v0.4.5

0.4.5 (2026-07-30)

Features

• approvals queue CSV export (#359, absorbing #373) (#507) (b39c410)
• contributors leaderboard CSV export (#359) (#506) (0d63037)
• package_name filter and the cve/package exclude twins (#492) (#501) (0d5933d)
• ui: click to exclude a value from the rail and the grids (#349 §2) (#491) (19697a5)

Bug Fixes

• backend: close the two pit-leak windows outside the reclaim guards (#512) (5cb14a1), closes #509
• backend: drain the commit race from both sides, not just the retry count (#513) (795493a), closes #510
• frontend: one csv-export path with try/finally — no more strandable buttons (issue 509) (#511) (25e794b), closes #509
• frontend: stop the dev server watching the gitignored coverage dir (#504) (ea04931), closes #502
• ui: epss and mix bar tracks move onto --meter-track (#498) (c93ce7c)
• ui: facet rail collapses long groups behind a show-all expander (#500) (ffd0544)
• ui: make the grid value bar reachable, legible and pixel-crisp (#496) (9d559fb)
• ui: the two impeccable findings — a real layout animation and a phantom (#495) (ee05668)

v0.4.4

0.4.4 (2026-07-27)

Features

• filter findings nobody owns — the unassigned flag (#349 §1) (#488) (674cd33)
• filter negation swept to running images, the audit trail and approvals (#487) (e89ee6e)

Bug Fixes

• ui: five read-legibility defects — width, severity mix, dead column, bare counts, false empty states (#486) (e5aeaad)

v0.4.3

0.4.3 (2026-07-26)

Bug Fixes

• scanner: assert the cluster reached matches JAVV_CLUSTER_ID (#472) (b51d7bb), closes #470

v0.4.2

0.4.2 (2026-07-19)

Features

• backend: system-jobs lease guards both doors + lifecycle dry-run (#464) (9494d6a)
• ui: dry run button on the lifecycle repair row (#465) (1b99e82)

Bug Fixes

• ui: audit table — detail shrinks to content, target owns the slack (#462) (d733424)

v0.4.1

0.4.1 (2026-07-18)

Features

• backend: repair-actions job surface — 202 triggers + lease/status (#406 follow-up) (af2e7fb)
• backend: repair-actions surface — trigger the sanctioned jobs over http (issue 406) (142827d), closes #406
• data inspector — read-only store console (#406) (#455) (3e2a787)
• ui: repair actions card on /inspect (#406 follow-up) (#457) (3c71b44)
• ui: topbar user menu + m9 cap-logging parity (#450) (#451) (94d2ae3)

Bug Fixes

• fleet-scoped events (auth, jobs, inspect) appear in the audit screen (#458) (e791625)

v0.4.0

0.4.0 (2026-07-17)

Features

• fe: m9f slice 1 — emptystate kit, zero-clusters cold start, testable nav gate (#441) (ea00e61), closes #40
• fe: m9f slice 2 — ⌘K command palette (global search + jump-to-screen) (#443) (2535009)
• m9f slice 3 — notification bell (poll, floating glass drawer, dismiss) + flat primary button (#444) (e60712c)
• m9f slice 4 — saved views v2, is/is-not filter negation, url-rewrite ownership fix (#445) (05287b9)

Bug Fixes

• fe: e2e paging spec polls the first grid query — skeleton rows race the cluster fetch (#448) (d9214f3)

Miscellaneous Chores

• cut the 0.4.0 minor release (m9f bolt) (#449) (f2f7cc7)

v0.3.11

0.3.11 (2026-07-17)

Features

• backend: per-cluster findings-cleanup window — override doc + per-tenant sweep (#437) (c82a57e), closes #431
• fe: cluster rides the url — global ?cluster= deep links (issue 433) (#438) (239b827), closes #433
• ui: cve detail refresh — wide layout, transposed evidence, kit cards (#434) (#439) (ed584f9)
• ui: overview drops the duplicate scan-activity card for top-components + riskiest-images (#426) (f258a6d)
• ui: section identity accents, scanner identity dots, slate table-head band (#428) (3aa68de)

