docs(changelog): link commit IDs in 0.5.0 and 0.4.0 entries

Match the 0.6.0 style — append ([sha](url)) to each bullet so the
GitHub release pages cross-reference the underlying commits.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

Author: dfa1

CHANGELOG.md

@@ -100,19 +100,40 @@ replaces the silent `hasNext()` arena-closing footgun with closeable `Chunk` obj
   Lazy-loaded layout tree with stats, dictionary entries, hex previews, and decoded
   data; works against local files and `http(s)://` URLs. FFM-based ANSI terminal
   driver — no Lanterna dependency. Documented in `docs/how-to.md#inspect-interactively-tui`.
+  ([aa7561f](https://github.com/dfa1/vortex-java/commit/aa7561f),
+  [397b64a](https://github.com/dfa1/vortex-java/commit/397b64a),
+  [d4cd0bc](https://github.com/dfa1/vortex-java/commit/d4cd0bc),
+  [8dae240](https://github.com/dfa1/vortex-java/commit/8dae240),
+  [00452e4](https://github.com/dfa1/vortex-java/commit/00452e4),
+  [7a51165](https://github.com/dfa1/vortex-java/commit/7a51165),
+  [e8db30a](https://github.com/dfa1/vortex-java/commit/e8db30a),
+  [a43f340](https://github.com/dfa1/vortex-java/commit/a43f340))
 - **Extension type decode** — `vortex.date` → `LocalDate`, `vortex.time` → `LocalTime`,
   `vortex.timestamp` → `Instant` / `ZonedDateTime`, `vortex.uuid` → `UUID`. Routed
   through a new `Extension` sealed hierarchy on `DType.Extension`. See
   `docs/compatibility.md` for the coverage matrix.
+  ([4963aa9](https://github.com/dfa1/vortex-java/commit/4963aa9),
+  [ca8d687](https://github.com/dfa1/vortex-java/commit/ca8d687),
+  [99417ad](https://github.com/dfa1/vortex-java/commit/99417ad),
+  [9da2a78](https://github.com/dfa1/vortex-java/commit/9da2a78),
+  [175ad07](https://github.com/dfa1/vortex-java/commit/175ad07))
 - **Decimal decode** — `GenericArray.getDecimal` supports the `decimal_byte_parts`
   shape, including i128 (precision > 18). Width 1/2/4/8 reads stay allocation-free.
+  ([23d5019](https://github.com/dfa1/vortex-java/commit/23d5019),
+  [4735324](https://github.com/dfa1/vortex-java/commit/4735324),
+  [ff20a24](https://github.com/dfa1/vortex-java/commit/ff20a24),
+  [f4ae8c0](https://github.com/dfa1/vortex-java/commit/f4ae8c0))
 - **CLI uber-jar deployed to Maven Central** under classifier `all`
   (`io.github.dfa1.vortex:vortex-cli:0.5.0:jar:all`). Useful when the consumer
   environment can't clone from GitHub. The manifest sets `Enable-Native-Access` so
   FFM downcalls work without the JVM flag.
+  ([3e2c552](https://github.com/dfa1/vortex-java/commit/3e2c552),
+  [cfc5cc8](https://github.com/dfa1/vortex-java/commit/cfc5cc8))
 - **Writer: global dictionary for low-cardinality `Utf8`** — columns with ≤ 256
   distinct values across chunks are now emitted as a shared `vortex.dict` layout.
+  ([b4d1b43](https://github.com/dfa1/vortex-java/commit/b4d1b43))
 - **CI: Windows runs** for the inspector module.
+  ([a9c9d4e](https://github.com/dfa1/vortex-java/commit/a9c9d4e))
 
