peczenyj / GDPR-IAB-TCFv2 / 26571713598

96%

Build Type

push

github

Committed by web-flow

Commit Message

Release v0.530 (#140)

* docs: claim SLSA Build Level 2 (#137)

* docs: claim SLSA Build Level 2

The release pipeline already satisfies Build L2: it runs on a hosted
build platform (GitHub-hosted runners) and emits provenance signed via
Sigstore with an identity bound to the release workflow. v0.520 was the
first release to produce these signed attestations for both the CPAN
tarball and the Docker image, so the SECURITY.md claim is updated from
Build Level 1 to Build Level 2.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

* docs: add SLSA Build Level 2 badge to README

Add an SLSA badge to the POD badge block in lib/GDPR/IAB/TCFv2.pm and
regenerate README.md. There is no official SLSA badge service, so this
uses a static shields.io badge linking to slsa.dev, consistent with the
SECURITY.md Build Level 2 claim.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

* docs: point SLSA badge at the GitHub attestations page

Link the badge to the repository's attestations listing so a reader can
go straight to the signed build provenance.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com>

* Feat/cross lang validator parity (#138)

* feat: add CMPDeleted/CMPUnknown reason codes

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

* feat: CMPValidator lifecycle state() (active/deleted/unknown)

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

* feat: map CMP lifecycle state to CMPDeleted/CMPUnknown reasons

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

* feat: auto-enforce TCF v2.3 policy>=5 and disclosed vendors after deadline

Date-based gate (created >= deadline), so legacy policy-5 strings created before
the deadline are not forced to carry a disclosed-vendors segment here.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

* feat: add global vendor gate (ReasonVendorNotAllowed)

A vendor with neither consent nor legitimate interest a... (continued)

Coverage Stats

63 of 63 new or added lines in 2 files covered. (100.0%)

3 existing lines in 1 file now uncovered.

1217 of 1264 relevant lines covered (96.28%)

25316.67 hits per line