docs: improve community health files (#253)

Author: ekizito96

.github/ISSUE_TEMPLATE/bug_report.yml

@@ -42,17 +42,12 @@ body:
     validations:
       required: false
 
-  - type: dropdown
+  - type: input
     id: version
     attributes:
       label: JarvisCore version
-      options:
-        - "1.1.0"
-        - "1.0.4 (yanked)"
-        - "1.0.3 (yanked)"
-        - "1.0.2"
-        - "1.0.1"
-        - "main (unreleased)"
+      description: Run `python -c "import jarviscore; print(jarviscore.__version__)"` or provide the commit SHA.
+      placeholder: "1.14.1"
     validations:
       required: true
 

.github/ISSUE_TEMPLATE/config.yml

@@ -1,5 +1,8 @@
 blank_issues_enabled: false
 contact_links:
+  - name: Report a security vulnerability
+    url: https://github.com/Prescott-Data/jarviscore-framework/security/advisories/new
+    about: Submit security vulnerabilities privately. Do not open a public issue.
   - name: Developer Office Hours (Discord)
     url: https://discord.gg/jbRBAsMgM
     about: Live agent debugging every other week. Bring a broken agent.

.github/ISSUE_TEMPLATE/office_hours.yml

@@ -72,16 +72,12 @@ body:
     validations:
       required: true
 
-  - type: dropdown
+  - type: input
     id: version
     attributes:
       label: JarvisCore version
-      options:
-        - "1.3.0"
-        - "1.2.0"
-        - "1.1.0"
-        - "1.0.x"
-        - "main (unreleased)"
+      description: Run `python -c "import jarviscore; print(jarviscore.__version__)"` or provide the commit SHA.
+      placeholder: "1.14.1"
     validations:
       required: true
 

.github/ISSUE_TEMPLATE/question.yml

@@ -24,15 +24,11 @@ body:
     validations:
       required: false
 
-  - type: dropdown
+  - type: input
     id: version
     attributes:
       label: JarvisCore version
-      options:
-        - "1.1.0"
-        - "1.0.4 (yanked)"
-        - "1.0.3 (yanked)"
-        - "1.0.2"
-        - "main (unreleased)"
+      description: Run `python -c "import jarviscore; print(jarviscore.__version__)"` or provide the commit SHA.
+      placeholder: "1.14.1"
     validations:
       required: false

.github/PULL_REQUEST_TEMPLATE.md

@@ -0,0 +1,19 @@
+## What changed
+
+Describe the change and the problem it solves.
+
+## Validation
+
+List the commands, tests, or manual checks you ran.
+
+## Compatibility and risk
+
+Describe any public API, configuration, migration, security, or performance impact. Write `None` if there is no known impact.
+
+## Checklist
+
+- [ ] This pull request is focused on one change
+- [ ] Tests cover changed behavior, or I explained why tests are not needed
+- [ ] Documentation and examples are updated where needed
+- [ ] No credentials, tokens, customer data, or generated secrets are included
+- [ ] I signed the CLA, or previously signed it

README.md

@@ -491,7 +491,7 @@ python committee.py --mode full --ticker NVDA --amount 1500000
 
 ## Version
 
-**1.12.0**
+**1.14.1**
 
 ## License
 

SECURITY.md

@@ -0,0 +1,20 @@
+# Security Policy
+
+## Reporting a vulnerability
+
+Do not report security vulnerabilities in public issues or Discussions.
+
+Use [GitHub private vulnerability reporting](https://github.com/Prescott-Data/jarviscore-framework/security/advisories/new) to submit a confidential report. If that channel is unavailable, email **info@prescottdata.io** with the subject `SECURITY - brief description`.
+
+Include:
+
+- A description of the vulnerability and its impact
+- Affected versions or commit hashes
+- Reproduction steps or a proof of concept
+- Any known mitigations or suggested fixes
+
+Do not include credentials, tokens, customer data, or other third-party secrets. We will validate the report, coordinate remediation, and discuss disclosure with you before publishing details.
+
+## Supported versions
+
+Security fixes target the latest published JarvisCore release and `main`. Please update to the latest release before reporting a vulnerability that may already have been resolved. Reports affecting older versions are still useful; include the exact version so we can assess impact.