 ### Changed
 
@@ -125,63 +146,95 @@ replaces the silent `hasNext()` arena-closing footgun with closeable `Chunk` obj
   `close()` raises FFM's scope check (`IllegalStateException`) instead of returning
   undefined data. See the updated examples in `README.md` and
   `docs/explanation.md#memory-model`.
+  ([b45fd98](https://github.com/dfa1/vortex-java/commit/b45fd98))
 - **Breaking — `EncodingRegistry` is immutable.** Register via the new builder:
   `EncodingRegistry.builder().registerServiceLoaded().register(myEncoding).build()`.
+  ([64ffbaa](https://github.com/dfa1/vortex-java/commit/64ffbaa))
 - **Breaking — `inspect` split into `inspect` (text) + `tui` (interactive).**
   Previous `inspect <file>` behaviour stays on `inspect`; interactive use is now
   on the dedicated `tui` subcommand.
+  ([e8db30a](https://github.com/dfa1/vortex-java/commit/e8db30a))
 - **`Extension` sealed hierarchy** replaces the prior `Extensions` utility class.
+  ([175ad07](https://github.com/dfa1/vortex-java/commit/175ad07))
 - CLI errors always print the exception class + cause chain — `VORTEX_DEBUG`
   environment variable removed.
+  ([6a4464b](https://github.com/dfa1/vortex-java/commit/6a4464b),
+  [f2f85bd](https://github.com/dfa1/vortex-java/commit/f2f85bd))
 
 ### Performance
 
 - **Bitpacked unpack** — per-row bookkeeping hoisted out of the inner block loop
   in `unpackLoop8/16/32/64`. Measurable win on bitpacked scan benchmarks.
+  ([ab3ca3f](https://github.com/dfa1/vortex-java/commit/ab3ca3f),
+  [ad8a64d](https://github.com/dfa1/vortex-java/commit/ad8a64d))
 - **Broadcast modulo branch-split** — ALP + Dict hot paths gate the
   `ConstantEncoding` broadcast modulo behind a cheap `cap == n` check, restoring
   C2 vectorization on the common path. ~5–10× recovery on the regressed scans.
+  ([442021f](https://github.com/dfa1/vortex-java/commit/442021f))
 - **Scan fast-path on non-broadcast reads** — recovers ~25% on bitpacked scans
   by skipping the broadcast capacity check when not needed.
+  ([051a794](https://github.com/dfa1/vortex-java/commit/051a794))
 - **`GenericArray.getDecimal`** — width 1/2/4/8 reads stay allocation-free.
+  ([f4ae8c0](https://github.com/dfa1/vortex-java/commit/f4ae8c0))
 
 ### Fixed
 
 - **Decimal element width** is derived from the buffer size, not the declared
   precision — fixes round-trip with the Rust reference implementation for
   oversized declared precisions.
+  ([c798e95](https://github.com/dfa1/vortex-java/commit/c798e95))
 - **`Extensions.localDate` bounds-check** — rejects out-of-range storage values.
+  ([a7eab37](https://github.com/dfa1/vortex-java/commit/a7eab37))
 - **`GenericArray.getDecimal`** rejects null cells in the mantissa path.
+  ([5198115](https://github.com/dfa1/vortex-java/commit/5198115))
 - **TUI thread safety** — `Layout.metadata` byte reads run on the I/O worker
   thread that owns the handle. `InspectorTree.Node` uses identity equality so
   duplicate subtrees don't collapse.
+  ([6c732de](https://github.com/dfa1/vortex-java/commit/6c732de),
+  [0cc1137](https://github.com/dfa1/vortex-java/commit/0cc1137),
+  [a47b6fd](https://github.com/dfa1/vortex-java/commit/a47b6fd))
 - **`InspectorTree`** — `vortex.date` columns format using the declared dtype;
   TUI data scan no longer applies `withLimit` (was rejecting `GenericArray`).
+  ([0e749df](https://github.com/dfa1/vortex-java/commit/0e749df),
+  [b5ce1d6](https://github.com/dfa1/vortex-java/commit/b5ce1d6))
 - **`ScanIterator.truncateArray`** now supports `GenericArray`; decimals format
   correctly in the TUI.
+  ([f09f564](https://github.com/dfa1/vortex-java/commit/f09f564))
 - **CLI** prints the exception class + full cause chain on `inspect` errors.
+  ([f2f85bd](https://github.com/dfa1/vortex-java/commit/f2f85bd))
 
