v1.12.5

What's Changed

• chore: sync dev with main after v1.12.4 (round 64) by @EngineerProjects in #814
• ci: run the workflow for pull requests on any base branch by @EngineerProjects in #803
• fix(lint): suppress SA1019 on mcp.LoggingLevel from the config, not a //nolint by @EngineerProjects in #815
• feat(sandbox): add the Rust sandboxd sidecar and its executor backend by @EngineerProjects in #801
• feat(sandbox): the Windows confinement identity, and CI that compiles it by @EngineerProjects in #802
• docs(sandbox): what git and go actually do inside the Windows AppContainer by @EngineerProjects in #816
• feat(rag): add Jina to the rerank catalog and the newer Cohere and Voyage models by @EngineerProjects in #817
• chore(release): 1.12.5 by @EngineerProjects in #818
• fix(sandbox): check the deadline and the cancel after every output message by @EngineerProjects in #819
• docs(release): describe the sandbox sidecar in the 1.12.5 changelog by @EngineerProjects in #820
• release: 1.12.5 by @EngineerProjects in #821

Full Changelog: v1.12.4...v1.12.5