
• fix: prevent command injection via working_dir parameter in sidecar by @wipash in #9
• security: add RuntimeDefault seccomp profile to execution pods by @wipash in #11
• refactor(docker): image size reduction, standardisation, security hardening by @wipash in #25

Features

• feat(helm): Expose most configuration settings via Helm chart by @wipash in #14
• feat: add semantic-release for automated version management by @aron-muon in #23

Bug Fixes

• fix: version arg by @aron-muon in #27
• fix: file transfer bug by @aron-muon in #21
• fix: uploaded files didn't create redis sessions by @aron-muon in #20
• fix: json serialization of helm values by @aron-muon in #17
• fix: code quality improvements - format, lint, and type checking fixes by @aron-muon in #8

Other

• build: modernize Python tooling (uv, ruff, ty, justfile) by @wipash in #6
• test: comprehensive unit test coverage (90%+) by @aron-muon in #18
• ci: reduce full test suite runtime by 5x by @aron-muon in #16
• ci: skip Docker builds for fork PRs by @aron-muon in #26

Full Changelog: 1.0.0...2.0.0