 ### Removed
 
 - `ScanResult` — renamed to `Chunk` and given lifecycle methods. Update imports:
   `io.github.dfa1.vortex.scan.ScanResult` → `io.github.dfa1.vortex.scan.Chunk`.
+  ([b45fd98](https://github.com/dfa1/vortex-java/commit/b45fd98))
 - `Extensions` utility class — replaced by the `Extension` sealed hierarchy.
+  ([175ad07](https://github.com/dfa1/vortex-java/commit/175ad07))
 - `Extension.Time#unit` / `Extension.Timestamp#unit` accessors (unused).
+  ([2fcb311](https://github.com/dfa1/vortex-java/commit/2fcb311))
 - `VORTEX_DEBUG` env-var gate — stack traces are always printed on CLI error.
+  ([6a4464b](https://github.com/dfa1/vortex-java/commit/6a4464b))
 - Lanterna dependency — replaced by an FFM-based ANSI terminal in
   `cli/src/main/java/.../tui/term`.
+  ([397b64a](https://github.com/dfa1/vortex-java/commit/397b64a))
 
 ### Refactored
 
 - **`Trailer` parser** extracted, shared by `VortexReader` (mmap) and
   `VortexHttpReader` (range-request) paths.
+  ([1ac6f5a](https://github.com/dfa1/vortex-java/commit/1ac6f5a))
 - **`VortexHttpReader`** allocates its own `Arena` in the constructor and reuses
   a single `HttpClient`.
+  ([e18dafd](https://github.com/dfa1/vortex-java/commit/e18dafd))
 - **Inspector module** carved out of `cli`; TUI + `IoWorker` + terminal code
   later moved back into `cli` (only the `inspect` package stayed in
   `vortex-inspector`).
+  ([aa7561f](https://github.com/dfa1/vortex-java/commit/aa7561f),
+  [77baff1](https://github.com/dfa1/vortex-java/commit/77baff1))
 - Documentation: layout section expanded (node types, encoding namespaces,
   pruning); on-disk file-layout diagram in `explanation.md`.
+  ([e696f07](https://github.com/dfa1/vortex-java/commit/e696f07),
+  [5c2b410](https://github.com/dfa1/vortex-java/commit/5c2b410))
 
 [0.5.0]: https://github.com/dfa1/vortex-java/compare/v0.4.0...v0.5.0
 
@@ -201,95 +254,142 @@ FlatBuffer/Protobuf runtime exceptions). Regression suite lives under
 
 - **Zip-bomb protection** — `ConstantEncoding` and dict-layout decode no longer pre-allocate
   `O(rowCount)` memory; a 150-byte crafted file claiming 10⁹ rows is now constant-cost.
+  ([10a7776](https://github.com/dfa1/vortex-java/commit/10a7776))
 - **Trailer + postscript validation** — `VortexReader` and `VortexHttpReader` reject unknown
   file `version`, `postscriptLen == 0`, and `postscriptLen > fileSize - 8`. Footer/layout/dtype
   blob offsets and `Layout.encoding` index are bounds-checked at parse time.
+  ([f8f89fe](https://github.com/dfa1/vortex-java/commit/f8f89fe))
 - **Footer `segmentSpecs` bounds** — every spec is validated against `fileSize` the moment
   the footer is materialised, eliminating later `IndexOutOfBoundsException` on
   `MemorySegment.asSlice`.
+  ([03845ac](https://github.com/dfa1/vortex-java/commit/03845ac))
 - **PType ordinal bounds-check** — `PType.fromOrdinal(int)` replaces all 22 `PType.values()[idx]`
   call sites across encodings; crafted Protobuf ptype fields are rejected up front.
+  ([b4988c3](https://github.com/dfa1/vortex-java/commit/b4988c3))
 - **Layout-tree depth cap** — `PostscriptParser.convertLayout` is capped at depth 64,
   preventing both unbounded nesting and self-referential FlatBuffer cycles (a ~120-byte
   cycle attack previously triggered `StackOverflowError`).
+  ([29adbe0](https://github.com/dfa1/vortex-java/commit/29adbe0))
 - **Layout metadata size cap** — per-layout `metadataAsByteBuffer()` is capped at 4 MiB
   (above any real encoding's footprint; FSST's symbol table is the largest at ~32 KiB).
+  ([ebbe644](https://github.com/dfa1/vortex-java/commit/ebbe644))
 - **Decimal field validation** — `DType.Decimal` is rejected unless `precision ∈ [1, 38]`
   and `scale ∈ [0, precision]`, matching IEEE 754-2008 decimal128.
+  ([ebbe644](https://github.com/dfa1/vortex-java/commit/ebbe644))
 - **`readFlatStats` bounds-check** — zone-map stats reads now validate the trailing
   little-endian `fbLen` field against the segment size, returning empty stats on malformed
   input rather than throwing `IndexOutOfBoundsException` from `MemorySegment.asSlice`.
+  ([ebbe644](https://github.com/dfa1/vortex-java/commit/ebbe644))
 
