THRALL v0.4.0 — Tool for Hierarchical Replication And Identity Linking

Container & Supply Chain

• Fedora-minimal 44 OCI images replace Alpine + Guix — signed Fedora packages only, matching Fedora fleet servers
• Syncthing peer node split into a dedicated thrall-syncthing image (replaces docker.io/syncthing/syncthing); the quadlet peer unit pulls ghcr.io/ubermetroid/thrall-syncthing with a curl-based healthcheck
• Control-plane image stripped: no package manager (dnf5/libdnf5), no Syncthing binary — 155 MB portal-only runtime

CI/CD

• GitHub Actions Verification Ladder (test → clippy → fmt → release build) gates every push and PR
• Multi-arch (amd64 + arm64) images published to ghcr.io/ubermetroid/thrall and ghcr.io/ubermetroid/thrall-syncthing (main → :main, v* tags → :X.Y.Z + :latest)

Portal (since v0.3.0)

• 6 new 8-bit footer widgets, clickable About brand, top body tabs, and a consolidated Admin view
• READ-ONLY shared folders, selective sync with per-folder exclusions, and offline-hub filtering on the mesh stage
• Footer telemetry dock refinements and READ-ONLY explorer UI controls