1.0.5

Cogeto 1.0.5 — EU-hosted AI command center with verifiable memory.

What's Changed

Chores

• chore: publish trust scores for v1.0.4 by @igolubic in #141
• chore(deps): bump haraka-constants from 1.0.7 to 1.0.8 in /project/services/mail by @dependabot[bot] in #105
• chore(deps): bump drizzle-orm from 0.44.7 to 0.45.2 by @dependabot[bot] in #114
• chore(deps): bump pino from 9.14.0 to 10.3.1 by @dependabot[bot] in #111
• chore(deps): bump graphile-worker from 0.16.6 to 0.17.3 by @dependabot[bot] in #112
• chore(deps): bump @mistralai/mistralai from 1.15.1 to 2.5.0 by @dependabot[bot] in #110
• chore(deps): bump @tanstack/react-query from 5.101.2 to 5.101.3 by @dependabot[bot] in #158
• chore(deps): bump chrono-node from 2.10.0 to 2.10.1 by @dependabot[bot] in #159

Other Changes

• chore(deps): upgrade mail service to haraka 3.3.1 by @igolubic in #142
• chore(ci): bump pinned actions, pin cosign-release, tighten dependabot grouping by @igolubic in #144
• chore(deps): refresh redaction sidecar dependency pins by @igolubic in #143
• fix: settle graphile job bookkeeping in tests, add worker pool error handler by @igolubic in #145
• chore(deps): upgrade qdrant to 1.18 (server v1.18.3 + client 1.18.0 in lockstep) by @igolubic in #146
• chore(deps): migrate to zod 4 by @igolubic in #156
• chore(deps-dev): upgrade the dev toolchain (eslint 10, vitest 4, vite 8, dep-cruiser 18, testcontainers 12) by @igolubic in #157
• fix: wait for MinIO readiness, not liveness, in the test harness by @igolubic in #160
• fix(operator): resolve and confirm versions from GitHub releases, verify images mandatorily by @igolubic in #161
• chore: release v1.0.5 by @igolubic in #162

New Contributors

• @dependabot[bot] made their first contribution in #105

Full Changelog: v1.0.4...v1.0.5

---

Verify these images (keyless cosign signatures):

cosign verify cogeto/cogeto:1.0.5 \
  --certificate-identity-regexp '^https://github.com/Cogeto/cogeto/\.github/workflows/release\.yml@refs/tags/' \
  --certificate-oidc-issuer 'https://token.actions.githubusercontent.com'
cosign verify cogeto/cogeto-edge:1.0.5 \
  --certificate-identity-regexp '^https://github.com/Cogeto/cogeto/\.github/workflows/release\.yml@refs/tags/' \
  --certificate-oidc-issuer 'https://token.actions.githubusercontent.com'
cosign verify cogeto/cogeto-mail:1.0.5 \
  --certificate-identity-regexp '^https://github.com/Cogeto/cogeto/\.github/workflows/release\.yml@refs/tags/' \
  --certificate-oidc-issuer 'https://token.actions.githubusercontent.com'

1.0.4

Cogeto 1.0.4 — EU-hosted AI command center with verifiable memory.

What's Changed

Chores

• chore: publish trust scores for v1.0.3 by @igolubic in #136
• chore: publish Docker Hub overviews from version-controlled markdown by @igolubic in #137
• ci: make the Docker Hub overview sync dispatch-only and password-based by @igolubic in #138
• chore: release v1.0.4 by @igolubic in #140

Other Changes

• docs: add security hub as single entry point for safety docs by @igolubic in #139

Full Changelog: v1.0.3...v1.0.4

---

Verify these images (keyless cosign signatures):

cosign verify cogeto/cogeto:1.0.4 \
  --certificate-identity-regexp '^https://github.com/Cogeto/cogeto/\.github/workflows/release\.yml@refs/tags/' \
  --certificate-oidc-issuer 'https://token.actions.githubusercontent.com'
cosign verify cogeto/cogeto-edge:1.0.4 \
  --certificate-identity-regexp '^https://github.com/Cogeto/cogeto/\.github/workflows/release\.yml@refs/tags/' \
  --certificate-oidc-issuer 'https://token.actions.githubusercontent.com'
cosign verify cogeto/cogeto-mail:1.0.4 \
  --certificate-identity-regexp '^https://github.com/Cogeto/cogeto/\.github/workflows/release\.yml@refs/tags/' \
  --certificate-oidc-issuer 'https://token.actions.githubusercontent.com'

1.0.3

Cogeto 1.0.3 — EU-hosted AI command center with verifiable memory.