 ### Added
 
 - **`vortex.sequence` F16 encode/decode** — half-precision floats now round-trip through the
   sequence encoding.
+  ([7b3d7a9](https://github.com/dfa1/vortex-java/commit/7b3d7a9))
 - **Writer: cascading with global dict layout** — low-cardinality columns (≤ 256 distinct
   values in the chunk sample) are now emitted as a `vortex.dict` layout, with the dict
   candidate detection tightened to avoid false positives.
+  ([53b2a19](https://github.com/dfa1/vortex-java/commit/53b2a19),
+  [d383765](https://github.com/dfa1/vortex-java/commit/d383765))
 - **Writer: opt-in Zstd compression** — `WriteOptions.withZstd(boolean)` exposes the
   size/throughput trade-off. Off by default; turn on for archival workloads.
+  ([ea10d37](https://github.com/dfa1/vortex-java/commit/ea10d37))
 - **`Encoding.decodeSegment` extension point** — added as part of the typed-segment migration
   (see *Changed* below). Provides a typed alternative to `Array.segment()`.
+  ([ed4a0ae](https://github.com/dfa1/vortex-java/commit/ed4a0ae))
 - **`DecodeContext.decodeChild(int, DType, long)`** — typed child-decode helper that replaces
   the per-encoding `decodeChildAs(...)` private utilities.
+  ([d07faf0](https://github.com/dfa1/vortex-java/commit/d07faf0),
+  [a1512da](https://github.com/dfa1/vortex-java/commit/a1512da))
 - **Typed accessors on concrete array types** — `LongArray.segment()`, `VarBinArray.offsetsSegment()`,
   `MaskedArray.inner()`, and friends now live on the concrete types where they fit cleanly,
   rather than on the `Array` interface.
+  ([84a34f4](https://github.com/dfa1/vortex-java/commit/84a34f4))
 - **`*SecurityTest` test-naming convention** — adversarial / robustness tests are now grouped
   under the `*SecurityTest` suffix, mirroring the existing `*IntegrationTest` convention.
   Run with `./mvnw test -Dtest='*SecurityTest'`.
+  ([76ba67c](https://github.com/dfa1/vortex-java/commit/76ba67c))
 - **`FlatSegmentDecoder`** — extracted from `EncodingRegistry`; the registry is now pure
   dispatch.
+  ([4a08356](https://github.com/dfa1/vortex-java/commit/4a08356))
 
 ### Changed
 
 - **`Array` interface slimmed down.** `buffer(int)`, `child(int)`, and `segment()` are no
   longer part of the `Array` interface; consumers should use the typed accessors on the
   concrete subtype (e.g. `LongArray.segment()`) or `ArraySegments.of(arr)` for a generic
   fallback. `buffer(int)` is now package-private on the concrete array types.
+  ([bdb4e7d](https://github.com/dfa1/vortex-java/commit/bdb4e7d),
+  [1283168](https://github.com/dfa1/vortex-java/commit/1283168),
+  [ba5957c](https://github.com/dfa1/vortex-java/commit/ba5957c),
+  [df6ab3f](https://github.com/dfa1/vortex-java/commit/df6ab3f),
+  [bb7b656](https://github.com/dfa1/vortex-java/commit/bb7b656))
 - **`VarBinArray`** no longer keeps a redundant `offsetsArr` field; consumers read offsets
   via `offsetsSegment()`.
+  ([96687f8](https://github.com/dfa1/vortex-java/commit/96687f8))
 - **`ArrayStats`** is no longer eagerly stored on decoded array types; statistics are now
   read on demand from the FlatBuffer node, matching the Rust reference implementation.
+  ([9237e28](https://github.com/dfa1/vortex-java/commit/9237e28))
 
