Merge stage/v0.3.1 to main for v0.3.1 release - BED-9451

[ktstrader]

Release v0.3.1 — Merge stage/v0.3.1 into main

Promotes stage/v0.3.1 to main, rolling up two fixes and a collector
extension version bump.

Included

• PR fix: Tranform PyPi package version to BHE-friendly SemVer in API user agent - BED-9332 #68 — SemVer BHE version reporting.
• PR fix: fixed vulnerabilties that appeared in Docker Scout BED-8770 #69 — Docker Scout vulnerability fixes (BED-8770).
• Extension bumps — openhound-github and openhound-okta.

PR #68 — SemVer version reporting for BHE

Adds bhe_version.render_bhe_version() to convert PyPI versions (e.g.0.3.0rc1) into BHE wire format (v0.3.0-rc1) for the User-Agent header and client metadata. Unsupported versions raise UnsupportedBHEVersion before any request. Adds tests/test_bhe_version.py and CI wiring.

PR #69 — Docker Scout vulnerability fixes (BED-8770)

Bumps transitive deps in uv.lock to clear all fixable HIGH vulnerabilities (no pyproject.toml changes):

Package	Before → After	Fixes
cryptography	49.0.0 → 50.0.0	CVE-2026-69247
gitpython	3.1.57 → 3.1.59	5 GHSA advisories
pymdown-extensions	10.21.3 → 11.0.1	CVE-2026-67422 (ReDoS)
urllib3	2.6.3 → 2.7.0	CVE-2026-44431 / 44432
marimo (dev)	0.23.5 → 0.24.0	Unblocks pymdown-extensions >=11

Verified: Docker Scout 0C/0H/0M/0L; uv lock --check passes.

Extension version bumps

Extension	Before → After
openhound-github	0.5.1 → 0.6.4
openhound-okta	0.2.6 → 0.3.0

Summary by CodeRabbit

• Chores
  • Updated optional integration dependencies for GitHub and Okta.
  • Refreshed the combined optional dependency set to use the updated versions.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: 50000990-fc51-4212-b555-168ed1fa2dac

📥 Commits

Reviewing files that changed from the base of the PR and between 27744a7 and 6597691.

⛔ Files ignored due to path filters (1)

• uv.lock is excluded by !**/*.lock

📒 Files selected for processing (1)

• pyproject.toml

Included review availability: 4 reviews are currently available. Your included PR review attempts over the past 7 days set your current allowance at 5 reviews per hour.

---

Walkthrough

The project configuration updates openhound-github from 0.5.1 to 0.6.4 and openhound-okta from 0.2.6 to 0.3.0 in the relevant optional-dependency groups.

Changes

Optional integration dependency updates

Layer / File(s)	Summary
Update optional dependency versions pyproject.toml	The all, github, and okta optional-dependency groups use the updated GitHub and Okta integration versions.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Merge Risk: ⚪ Minimal · up to 65976

The PR updates dependency locks, package metadata, and release versions without any identified current-head correctness, security, availability, or deployment risk; it is merge-ready after normal checks and review.

Suggested reviewers: d3vzer0

Poem

A rabbit hops through config lines,
New versions bloom like springtime vines.
GitHub leaps, Okta too,
The dependency list is fresh and new.
Tiny changes, neatly done—
The burrow celebrates as one.

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly identifies the release promotion from stage/v0.3.1 to main for v0.3.1, which matches the pull request objectives.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0 files. (1 skipped: 1 unsupported.)
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch stage/v0.3.1

---

_{Comment @coderabbitai help to get the list of available commands.}