Release v0.1.0

.github/workflows/ci.yml

@@ -24,6 +24,8 @@ jobs:
   backend:
     name: Backend
     uses: CtrlAltDevelop/ci-workflows/.github/workflows/python-backend.yml@v1.1.1
+    permissions:
+      contents: read
     with:
       python-version: "3.14"
       # Exported from uv.lock with every dependency group, so mypy finds
@@ -45,10 +47,11 @@ jobs:
         with:
           persist-credentials: false
       - uses: astral-sh/setup-uv@v7
+      # Exported in place: the header uv writes names the output path.
       - name: Export and compare
         run: |
-          uv export --format requirements-txt --all-groups --no-emit-project --quiet -o /tmp/requirements.txt
-          diff -u requirements.txt /tmp/requirements.txt
+          uv export --format requirements-txt --all-groups --no-emit-project --quiet -o requirements.txt
+          git diff --exit-code requirements.txt
 
   security:
     name: Security

README.md

@@ -1,6 +1,11 @@
 # oauth-dpop-server
 
 [![CI](https://github.com/CtrlAltDevelop/oauth-dpop-server/actions/workflows/ci.yml/badge.svg)](https://github.com/CtrlAltDevelop/oauth-dpop-server/actions/workflows/ci.yml)
+[![Release](https://img.shields.io/github/v/release/CtrlAltDevelop/oauth-dpop-server)](https://github.com/CtrlAltDevelop/oauth-dpop-server/releases)
+![Python](https://img.shields.io/badge/python-3.12%2B-blue)
+![Django](https://img.shields.io/badge/django-5.2-green)
+![PostgreSQL](https://img.shields.io/badge/postgresql-16-336791)
+[![RFC 9449](https://img.shields.io/badge/RFC-9449%20DPoP-orange)](https://www.rfc-editor.org/rfc/rfc9449)
 [![license: MIT](https://img.shields.io/badge/license-MIT-blue.svg)](LICENSE)
 
 A small, standards-exact **OAuth 2.1 authorization server** whose every