v0.0.3 release (fix unpinned GHA shas)

Author: frison

.github/workflows/release.yml

@@ -15,10 +15,10 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout code
-        uses: actions/checkout@v4
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5
 
       - name: Setup Go
-        uses: actions/setup-go@v5
+        uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5
         with:
           go-version-file: 'go.mod'
 
@@ -50,7 +50,7 @@ jobs:
           go test ./...
 
       - name: Run Gosec Security Scanner
-        uses: securego/gosec@master
+        uses: securego/gosec@dcf93a8b8ba2a90270e0ce35291cca8f7a4a90be
         with:
           args: '-no-fail ./...'
 
@@ -83,7 +83,7 @@ jobs:
           sha256sum gydnc-* | grep -v "\.sha256" > checksums.txt
 
       - name: Create GitHub Release
-        uses: softprops/action-gh-release@v2
+        uses: softprops/action-gh-release@5be0e66d93ac7ed76da52eca8bb058f665c3a5fe
         with:
           tag_name: ${{ steps.version.outputs.version }}
           name: gydnc ${{ steps.version.outputs.version }}

releases/v0.0.3.md

@@ -1,8 +1,8 @@
-# Release v0.0.3 - December 08, 2025
+# Release v0.0.3 - December 14, 2025
 
 ## 📊 Release Statistics
 - **6 commits** from **1 contributor**
-- Released on **December 08, 2025**
+- Released on **December 14, 2025**
 
 ## Key Highlights
 This release introduces **MCP (Model Context Protocol) server support**, enabling AI agents to interact with gydnc through standardized MCP tool calls. We've also improved developer experience with better CLI guidance, cleaner documentation, and installation script fixes.