SkillHub v0.2.17

This release adds compliance metadata visibility and administrator namespace governance while hardening API token authorization, scan task delivery, developer startup, and Aliyun deployment commands.

🌟 Highlights

• Publish immutable x-astron-compliance snapshots and surface them in skill details, search results, and review comparisons.
• Manage namespaces, members, roles, ownership, and lifecycle states from the administrator console.
• Close API token authorization gaps and publish security scan tasks only after the database transaction commits.

🚨 Breaking Changes

There are no known breaking changes. This release adds no Flyway migration; the database schema remains at V43.

✨ Features

• Validate compliance declarations, preserve immutable version-level snapshots, and expose them in version and review views by @XiaoSeS in #697.
• Surface compliance mappings in skill details, discovery cards, and search suggestions by @XiaoSeS in #699.
• Show compliance declaration changes while reviewing a new skill version by @XiaoSeS in #703.
• Add administrator namespace listing, member and role management, ownership transfer, freeze, archive, and restore operations by @XiaoSeS in #707.

🐛 Bug Fixes

• Print the correct root-level OSS runtime.sh URL and preserve --aliyun in the generated stop command by @XiaoSeS in #698.
• Allow super administrators to inspect namespaces without explicit namespace membership by @XiaoSeS in #705.
• Use Bash for backend development launchers so startup works in environments where /bin/sh cannot interpret Bash syntax by @FenjuFu in #721.
• Publish security scan tasks only after the enclosing transaction commits, preventing workers from observing uncommitted versions by @FenjuFu in #733.
• Align API token access with the authorization list for labels, stars, ratings, downloads, and authentication-method discovery by @FenjuFu in #729.
• Emit the published-skill event after a private skill version is confirmed for publication, restoring downstream publication listeners by @XiaoSeS in #738.

📚 Documentation Changes

• Document the compliance metadata contract and the boundary between SkillHub declarations and runtime execution traces by @XiaoSeS in #704.
• Publish the reviewed 2026 W33 open-source weekly report by @XiaoSeS in #736.

📖 Resources

• Docs site: https://iflytek.github.io/skillhub/

👥 New Contributors

No new contributors in this release.

Full Changelog: v0.2.16...v0.2.17