SubMiner/backlog/tasks/task-137 - Cut-patch-release-v0.5.2-for-SignPath-artifact-config-pinning.md

id, title, status, assignee, created_date, updated_date, labels, dependencies, references, priority

id	title	status	assignee	created_date	updated_date	labels	dependencies	references	priority
TASK-137	Cut patch release v0.5.2 for SignPath artifact config pinning	Done	codex	2026-03-08 20:44	2026-03-08 20:58	release patch	TASK-136	package.json CHANGELOG.md release/release-notes.md	high

Description

Publish a patch release from the SignPath artifact-configuration pinning change by bumping the app version, generating the committed changelog artifacts for the new version, and pushing a new v0.5.2 tag.

Acceptance Criteria

• #1 Repository version metadata is updated to 0.5.2.
• #2 CHANGELOG.md and release/release-notes.md contain the committed v0.5.2 section and consumed fragments are removed.
• #3 New v0.5.2 commit and tag are pushed to origin.

Implementation Plan

1. Add the release fragment for the SignPath configuration pinning change.
2. Bump package.json to 0.5.2 and run the changelog builder.
3. Run changelog/typecheck/test verification.
4. Commit the release-prep change set, create v0.5.2, and push commit plus tag.

Implementation Notes

Bumped package.json from 0.5.1 to 0.5.2, ran bun run changelog:build, and committed the generated release artifacts. That prepended the v0.5.2 section to CHANGELOG.md, regenerated release/release-notes.md, and removed the consumed changes/signpath-artifact-config-pin.md fragment.

Verification before tagging: bun run changelog:lint, bun run changelog:check --version 0.5.2, bun run typecheck, and bun run test:fast.

Final Summary

Prepared patch release v0.5.2 so the explicit SignPath artifact-configuration pin ships on a fresh release tag. Version metadata, committed changelog artifacts, and release notes are aligned with the new patch version.

Validation: bun run changelog:lint, bun run changelog:check --version 0.5.2, bun run typecheck, bun run test:fast.