Release v0.5.0

[gvonness-apolitical]

Summary

• Bump version to 0.5.0 across workspace (cdx-core, cdx-cli, workspace dep)
• Add SECURITY.md declaring only 0.5.x as supported
• Update CHANGELOG.md with all changes since 0.4.0

Context

This is the first release with full spec conformance testing (78/79 PASS, 0 TODO). The version bump signals that the library's serialization format is tested and aligned to the Codex specification.

Changes since v0.4.0

• Spec-compliant Block/Mark serialization (PR Fix spec serialization divergences and add conformance tests #87)
• 78 conformance tests covering all testable spec requirements (PRs Add spec conformance tests and housekeeping #88, Add asset embedding and property-based conformance tests #91)
• CLI restructured into cli/dispatcher/main modules (PR Split CLI into cli, dispatcher, and main modules #89)
• Fuzz targets for Block, Mark, and Content deserialization (PR Add fuzz targets for custom Block, Mark, and Content serde #90)
• Housekeeping: lint suppression docs, architecture docs update (PR Add spec conformance tests and housekeeping #88)

Test plan

• cargo build --workspace --all-features compiles at 0.5.0
• cargo test --workspace --all-features — 1,020 tests pass
• After merge, tag v0.5.0 to trigger crates.io publish workflow

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!