What's Changed

Chores

• ci: prettier-ignore the generated trust-scores data files by @igolubic in #133
• chore: publish trust scores for v1.0.2 by @igolubic in #132
• ci: fresh branch per trust-scores run so checks reliably trigger + merge by @igolubic in #134
• chore: release v1.0.3 by @igolubic in #135

Full Changelog: v1.0.2...v1.0.3

---

Verify these images (keyless cosign signatures):

cosign verify cogeto/cogeto:1.0.3 \
  --certificate-identity-regexp '^https://github.com/Cogeto/cogeto/\.github/workflows/release\.yml@refs/tags/' \
  --certificate-oidc-issuer 'https://token.actions.githubusercontent.com'
cosign verify cogeto/cogeto-edge:1.0.3 \
  --certificate-identity-regexp '^https://github.com/Cogeto/cogeto/\.github/workflows/release\.yml@refs/tags/' \
  --certificate-oidc-issuer 'https://token.actions.githubusercontent.com'
cosign verify cogeto/cogeto-mail:1.0.3 \
  --certificate-identity-regexp '^https://github.com/Cogeto/cogeto/\.github/workflows/release\.yml@refs/tags/' \
  --certificate-oidc-issuer 'https://token.actions.githubusercontent.com'

1.0.2

Cogeto 1.0.2 — EU-hosted AI command center with verifiable memory.

What's Changed

Chores

• chore: publish trust scores for v1.0.1 by @igolubic in #129
• ci: publish trust scores reliably — measure-only emit + fix the check race by @igolubic in #130
• chore: release v1.0.2 by @igolubic in #131

Full Changelog: v1.0.1...v1.0.2

---

Verify these images (keyless cosign signatures):

cosign verify cogeto/cogeto:1.0.2 \
  --certificate-identity-regexp '^https://github.com/Cogeto/cogeto/\.github/workflows/release\.yml@refs/tags/' \
  --certificate-oidc-issuer 'https://token.actions.githubusercontent.com'
cosign verify cogeto/cogeto-edge:1.0.2 \
  --certificate-identity-regexp '^https://github.com/Cogeto/cogeto/\.github/workflows/release\.yml@refs/tags/' \
  --certificate-oidc-issuer 'https://token.actions.githubusercontent.com'
cosign verify cogeto/cogeto-mail:1.0.2 \
  --certificate-identity-regexp '^https://github.com/Cogeto/cogeto/\.github/workflows/release\.yml@refs/tags/' \
  --certificate-oidc-issuer 'https://token.actions.githubusercontent.com'

1.0.1

Cogeto 1.0.1 — EU-hosted AI command center with verifiable memory.

What's Changed

Chores

• ci: make the trust-scores publish idempotent and re-runnable by @igolubic in #125
• chore: publish trust scores for v1.0.0 by @igolubic in #126
• ci: let the release trust-scores PR self-merge with a dedicated admin token by @igolubic in #127
• chore: release v1.0.1 by @igolubic in #128

Full Changelog: v1.0.0...v1.0.1

---

Verify these images (keyless cosign signatures):

cosign verify cogeto/cogeto:1.0.1 \
  --certificate-identity-regexp '^https://github.com/Cogeto/cogeto/\.github/workflows/release\.yml@refs/tags/' \
  --certificate-oidc-issuer 'https://token.actions.githubusercontent.com'
cosign verify cogeto/cogeto-edge:1.0.1 \
  --certificate-identity-regexp '^https://github.com/Cogeto/cogeto/\.github/workflows/release\.yml@refs/tags/' \
  --certificate-oidc-issuer 'https://token.actions.githubusercontent.com'
cosign verify cogeto/cogeto-mail:1.0.1 \
  --certificate-identity-regexp '^https://github.com/Cogeto/cogeto/\.github/workflows/release\.yml@refs/tags/' \
  --certificate-oidc-issuer 'https://token.actions.githubusercontent.com'

1.0.0

Cogeto 1.0.0 — EU-hosted AI command center with verifiable memory.

