v0.2.3

What's Changed

• Security: Set search_path = '' on all 13 database functions to prevent search_path injection
• Security: Add deny-all RLS policies on all 6 public tables (service_role bypasses RLS)

v0.2.2

What's changed

• Security: Enable Row Level Security (RLS) on all 6 public tables (flows_v3, runs_v3, steps_v3, tasks_v3, metadata_v3, artifact_v3) to block unauthorized PostgREST access
• Includes Supabase migration 20260321004920_enable_rls.sql

v0.2.0

What's new

• Full UI: task detail (attempt history, duration, status), DAG view, timeline view all working
• S3 credentials: mf-setup now auto-provisions HMAC credentials via storage.s3_credentials — no manual key setup required
• UI proxy fixes: /attempts endpoint, timeline timestamps, links:{next:null} in all responses to prevent pagination errors
• 142 tests passing

v0.1.0

Initial release — run the Metaflow metadata service on serverless Postgres with zero cloud setup.