Bug Fixes

• fe: clear grid rows on cluster/T switch — stale-tenant rows lingered under slow networks (#436) (a39863f), closes #431

v0.3.10

0.3.10 (2026-07-16)

Features

• api: team totals block on the contributors read (#360) (1096ef4)
• backend: approvals rail filters + facets on the queue endpoint (4b) (#371) (d82d81f), closes #38
• backend: sla_clock_at — the materialized d21 group clock (issue 363, pr 1/2) (#365) (1d92235), closes #363
• jobs: findings long-window cleanup sweep — m9e slice 5, bolt wrap (#412) (fd47ed4), closes #39
• scanner: namespace scope lists take fnmatch globs (#409) (fc7eba4), closes #39
• ui: approvals filter rail (m9d slice 4b, frontend) (#372) (a74b4bb), closes #38
• ui: m9d slice 1 — the audit log on the prototype table grammar (#353) (20b511c)
• ui: m9d slice 2 — scanner status on the shared data-screen grammar (#356) (e8c0529)
• ui: m9d slice 3 — contributors on the shared data-screen grammar (#361) (6f72897), closes #38
• ui: m9d slice 4 — approvals review queue on the shared grammar (#370) (a1a66bb), closes #38
• ui: m9e slice 1 — settings shell + SLA policy panel (#405) (b8b672e)
• ui: m9e slice 2 — tokens, users & roles, cluster panels (#407) (252675b)
• ui: m9e slice 3 — scan-scope editor + scanning panel (#408) (3046502)
• ui: m9e slice 4 — data & opensearch panel + live freshness banner (#411) (dcd96bf)
• ui: sla-breached attribute chip on the findings rail (issue 363, pr 2/2) (#366) (d6fb096), closes #363

Bug Fixes

• backend: historical export reconstructs the cluster once (audit f-09) (#397) (fda2990)
• backend: historical reads page to exhaustion, never a 10k cap (audit f-05/f-06) (#392) (8de360b)
• backend: jobs read to exhaustion — no 10k caps in rebuild/staleness (#391) (#396) (863a6ab)
• backend: one id for a notification's _id and notification_id (audit f-03/f-13) (#390) (25aa1e8)
• backend: report status + download are owner-scoped (audit f-01/f-12) (#388) (d4a4238)
• ui: export dialog carries the whole lens + past-t schedules (audit f-07/f-08/f-11) (#393) (100737a)
• ui: image csv export is an authenticated read, not admin-only (audit f-10) (#395) (7a93781)
• ui: lenses never flash the amber quiet claim before data lands (#355) (532f077), closes #38
• ui: neutralize formula heads in the image csv export (audit f-02) (#389) (d0279f0)
• ui: rewound time chip names the viewed T from t itself (#364) (04dbc7d)
• ui: sla countdowns measure from the rewound t, never from today (#362) (a6acdc5)

v0.3.9

0.3.9 (2026-07-11)

Features

• ui: chip language A — derived hues, severity escalation, one depth treatment (#350) (229a728)
• ui: grid ergonomics — column drag-reorder on findings + images, cursor contract, first-seen column (#348) (a24e768)

Bug Fixes

• api: cap hourly trend buckets at a month of span (#346) (a562b1e), closes #343

v0.3.8

0.3.8 (2026-07-11)

Features

• api: severity split on the findings trend (#333) (77801c6)
• ui: m9c slice 1 — the overview dashboard (#332) (406dedf), closes #37
• ui: M9c slice 2 — the all-clusters fleet view (#338) (bcf7485)
• ui: M9c slice 3 — running images + image detail on the committed inventory (#339) (4312607)
• ui: overview 1b — severity lens, signal band, at-rest affordances (#334) (486e2ae), closes #37
• ui: scan-ingest lens above the findings + images tables (#340) (95eaa2f), closes #37

Bug Fixes

• ui: audit-343 wave — honest errors, restorable time range, semantics everywhere (#344) (19d3dfb), closes #343
• ui: freshness banner — urgency treatment, 24h times, durations, 10-min poll (#330) (7e1c991)
• ui: overview + findings polish — cursor, donut links, palette, note, column diet (#335) (ae706ce)
• ui: system-default cursor truly global — universal rule + ratchet (#337) (023f19b), closes #37