What's Changed

Features

• feat: parse calendar-invite parts within emails by @igolubic in #117

Fixes

• fix: serialize live-eval key consumers; publish v0.9.2 trust scores (manual retry) by @igolubic in #87
• fix: launch hygiene — email log redaction, mail-token preflight, sidecar hash-lock, env + comment cleanup by @igolubic in #98
• fix: harden reply drafting and owner-gate reply-draft approvals by @igolubic in #118
• fix: complete email deletion cascade and bound refusal-log retention by @igolubic in #119
• fix: harden the inbound SMTP surface (SPF auth, intake caps, edge de-exposure, STARTTLS, lockfile) by @igolubic in #121

Documentation

• docs: launch verification audit reports and acceptance log by @igolubic in #116
• docs: record fix:launch resolutions (#100, #116, #117, #118, #119) by @igolubic in #120
• docs: finalize launch acceptance — v1 is launchable by @igolubic in #123

Chores

• ci: harden workflows and supply chain for launch by @igolubic in #99
• test: validate Memory Passport export against published JSON Schemas by @igolubic in #100
• test: expand golden corpus to 50 cases per language and refresh the gates note by @igolubic in #122
• chore: release v1.0.0 by @igolubic in #124

Other Changes

• Add CODEOWNERS file with owner specification by @igolubic in #89

Full Changelog: v0.9.2...v1.0.0

---

Verify these images (keyless cosign signatures):

cosign verify cogeto/cogeto:1.0.0 \
  --certificate-identity-regexp '^https://github.com/Cogeto/cogeto/\.github/workflows/release\.yml@refs/tags/' \
  --certificate-oidc-issuer 'https://token.actions.githubusercontent.com'
cosign verify cogeto/cogeto-edge:1.0.0 \
  --certificate-identity-regexp '^https://github.com/Cogeto/cogeto/\.github/workflows/release\.yml@refs/tags/' \
  --certificate-oidc-issuer 'https://token.actions.githubusercontent.com'
cosign verify cogeto/cogeto-mail:1.0.0 \
  --certificate-identity-regexp '^https://github.com/Cogeto/cogeto/\.github/workflows/release\.yml@refs/tags/' \
  --certificate-oidc-issuer 'https://token.actions.githubusercontent.com'

0.9.2

Cogeto 0.9.2 — EU-hosted AI command center with verifiable memory.

What's Changed

Features

• feat: machine-readable trust scores — schema, harness emission, release publish by @igolubic in #85

Fixes

• fix: operator upgrade/configure self-heal the PATH install by @igolubic in #61
• fix: sweep recognizes retained email objects; scrub false orphan alerts by @igolubic in #63
• fix: strip the joined 'e-poruka' whole in the reply-intent target cleaner by @igolubic in #79

Documentation

• docs: open-source launch prep — README, contributing, security, consolidated docs by @igolubic in #69
• ci: CLA signing via one PR comment (CLA Assistant workflow) by @igolubic in #71
• docs: README polish and cogeto.eu contact addresses by @igolubic in #77

Chores

• chore: restore maintainer to the CLA allowlist by @igolubic in #75
• chore: release v0.9.2 by @igolubic in #86

Other Changes

• Remove 'igolubic' from CLA allowlist by @igolubic in #72

Full Changelog: v0.9.1...v0.9.2

---

Verify these images (keyless cosign signatures):

cosign verify cogeto/cogeto:0.9.2 \
  --certificate-identity-regexp '^https://github.com/Cogeto/cogeto/\.github/workflows/release\.yml@refs/tags/' \
  --certificate-oidc-issuer 'https://token.actions.githubusercontent.com'
cosign verify cogeto/cogeto-edge:0.9.2 \
  --certificate-identity-regexp '^https://github.com/Cogeto/cogeto/\.github/workflows/release\.yml@refs/tags/' \
  --certificate-oidc-issuer 'https://token.actions.githubusercontent.com'
cosign verify cogeto/cogeto-mail:0.9.2 \
  --certificate-identity-regexp '^https://github.com/Cogeto/cogeto/\.github/workflows/release\.yml@refs/tags/' \
  --certificate-oidc-issuer 'https://token.actions.githubusercontent.com'

0.9.1

Cogeto 0.9.1 — EU-hosted AI command center with verifiable memory.

