v1.2.0

What's Changed

• fix: correctly handle tag pushes in transparent proxy commit enrichment by @coopernetes in #338
• fix: bug fixes for 1.1.1 release by @coopernetes in #341
• chore: restrict GHA workflow token permissions to least privilege by @coopernetes in #343
• perf: benchmark suite comparing fogwall vs finos/git-proxy by @coopernetes in #342
• feat: MongoDB SCM token cache, docs refresh, demo assets by @coopernetes in #345
• docs: polish README, depersonalize config, add alert syntax, fix stale names by @coopernetes in #349
• chore(deps-dev): bump @types/node from 25.9.3 to 26.0.0 in /fogwall-dashboard/frontend in the frontend-npm-dependencies group by @dependabot[bot] in #354
• refactor(1.2.0): operations→operation rename, FogwallPermission abstraction, OAuth compat redirect by @coopernetes in #352
• fix: revert LegacyOidcCallbackRedirectFilter, document IdP redirect URI migration by @coopernetes in #355
• fix: cancel PENDING push record when git client disconnects during approval wait by @coopernetes in #356
• fix: skip RFC format check when no email policy is configured, drop commons-validator by @coopernetes in #358
• fix: decompose identity-verification into independent committer and author checks by @coopernetes in #359
• fix: S&F re-push shows full commit list and scan coverage relative to upstream by @coopernetes in #362
• ci: run all required checks and Docker build on release/* branches by @coopernetes in #365
• fix: per-commit content scanning closes intermediate-commit bypass in S&F mode by @coopernetes in #367
• feat: emit request/response schemas in OpenAPI spec for automation-relevant endpoints by @coopernetes in #368
• feat: add dark mode to dashboard UI (#46) by @coopernetes in #369
• chore: bump version to 1.2.0 by @coopernetes in #370

Full Changelog: v1.1.0...v1.2.0