[SizzleUnrlsd]

Release 0.6.0 adds four changes:

• OpenVEX documents. --vex PATH writes an OpenVEX document justified by reachability (Reporters: VEX output justified by reachability #97). A package is only called not_affected when a lock file shows that no other package requires it.
• Read entry points. An advisory entry point can be reached by reading an attribute such as request.form, not only by calling it (Advisories: reachability through an attribute read, not only a call #111).
• YAML multi-document loaders. yaml.load_all, full_load_all and unsafe_load_all are now deserialization sinks (Detection: yaml.load_all, full_load_all and unsafe_load_all are deserialization sinks #123).
• Safe arguments. A sink call made safe by one of its arguments is no longer reported, as with yaml.load and SafeLoader (Precision: a sink call made safe by one of its arguments (yaml.load with SafeLoader) #121).

Changes in this PR

• Version: bumped in pyproject.toml, coretrace_python.__version__, the release test and the report example in the usage guide.
• CHANGELOG.md: the Unreleased section is dated as 0.6.0 and reordered as Reports, Dependencies, Detection, Precision, Plugins: user-facing changes first, plugin API last. No entry text changed. The lock-file bullet (required_by, ProjectAnalysis.accepted) moved from Reports to Dependencies, where it belongs.

Verification

• pytest: 1001 passed.
• pytest -m regression under Python 3.12, on the combined result of feat: reach advisory entry points marked read through attribute reads #125 and feat: write an OpenVEX document justified by reachability #126: 19 passed, with every snapshot unchanged.
• ruff check src tests and mypy are clean.

Tag v0.6.0 after merge to publish. The cache format moved from 7 to 8 in this release, so existing caches are recomputed on the first run.