DevFeed 0.0.25

• Keep reader sessions active for 30 days of inactivity, up to a 90-day absolute lifetime; renew when returning to web, Chrome or Edge tabs.
• Keep scheduler heartbeat and quota checks responsive during long dispatch cycles, with bounded stall detection.
• Reduce sitemap and admin publication-query work; avoid unnecessary personalized-feed refreshes for inactive readers.
• Improve source relevance evidence validation and reuse shared topic catalog reads during analysis.
• Offer an explicit, temporary solver retry for source add/edit browser challenges without changing approval policy.
• Accept RSS/Atom article links with spaces in their paths, including Apache Uniffle's Atom feed; retain URL safety checks.
• Follow legacy publisher redirects over HTTPS only and improve image failure diagnostics.
• Add optional Compose registry proxying, including Docker Hub library and GHCR path handling.
• Cover every source intake with regression checks requiring an explicit AI or operator approval.
• Keep articles pending when analysis cannot establish eligibility.
• Keep the login cookie bounded by the absolute session deadline and renew only server-side inactivity expiry; validate cookie tokens at the response boundary and compare complete registry components in Compose checks.
• Release Chrome and Edge extension packages as version 0.1.5.

No database migration is required. Existing reader sessions require one fresh login when these changes are deployed.

Validation: master CI and release-tag CI passed, including CodeQL, backend integration tests, web/admin checks, browser parity in web/Chrome/Edge, and all six ARM64 image scans and smoke tests.

Chrome and Edge 0.1.5 store ZIPs are attached; store submission and approval are separate from the website rollout.

Backend results: 2,123 unit tests and 918 integration tests passed with no skips. All six image attestations and GHCR/Harbor ARM64 digest parity were verified.