v0.9.0

What's Changed

New Features 🌈

• refactor: experiment with tracing by @woodruffw in #232
• feat: remove --no-progress by @woodruffw in #248

Bug Fixes 🐛

• fix: handle non-static env: in job steps by @woodruffw in #246
• fix: template-injection: ignore another safe context by @woodruffw in #254
• fix: download both .yml and .yaml from repos by @woodruffw in #265
• fix: bump annotate-snippets to fix crash by @woodruffw in #264
• fix: move artipacked pendantic finding to auditor by @woodruffw in #272
• fix: template-injection: ignore runner.temp by @woodruffw in #277

Performance Improvements 🚄

• feat: evaluates a matrix expansion only once by @ubiratansoares in #274

Documentation Improvements 📖

• docs: document installing with PyPI by @woodruffw in #242
• docs: add a trophy case by @woodruffw in #243
• docs: update pre-commit docs to point to new repo by @woodruffw in #247
• docs: switch GHA example to uvx by @woodruffw in #255
• docs: add template-injection tips by @woodruffw in #259
• docs: audits: add another env hacking reference by @woodruffw in #266
• docs: Rename "unsecure" to insecure by @szepeviktor in #270
• docs: more trophies by @woodruffw in #276
• docs: make the trophy case prettier by @woodruffw in #279

New Contributors

• @szepeviktor made their first contribution in #270

Full Changelog: v0.8.0...v0.9.0