 ### Fixed
 
 - **`MaskedArray.segment()`** delegates correctly to its inner array (regression introduced
   during the typed-accessor migration).
+  ([8a16119](https://github.com/dfa1/vortex-java/commit/8a16119))
 - **Constant-encoded array indexing** broadcasts the index correctly when scanning multiple
   rows from a single stored value.
+  ([ed658b7](https://github.com/dfa1/vortex-java/commit/ed658b7))
 - **Performance benchmark** (`RustWritesJavaReadsBigFileBenchmark`) migrated off the removed
   `Array.buffer(int)` accessor, unblocking `./mvnw verify` and `./bench`.
+  ([977a529](https://github.com/dfa1/vortex-java/commit/977a529))
 
 ### Removed
 
 - `Array.buffer(int)`, `Array.child(int)`, and `Array.segment()` from the public `Array`
   interface (see *Changed*). Callers should migrate to the concrete-type accessors or
   `ArraySegments.of(arr)`.
+  ([bdb4e7d](https://github.com/dfa1/vortex-java/commit/bdb4e7d),
+  [1283168](https://github.com/dfa1/vortex-java/commit/1283168))
 - `Encoding.decodeSegment(...)` is removed after the migration to `DecodeContext.decodeChild`.
+  ([977a529](https://github.com/dfa1/vortex-java/commit/977a529))
 - `ArrayStats` field on decoded array types (statistics are now lazy).
+  ([9237e28](https://github.com/dfa1/vortex-java/commit/9237e28))
 
 ### Documentation
 
 - Added `CONTRIBUTING.md` covering trunk-based workflow, commit conventions, and the
   three-touch-point rule for adding encodings.
+  ([d9825cf](https://github.com/dfa1/vortex-java/commit/d9825cf))
 - Added an internal-architecture diagram set covering the file format, layout tree, and
   scan path.
+  ([75f4cea](https://github.com/dfa1/vortex-java/commit/75f4cea))
 - Added a "Vortex vs Parquet" comparison section to the README.
+  ([886bb80](https://github.com/dfa1/vortex-java/commit/886bb80))
 - Expanded the `## Security` section in `TODO.md` with the open hardening roadmap (resource
   caps, per-encoding adversarial tests, Jazzer fuzz harness, OSS-Fuzz submission).
+  ([1bb1465](https://github.com/dfa1/vortex-java/commit/1bb1465))
 
 ### Build & Tooling
 
 - **Dependabot enabled** for Maven and GitHub Actions.
+  ([dd118a7](https://github.com/dfa1/vortex-java/commit/dd118a7))
 - Numerous dependency bumps: JUnit Jupiter (5.11.4 → 6.1.0, tests now require JUnit 6),
   Mockito, FastCSV (3 → 4), H2 (2.3 → 2.4), Checkstyle, Zstd-JNI,
   maven-compiler/surefire/failsafe/javadoc/source/shade/gpg/antrun/exec/build-helper plugins,
   `actions/checkout` (4 → 6), `actions/setup-java` (4 → 5), `actions/cache` (4 → 5),
   Sonatype central-publishing plugin.
+  ([81be668](https://github.com/dfa1/vortex-java/commit/81be668),
+  [2c8319f](https://github.com/dfa1/vortex-java/commit/2c8319f),
+  [f6dbcf1](https://github.com/dfa1/vortex-java/commit/f6dbcf1),
+  [dfabd8c](https://github.com/dfa1/vortex-java/commit/dfabd8c),
+  [7b4a718](https://github.com/dfa1/vortex-java/commit/7b4a718),
+  [fb9b404](https://github.com/dfa1/vortex-java/commit/fb9b404),
+  [7b67000](https://github.com/dfa1/vortex-java/commit/7b67000),
+  [fd1ea7e](https://github.com/dfa1/vortex-java/commit/fd1ea7e))
 - `pom.xml` files now group dependencies under `production` / `testing` comment sections
   with a consistent project-internal-first ordering.
+  ([bcbbbfd](https://github.com/dfa1/vortex-java/commit/bcbbbfd))
 - Checkstyle scope tightened to exclude generated `fbs`/`proto` packages.
+  ([f5ab433](https://github.com/dfa1/vortex-java/commit/f5ab433))
 
 [0.4.0]: https://github.com/dfa1/vortex-java/compare/v0.3.2...v0.4.0