🔧 chore(release): roll release identity forward to v1.6.0-rc.13

[scttbnsn]

17-file identity roll-forward from rc.12 to rc.13, dated 2026-08-08.

• CHANGELOG: new [1.6.0-rc.13] section from Unreleased content — 🐛 fix(watcher): anchor digest comparison to repo-matched RepoDigests candidates #670 digest re-anchoring, 🐛 fix(web): self-host the Star History chart after upstream outage #672 self-hosted Star History, 🔒 security(deps): pin nanoid to 3.3.18 across all workspaces #673 nanoid pin, 🔒 security(docker): bump node and trivy base-image digests #682 node 24.19.0 + trivy 0.73.0 base-image bumps, 🐛 fix(ui): resolve iconify aliases and broken references in the icon bundle #683 icon-bundle alias resolution — plus compare-link rotation
• README: version badge + rc.13 highlights block
• Demo mocks, site config/content, docs API pages, quickstart, updates highlights, identity-test constants, changelog-link pairs

Guarded by scripts/release-identity.test.mjs (4/4) and the web scripts suite (56/56). Once merged: dev→main wholesale-tree sync, then dispatch release-cut.yml for v1.6.0-rc.13. GA candidate clock restarts — earliest GA ≈ Aug 16.

Changelog

🔧 Changed

• Advanced the release identity from 1.6.0-rc.12 to 1.6.0-rc.13, dated August 8, 2026.
• Updated README, demo mocks, site configuration, roadmap content, API examples, quickstart, and update highlights.
• Updated changelog comparison links and release identity test constants.
• Added release notes for digest re-anchoring, self-hosted Star History, nanoid pins, Node 24.19.0 and Trivy 0.73.0 base images, and icon-bundle alias resolution.

🔒 Security

• Documented workspace-wide nanoid security pinning.
• Documented base-image CVE remediation.

Concerns

• Sync the dev tree to main after merge.
• Dispatch release-cut.yml for v1.6.0-rc.13.
• Confirm the expected GA date remains approximately August 16.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
drydock-website	Ready	Preview	Aug 9, 2026 2:02am
drydockdemo-website	Ready	Preview	Aug 9, 2026 2:02am

[coderabbitai]

📝 Walkthrough

Walkthrough

Promotes the release identity from 1.6.0-rc.12 to 1.6.0-rc.13. Updates README and site metadata, release highlights, demo mocks, API documentation, quickstart references, changelog comparison links, and release identity tests. The release notes document digest matching, nanoid pinning, self-hosted Star History, base-image updates, and icon alias resolution.

Possibly related PRs

• CodesWhat/drydock#666: Updates the same release surfaces for the rc.12 to rc.13 promotion.
• CodesWhat/drydock#647: Updates successive 1.6.0 release references, documentation, and validation tests.
• CodesWhat/drydock#633: Performs the same release-identity update across mocks, documentation, site configuration, and tests.

🚥 Pre-merge checks | ✅ 2

✅ Passed checks (2 passed)

Check name	Status	Explanation
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

📝 Generate docstrings

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch chore/v1.6-rc13-prep

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[scttbnsn]

@coderabbitai review

[coderabbitai]

✅ Action performed

Review finished.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

[coderabbitai]

🧹 Nitpick comments (1)

scripts/release-docs-identity.test.mjs (1)

5-8: 📐 Maintainability & Code Quality | 🔵 Trivial | ⚡ Quick win

Cover the updated roadmap identity in this test.

This PR changes apps/web/src/lib/site-content.ts, but the release identity test does not read or assert that file. A stale roadmap version can therefore pass the test. Add the file to the public release-surface checks.

Suggested assertion

 const siteConfig = read('apps/web/src/lib/site-config.ts');
+const siteContent = read('apps/web/src/lib/site-content.ts');

 assert.match(siteConfig, new RegExp(`version: "${escapedRcVersion}"`, 'u'));
+assert.match(siteContent, new RegExp(`version: "v${escapedRcVersion}"`, 'u'));

🤖 Prompt for AI Agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@scripts/release-docs-identity.test.mjs` around lines 5 - 8, Update the
release identity test to include apps/web/src/lib/site-content.ts in its public
release-surface inputs and assertions, ensuring the roadmap version is validated
alongside the existing release identity constants and stale roadmap values
cannot pass unnoticed.

🤖 Prompt for all review comments with AI agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Nitpick comments:
In `@scripts/release-docs-identity.test.mjs`:
- Around line 5-8: Update the release identity test to include
apps/web/src/lib/site-content.ts in its public release-surface inputs and
assertions, ensuring the roadmap version is validated alongside the existing
release identity constants and stale roadmap values cannot pass unnoticed.

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro Plus

Run ID: b7feb3a2-8430-40c0-80e2-0d69163b508f

📥 Commits

Reviewing files that changed from the base of the PR and between 97a2f56 and e9861b7.

⛔ Files ignored due to path filters (1)

• CHANGELOG.md is excluded by !CHANGELOG.md

📒 Files selected for processing (16)

• README.md
• apps/demo/src/mocks/data/agents.ts
• apps/demo/src/mocks/data/audit.ts
• apps/demo/src/mocks/data/containers.ts
• apps/demo/src/mocks/data/server.ts
• apps/demo/src/mocks/handlers/app.ts
• apps/web/src/lib/site-config.ts
• apps/web/src/lib/site-content.ts
• content/docs/current/api/agent.mdx
• content/docs/current/api/app.mdx
• content/docs/current/api/portwing.mdx
• content/docs/current/quickstart/index.mdx
• content/docs/current/updates/index.mdx
• scripts/changelog-links.test.mjs
• scripts/release-docs-identity.test.mjs
• scripts/release-identity.test.mjs

[scttbnsn]

The roadmap identity is already covered. The second test in this file asserts site-content.ts carries version: "v${RC_VERSION}" with status: "next" (release-docs-identity.test.mjs lines 98-101), driven off the same RC_VERSION constant this PR rolls. A stale roadmap version fails there.

[biggest-littlest]

LGTM