What's Changed

Features

• feat: sender-routed email capture (registered users + per-user allowlists) by @igolubic in #56

Fixes

• fix: hide the System view from non-admin users by @igolubic in #57
• fix: operator script installs cosign and itself; checklist detail pass by @igolubic in #58

Chores

• chore: release v0.9.1 by @igolubic in #59

Full Changelog: v0.9.0...v0.9.1

---

Verify these images (keyless cosign signatures):

cosign verify cogeto/cogeto:0.9.1 \
  --certificate-identity-regexp '^https://github.com/Cogeto/cogeto/\.github/workflows/release\.yml@refs/tags/' \
  --certificate-oidc-issuer 'https://token.actions.githubusercontent.com'
cosign verify cogeto/cogeto-edge:0.9.1 \
  --certificate-identity-regexp '^https://github.com/Cogeto/cogeto/\.github/workflows/release\.yml@refs/tags/' \
  --certificate-oidc-issuer 'https://token.actions.githubusercontent.com'
cosign verify cogeto/cogeto-mail:0.9.1 \
  --certificate-identity-regexp '^https://github.com/Cogeto/cogeto/\.github/workflows/release\.yml@refs/tags/' \
  --certificate-oidc-issuer 'https://token.actions.githubusercontent.com'

0.9.0

Cogeto 0.9.0 — EU-hosted AI command center with verifiable memory.

What's Changed

Features

• feat: show the Cogeto version in the nav footer by @igolubic in #38
• feat: operator script and pull-only deploy channel (install, upgrade, status) by @igolubic in #44

Documentation

• docs: operator runbook — customer-instance lifecycle on OVHcloud by @igolubic in #46

Chores

• chore: release v0.9.0 by @igolubic in #47

Full Changelog: v0.8.0...v0.9.0

---

Verify these images (keyless cosign signatures):

cosign verify cogeto/cogeto:0.9.0 \
  --certificate-identity-regexp '^https://github.com/Cogeto/cogeto/\.github/workflows/release\.yml@refs/tags/' \
  --certificate-oidc-issuer 'https://token.actions.githubusercontent.com'
cosign verify cogeto/cogeto-edge:0.9.0 \
  --certificate-identity-regexp '^https://github.com/Cogeto/cogeto/\.github/workflows/release\.yml@refs/tags/' \
  --certificate-oidc-issuer 'https://token.actions.githubusercontent.com'
cosign verify cogeto/cogeto-mail:0.9.0 \
  --certificate-identity-regexp '^https://github.com/Cogeto/cogeto/\.github/workflows/release\.yml@refs/tags/' \
  --certificate-oidc-issuer 'https://token.actions.githubusercontent.com'

0.8.0

Cogeto 0.8.0 — EU-hosted AI command center with verifiable memory.

What's Changed

Features

• feat: inbound email via per-tenant receive-only Haraka by @igolubic in #10
• feat: make email a first-class source (thread-aware, deletable, repliable) by @igolubic in #16
• feat: usable email reply drafting from chat and the email drawer by @igolubic in #18
• feat: time-travel diff UI over the temporal retrieval engine by @igolubic in #25
• feat: Memory Passport — a complete, documented, versioned data export by @igolubic in #33

Fixes

• fix: email reply draft read/list/execute fails on payloads predating recipientResolved by @igolubic in #20
• fix: time-travel timeline finds a subject by subject_entity, not entities only by @igolubic in #27
• fix: worker crash on dotted passport cron job identifier by @igolubic in #35

Other Changes

• chore: pipeline smoke test by @igolubic in #4
• chore: release v0.8.0 by @igolubic in #36

Full Changelog: v0.1.1...v0.8.0

---

Verify this image (keyless cosign signature):

cosign verify cogeto/cogeto:0.8.0 \
  --certificate-identity-regexp '^https://github.com/Cogeto/cogeto/\.github/workflows/release\.yml@refs/tags/' \
  --certificate-oidc-issuer 'https://token.actions.githubusercontent.com'