v0.5.0

0.5.0 (2026-08-24)

Features

• add admin fetcher config and audit-log reads (#306) (5e498c5)
• add fetcher configuration mutation (#307) (74bff8c)
• add fetcher diagnostic CLI commands (#324) (952cb31), closes #236
• add fetcher persistence and audit foundation (#257) (cf6ac43)
• add generic run_fetcher task with atomic run acquisition (#261) (19469ee), closes #242
• add manual fetcher trigger (#321) (4c17ab4), closes #244
• add public fetcher observation API (#303) (9826cf5)
• add queued state to fetcher run lifecycle (#311) (f0e5e15)
• bootstrap fetcher configs during process startup (#265) (6a0f2ef)
• implement BaseFetcher lifecycle and registry (#260) (1684986)
• reconcile RedBeat schedule against FetcherConfig at Beat startup (#300) (17b0394)

Bug Fixes

• allow Renovate custom manager to scan backend/tests/conftest.py (#285) (529c939), closes #284
• clarify per-delivery fetcher timeout semantics (#319) (ca1a17e), closes #314
• configure explicit socket timeouts for RedBeat's Redis client (#305) (70ba15b), closes #304
• dispose async engine across Celery event-loop boundaries (#296) (ac9cfbe), closes #293
• finalize fetcher runs after setup failures (#312) (6220fb2)
• persist per-run Celery hard time limit for stale detection (#315) (ab507af), closes #310
• require prefork Celery worker pool with startup validation (#318) (6651ca9), closes #313

Documentation

• fix contradictions in fetcher-infrastructure run() lifecycle (#299) (64f25c8)

v0.4.0

0.4.0 (2026-08-14)

Features

• add identity audit persistence and service (#155) (794c985)
• add Session and ApiKey persistence models (#151) (eb4af4d)
• auth: add JWT session service, logout, and cleanup task (#158) (482c1d4)
• auth: add local password login endpoint with lockout (#162) (18c5534), closes #114
• auth: add optional authentication for public reads (#229) (807668d)
• auth: add unified authentication dependencies (#178) (a0ad9d8)
• constrain api_key.key_hash to SHA-256 hex digest format (#154) (3890175), closes #150
• identity: add API key lifecycle service with audit trail (#174) (42d53a9)
• identity: add API key management endpoints (#181) (8d65fb0)
• identity: add CLI infrastructure and user bootstrap commands (#201) (5035e62)
• identity: add password reset and unlock services (#184) (a2c256c)
• identity: add remaining local identity CLI commands (#202) (5085cf7)
• identity: add ticket-independent admin user mutation APIs (#198) (c656808)
• identity: add user lifecycle create/update/reactivate services (#183) (f5e256e)
• identity: add user read, profile, and identity audit APIs (#195) (7ff84be), closes #123
• platform: add system settings persistence and bootstrap (#204) (a3b960b), closes #113
• platform: add system settings read and audit log APIs (#222) (80ba9d6), closes #120

Bug Fixes

• align User.roles and manager_id cascade with unsupported deletion (#153) (d58f76c), closes #149
• run API transaction commit before response is sent (#165) (f376a26)
• trace greenlet and thread execution in coverage measurement (#167) (ea29110), closes #166

v0.3.0

0.3.0 (2026-08-03)

Features

• add AuditEventMixin and BaseAuditLog audit trail infrastructure (#83) (8338a71)
• add Celery application bootstrap with startup validation (#80) (6db7ca5)
• add health/readiness endpoints and image assertions (#91) (0773f95)
• add identity root models and static RBAC resolution (#54) (373223b)
• add shared HTTP client and TLS trust store infrastructure (#79) (5849f98)
• add structured logging and request correlation (#45) (63318c2)

Bug Fixes

• eliminate release-please uv.lock race condition via extra-files (#82) (e91b77f), closes #81

Documentation

• define async model factory fixture pattern (#51) (a64a480)

v0.2.0

0.2.0 (2026-07-30)

Features

• add versioning strategy and release-please automation (882c89a)
• apply testing infrastructure rollout (c608447)
• converge Python version to 3.13 with single source of truth (77a6aee)
• type secret configuration fields as SecretStr (8fd58ce)

Bug Fixes

• replace python-jose with PyJWT to resolve ecdsa vulnerability (e230d23)
• resolve test deprecation warning and improve dev setup (#12) (fa1cf0c)
• target sentinel-smoke project in image compose_exec fixture (1967942)

Documentation

• add health-endpoints spec, resolve NET-DES-01 (4b69939)
• apply CVE affected data gaps action plan (OP-1 through OP-6) (81b86ec)
• drop image-testing-setup draft, decouple smoke-test spec (248532f)
• resolve all 5 configuration review findings (b817f0b)
• rewrite architecture.md, move operational content to deployment.md (52b3f9b)