chore: bump version to 0.3.5 (#247)

* chore(deps): update Go modules and dependencies

* feat: add bandit baseline file and update dependencies

- Introduced a new `bandit.baseline` file for security analysis.
- Updated Python version requirement to >=3.10 in `pyproject.toml` and `uv.lock`.
- Bumped `cfn-lint` dependency to version 1.44.0 and `bandit` to version 1.9.0.
- Enhanced development dependencies for improved testing and coverage.

* chore: update Python and TFLint versions in documentation

* chore: update Go and TFLint versions in CI workflows

- Bumped Go version from 1.23 to 1.24 in publish.yml.
- Updated TFLint version from v0.50.0 to v0.61.0 in publish.yml.
- Adjusted Python version matrix in tests.yml to include 3.14 and removed 3.9.
- Updated Go version matrix in tests.yml to include 1.24 and removed 1.21.

* fix(ci): remove Python 3.14 from test matrix

rpds-py (transitive dep via cfn-lint -> jsonschema) uses PyO3 0.23.3
which does not yet support Python 3.14. Re-add once upstream releases
a compatible version.

* chore: add .DS_Store to .gitignore

* chore: bump version to 0.3.5

Update version strings across all project files from 0.3.4 to 0.3.5 to prepare for release with recent dependency updates.

- Python package (pyproject.toml)
- Go plugin (main.go)
- Documentation (README.md, docs/tflint.md)
- Examples (examples/tflint/.tflint.hcl)

Co-authored-by: Cursor <cursoragent@cursor.com>

---------

Co-authored-by: Cursor <cursoragent@cursor.com>

Author: sliedig

.gitignore

@@ -169,3 +169,4 @@ dmypy.json
 **/.idea/**
 .vscode/settings.json
 tflint-ruleset-aws-serverless/tflint-ruleset-aws-serverless
+.DS_Store

README.md

@@ -41,7 +41,7 @@ You can enable the Serverless Rules plugin by adding a plugin section in the `.t
 ```terraform
 plugin "aws-serverless" {
   enabled = true
-  version = "0.3.4"
+  version = "0.3.5"
   source = "github.com/awslabs/serverless-rules"
 }
 ```

cfn-lint-serverless/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "cfn_lint_serverless"
-version = "0.3.4"
+version = "0.3.5"
 description = "Serverless rules for cfn-lint"
 authors = [{name = "Amazon Web Service"}]
 readme = "README.md"

docs/tflint.md

@@ -10,7 +10,7 @@ You can enable the Serverless Rules plugin by adding a plugin section in the `.t
 ```terraform
 plugin "aws-serverless" {
   enabled = true
-  version = "0.3.4"
+  version = "0.3.5"
   source = "github.com/awslabs/serverless-rules"
 }
 ```
@@ -76,7 +76,7 @@ Rules in `tflint` can be disabled either through the `--disable-rule` command-li
     ```terraform
     plugin "aws-serverless" {
       enabled = true
-      version = "0.3.4"
+      version = "0.3.5"
       source = "github.com/awslabs/serverless-rules"
     }
 

examples/tflint/.tflint.hcl

@@ -6,5 +6,5 @@ plugin "aws-serverless" {
   enabled = true
   # Uncomment those lines if you are using tflint 0.29 or later
   # source = "github.com/awslabs/serverless-rules"
-  # version = "0.3.4"
+  # version = "0.3.5"
 }

openspec/changes/bump-version-0-3-5/tasks.md

@@ -0,0 +1,34 @@
+## 1. Update Version Strings in All Files
+
+- [x] 1.1 Update version from `0.3.4` to `0.3.5` in `cfn-lint-serverless/pyproject.toml`
+- [x] 1.2 Update Version constant from `0.3.4` to `0.3.5` in `tflint-ruleset-aws-serverless/main.go`
+- [x] 1.3 Update version example from `0.3.4` to `0.3.5` in `README.md` (tflint plugin block)
+- [x] 1.4 Update version example from `0.3.4` to `0.3.5` in `docs/tflint.md`
+- [x] 1.5 Update version from `0.3.4` to `0.3.5` in `examples/tflint/.tflint.hcl`
+
+## 2. Validate Version Consistency
+
+- [x] 2.1 Run `RELEASE_TAG_VERSION=0.3.5 make release-check` locally to verify all version strings match
+- [x] 2.2 Verify all occurrences use format `0.3.5` (not `v0.3.5`)
+
+## 3. Commit and Merge Changes
+
+- [x] 3.1 Create branch for version bump (e.g., `release/v0.3.5`)
+- [x] 3.2 Commit version changes with message following conventional commits format
+- [ ] 3.3 Push branch and create pull request
+- [ ] 3.4 Wait for CI checks to pass on PR
+- [ ] 3.5 Merge PR to main branch
+
+## 4. Create Release Tag and Publish
+
+- [ ] 4.1 Pull latest main branch with merged version changes
+- [ ] 4.2 Create git tag `v0.3.5` on the merged commit
+- [ ] 4.3 Push tag to GitHub (`git push origin v0.3.5`)
+- [ ] 4.4 Create GitHub release for tag `v0.3.5` (triggers publish workflow)
+- [ ] 4.5 Monitor GitHub Actions publish workflow for success
+
+## 5. Verify Published Artifacts
+
+- [ ] 5.1 Verify Python package published to PyPI at version 0.3.5
+- [ ] 5.2 Verify Go plugin binary published to GitHub releases for tag v0.3.5
+- [ ] 5.3 Test installing cfn-lint-serverless from PyPI (`pip install cfn-lint-serverless==0.3.5`)

tflint-ruleset-aws-serverless/main.go

@@ -10,7 +10,7 @@ func main() {
 	plugin.Serve(&plugin.ServeOpts{
 		RuleSet: &tflint.BuiltinRuleSet{
 			Name:    "aws-serverless",
-			Version: "0.3.4",
+			Version: "0.3.5",
 			Rules:   rules.Rules,
 		},
 	})