chore(main): release tsbootstrap 0.7.0

[astrogilda]

🤖 I have created a release beep boop

0.7.0 (2026-07-13)

Features

• bench: add a grid comparator that refuses cross-box ms comparisons (8ae637f)
• bench: time vs-arch cells as settled min-of-15 with box provenance (ec139bb)
• security: add Dependabot version updates with a 7-day cooldown (888df37)
• security: enforce a 7-day dependency cooldown and pin the uv version (3f44dda)
• security: run the OpenSSF Scorecard weekly with published results (f240780)
• security: scan the lockfile against OSV on pull requests and weekly (c032d0b)

Bug Fixes

• bench: sample the load average before timing and read the real CPU model (3f1c6e2)
• ci: close the pedantic-tier zizmor findings (f5178da)
• ci: correct the action pins and tighten the Scorecard workflow (d5e7599)
• ci: drop persisted checkout credentials, disable the release cache, and add the malware check (315c21f)
• ci: drop the persisted checkout credential in the mutation workflow (9b208f3)
• ci: grant the release checkout permission per job, not per workflow (6b56907)
• ci: serialize mutation gate runs with a concurrency group (1d55492)
• deps: bump mistune to 3.3.3 for the parse_link_text DoS advisory (bba53b8)
• mutation: generate mutants directly instead of relying on a stats-phase crash (a2d5e10)
• mutation: scope the ephemeral numba cache to njit-kernel mutants and warm the shared cache (c431241)

Documentation

• bench: record the grid-comparison rules and receipt caveats (8772770)
• ci: document each permission grant in the OSV-Scanner workflow (5636a76)
• link the three companion articles from the README and docs index (1e8e434)
• point the arXiv badge at the current software paper (717a6ca)

---

This PR was generated with Release Please. See documentation.

[mergify]

Tick the box to add this pull request to the merge queue (same as @mergifyio queue).

• Queue this pull request

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[astrogilda]

🤖 Created releases:

• tsbootstrap-v0.7.0

🌻