v0.0.36

What's Changed

• feat(tenancy): adoption prerequisites — default tenant id, tenant-role vocabulary, tenant_client (#380) [stack 1/11] by @antosubash in #385
• feat(users): reserve the tenant: role namespace, pin tenant-role isolation (#377) [stack 2/11] by @antosubash in #386
• feat(dashboard): platform-only stats behind dashboard.view (#374) [stack 3/11] by @antosubash in #387
• feat(feature_flags): validate tenant ids, pin tenant flag behaviour (#375) [stack 4/11] by @antosubash in #388
• feat(users): retire legacy users_user.tenant_id (#381) [stack 5/11] by @antosubash in #389
• feat(keycloak): opt-in trust_tenant_claim, resolver stays authoritative (#376) [stack 6/11] by @antosubash in #390
• feat(audit_log): stamp entries with tenant, tenant column/filter (#372) [stack 7/11] by @antosubash in #391
• feat(background_tasks): stamp executions with tenant, retry as original tenant (#371) [stack 8/11] by @antosubash in #392
• feat(file_storage): adopt MultiTenantMixin on StoredFile (#383) [stack 9/11] by @antosubash in #393
• feat(settings): tenant self-service settings, validate TENANT scope_id (#382) [stack 10/11] by @antosubash in #394
• feat(branding): resolve branding per tenant over the system theme (#373) [stack 11/11] by @antosubash in #395
• fix(hosting): JSON 500 keeps correlation id; no session cookie for anonymous API calls by @antosubash in #401
• fix(settings): sync hydration of DB-backed settings for Celery workers by @antosubash in #402
• fix(db): SQLite outermost begin_nested() no longer commits on RELEASE by @antosubash in #405
• fix(ui): layout batch (PageShell wrap, AlertDialog merge, skip link, toaster test) by @antosubash in #400
• fix: tenancy-adoption review follow-ups (permissions editor, branding reaper) by @antosubash in #404
• fix(types): Generator annotations for @contextmanager (ty 0.0.85 deprecation) by @antosubash in #411
• fix: guard gen-i18n against dropping namespaces; correct alembic branch-label docs by @antosubash in #403
• feat(core): dynamic menu providers and runtime permission sources (#340, #334) by @antosubash in #407
• fix(migrations): make SQLite-autogenerated revisions portable to Postgres (#342) by @antosubash in #406
• feat(hosting): request-body size guard and shared rate limiter for public routes by @antosubash in #408
• feat(hosting): ship the /setup wizard with the framework (#351) by @antosubash in #409
• feat(file_storage): public files, anonymous serving, list search/sort, thumbnails by @antosubash in #410
• Honour direct user grants in every permission check by @antosubash in #398
• fix(tenancy): record tenant source and set Vary (#367) by @antosubash in #384
• perf(hosting): cut per-request CPU found by a Postgres load test by @antosubash in #412
• Fix #413–#424: tenancy API and Vary, outer-join tenant filter, i18n overrides, admin a11y by @antosubash in #425
• chore(deps): security updates 2026-10-05 by @antosubash in #399
• Fix #426–#437: ui catalog, homeUrl, CSP providers, UserContext.permissions, scaffold and settings fixes by @antosubash in #438
• chore(deps): security updates 2026-10-12 by @antosubash in #439

Full Changelog: v0.0.35...v0.0.36