v0.5.0

New resource:
- ona_runner_environment_class: manage environment classes (instance type,
  disk size, spot) on self-hosted runners, with import support. Managed
  runners are not supported (the API rejects them). (#21)

Changed / fixed:
- ona_runner: desired_phase is now computed and reconciled after create. The
  provider no longer waits on a create-time phase the API never reports
  (creates could previously time out), and a configured phase is applied via a
  follow-up update for both fresh creates and replacements. (#23)
- ona_runner: create reads back computed configuration fields and never
  orphans a created runner when a follow-up call fails; changing desired_phase
  on a managed runner is rejected at plan time.
- ona_runner_environment_class: create is orphan-safe and enabled is applied
  deterministically.

Maintenance:
- Dependency updates across the module graph.
- goreleaser 2.15.4 -> 2.16.0; CI action bumps (golangci-lint-action 9.2.1,
  goreleaser-action 7.2.2).

v0.4.2

ona_runner_token data source

Retrieves a Gitpod runner exchange
token (a one-time use token, expires after 24h). The `exchange_token`
attribute is sensitive and persisted to state. (#19, thanks @beekeep)

v0.4.1

Bump GoReleaser to v2.15.2 to fix broken SHA256SUMS signature

v0.4.0

- **Registry documentation** — Provider, resource, and data source do…

v0.3.3

- Sigstore build provenance attestations for all release binaries and…

v0.3.2

GPG signed release

- gpg signing was enabled
- new golang deps

v0.3.1

New Resources

- ona_runner_scm_integration — Manage SCM (OAuth) integrations on runners. Supports create, read, update, delete, and import. Clearing oauth_client_id or
oauth_client_secret sends an empty value to the API to remove the credential.

New Attributes

- ona_runner: update_window — Control the daily UTC time window during which runner auto-updates are allowed. Supported on both create and update.
- ona_runner: managed_metrics_enabled — When true, the runner pushes metrics to the management plane instead of directly to the remote_write endpoint.
- ona_authenticated_identity: organization_tier — Exposes the organization's plan level.

Bug Fixes

- Fix update_window clearing and state mapping on ona_runner.

v0.3.0

Add `ona_secret` resource support and fix secret imports.

  Since `v0.2.3`, this release introduces a new `ona_secret` resource for managing project-scoped Gitpod secrets, adds matching examples, and fixes import behavior so
  imported secrets keep the project scope required for refreshes. Documentation was also updated to reflect the current provider surface and local integration
  workflow.

v0.2.3

Security fix in a dep library

v0.2.2

- Fix project prebuild configuration losing explicitly-false values (…