[haweecode]

Summary

Adds an exportable remediation backlog, configuration upgrade compatibility tests, a release artifact retention policy, and a supported runtime matrix.

Changes

• Add gasguard backlog <report.json> with CSV, JSON, and Markdown exports, stable finding IDs, severity ordering, and CSV formula-injection protection.
• Test legacy-to-current config migration, inheritance, preservation of source files, and rejection of invalid or future versions.
• Define 90-day retention for temporary release artifacts; published release assets remain available until the release is removed.
• Publish Node.js 22/24 and Rust stable support, with CI build, test, and smoke-test coverage for the CLI.
• Repair existing CLI scan/build blockers required for compatibility testing.

Verification

• 26 CLI tests passed.
• CLI type-check, build, and --help smoke test passed.
• Runtime and release workflows parsed as valid YAML.
• Retention policy test passed.

Dependencies

Runtime validation uses pnpm, GitHub-hosted runners, Node.js 22/24, and Rust stable. Artifact retention uses GitHub Actions and GitHub Releases storage. Config compatibility builds on the migration behavior introduced for #1148.

Closes #1113
Closes #1149
Closes #1150
Closes #1151

[drips-wave]

@haweecode Great news! 🎉 Based on an automated assessment of this PR, the linked Wave issue(s) no longer count against your application limits.

You can now already apply to more issues while waiting for a review of this PR. Keep up the great work! 🚀

Learn more about application limits