update CHANGELOG.md and increment version to 3.0.0 (#16)

Author: bohendo

.github/workflows/release.yml

@@ -288,9 +288,14 @@ jobs:
       plan: ${{ needs.plan.outputs.val }}
     secrets: inherit
     # publish jobs get escalated permissions
+    # NOTE: contents:read is manually added and not in the cargo-dist template.
+    # If you regenerate this file with 'dist init', re-add it — without it the
+    # reusable workflow's checkout step fails (job grants contents:none, but
+    # publish-crates-io.yml declares contents:read which GitHub then rejects).
     permissions:
       "id-token": "write"
       "packages": "write"
+      "contents": "read"
 
   announce:
     needs:

CHANGELOG.md

@@ -7,6 +7,38 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## Unreleased
 
+## 3.0.0 - 2026-03-24
+
+### Added
+- `--severity` filter for `print mutants` and `results` commands (comma-separated: `high`, `medium`, `low`)
+- `--mutation_type` now accepts comma-separated values for multi-type filtering
+- Glob pattern support for all target path arguments (e.g., `**/*.rs`, `src/**/*.go`)
+- `mewt purge --all` flag to purge every target in the database regardless of config rules
+- `mewt mutate --verbose` flag to restore detailed per-mutant output during mutation generation
+- `mewt print targets` now shows a rich table with columns: in_db, on_disk, included, hash, path, mutants
+
+### Changed
+- **BREAKING**: Global `--cwd` flag replaced with `--config`
+  - Pass a path to the config file; the directory containing it becomes the working directory
+  - Relative paths in the config are resolved from the config file's location
+- **BREAKING**: `mewt purge` default behavior changed
+  - Without `--target`, now purges targets absent from `[targets].include` or present in `[targets].ignore` (previously purged all targets)
+  - Use `mewt purge --all` to purge every target unconditionally
+- **BREAKING**: `mewt mutate` is quiet by default, showing per-target summaries instead of per-mutant lines
+  - Use `--verbose` to restore the previous detailed output
+- **BREAKING**: `LanguageEngine` trait simplified
+  - `tree_sitter_language() -> TsLanguage` removed
+  - `apply_all_mutations(&self, target: &Target) -> Vec<Mutant>` renamed to `mutate`
+  - `get_all_slugs()` and `get_severity_by_slug()` default methods removed (derive from `get_mutations()` directly)
+- Target CLI argument for `run` and `mutate` is now optional; falls back to `[targets].include` from config
+- Targets are sorted consistently across all commands (`run`, `mutate`, `print`, `results`, `status`)
+
+### Fixed
+- Improved grammar caches for faster repeated runs
+- Improved monorepo support for vendored tree-sitter grammars
+- Security dependency updates: `rsa` (0.9.8 → 0.9.10), `bytes` (1.10.1 → 1.11.1)
+- Dependency updates: `tree-sitter` (0.25.8 → 0.25.10), `toml` (0.8.23 → 0.9.6)
+
 ## 2.0.1 - 2026-02-05
 
 ### Changed

Cargo.lock

@@ -1,6 +1,6 @@
 [package]
 name = "mewt"
-version = "2.0.1"
+version = "3.0.0"
 edition = "2024"
 description = "Mutation testing framework with multi-language support"
 authors = ["Bo Henderson <bo.henderson@trailofbits.com>"]

Cargo.toml

@@ -15,5 +15,7 @@ targets = ["aarch64-apple-darwin", "x86_64-unknown-linux-gnu", "x86_64-pc-window
 install-path = "CARGO_HOME"
 # Whether to install an updater program
 install-updater = false
+# Don't fail if the generated CI file has been manually edited
+allow-dirty = ["ci"]
 # Publish jobs to run in CI
 publish-jobs = ["./publish-crates-io"]