chore(release): v0.72.0

[hsinatfootprintai]

Release prep for v0.72.0. Three commits since v0.71.0.

Contents

Added — delegated-token minting: POST /v1/tokens/delegate, containarium token delegate, and a new tokens:delegate scope (#1708, for containarium-cloud#1427). Lets a fronting service trade its own credential for one that acts for an end user, so audit rows name the person and scope checks bind against something real.

Fixed — the sentinel logged a bind failure on every tunnel connect and reconnect (#1710, #1711). The per-spot loopback listener on the ConnMux HTTPS port was dead-on-arrival for every backend, not just the promoted primaries the old exemption covered.

Internal — the release gate from #1705, which this very release is the first to be checked by.

Gate check

Ran the workflow's own logic locally before tagging:

PASS: changelog section has 39 lines
PASS: version constant = 0.72.0

Both files it checks are updated here: CHANGELOG.md gains a ## [0.72.0] section, and pkg/version/version.go moves 0.71.0 → 0.72.0. That constant had been stale for three consecutive releases before the gate existed.

Test plan

• go build ./... and the auth/server suites green
• Release-gate logic run locally against this tree

Tag goes on this commit once merged.

🤖 Generated with Claude Code

https://claude.ai/code/session_01R1554BHQdJmSXTuG1UhS3i

Summary by CodeRabbit

• New Features

  • Added delegated token minting through the API and containarium token delegate command.
  • Supports scoped authorization, nested delegation chains, and fail-closed handling when scope claims are missing.

• Bug Fixes

  • Improved Sentinel bind-failure logging and configuration.
  • Strengthened release validation to ensure changelog and version consistency.

• Documentation

  • Added the v0.72.0 changelog entry with details on delegated token workflows.

• Release

  • Updated the application version to v0.72.0.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Team

Run ID: 3853e562-de98-4cf3-a072-d952cbdf14ce

📥 Commits

Reviewing files that changed from the base of the PR and between 68a424c and 162e638.

📒 Files selected for processing (2)

• CHANGELOG.md
• pkg/version/version.go

Included review availability: Your plan provides up to 8 included reviews per hour; 5 remain after this review.

---

📝 Walkthrough

Walkthrough

The release metadata now identifies version 0.72.0. The changelog records delegated token minting, Sentinel fixes, and release validation requirements.

Changes

Release metadata

Layer / File(s)	Summary
Version and changelog alignment CHANGELOG.md, pkg/version/version.go	The changelog adds the v0.72.0 release entry, including delegated token minting, Sentinel fixes, and release validation. The fallback semantic version changes to 0.72.0.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Merge Risk: ⚪ Minimal · up to 162e6

This release metadata update identifies version 0.72.0 and documents its release contents. The version and changelog are aligned, with no remaining merge-readiness risk.

Suggested reviewers: hsinhoyeh

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly identifies the primary change as release preparation for version v0.72.0. It matches the changelog and version updates in the pull request.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 1…
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

📝 Generate docstrings

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch release/v0.72.0

---

_{Comment @coderabbitai help to get the list of available commands.}