v0.7.0

GraphNest v0.7.0

Compatibility: pre-1.0 pilot; Kubernetes 1.25 or newer. Migration 037 adds
the empty graph_publication_grants table and runs automatically; no
configuration changes are required. v1 graph uploads are unchanged.
Security: images include SBOMs, provenance, and GitHub attestations. v2
graph publication requires an administrator or an explicit repository
grant; read access alone never publishes, and token, grant and indexed
commit are rechecked after parsing.

Immutable artifacts

• ghcr.io/balcsida/graphnest/application@sha256:aa4f00d30002824ddcf080da7ec550ae04bc729ec7efe8c4f8e671c04b3551e2
• ghcr.io/balcsida/graphnest/node@sha256:0e5b3cb8ddcbe971a301c778bdbe8a6eb6f7c3eebd539add233bb4a7933ddc92
• oci://ghcr.io/balcsida/graphnest/charts/graphnest:0.7.0@sha256:a12e5df9f9e93cd8cb4ff0ccd7420963e883416e31bccc2ef41972e03b4ceea1

Verification

gh attestation verify "oci://ghcr.io/balcsida/graphnest/application@sha256:aa4f00d30002824ddcf080da7ec550ae04bc729ec7efe8c4f8e671c04b3551e2" --repo "balcsida/graphnest"
gh attestation verify "oci://ghcr.io/balcsida/graphnest/node@sha256:0e5b3cb8ddcbe971a301c778bdbe8a6eb6f7c3eebd539add233bb4a7933ddc92" --repo "balcsida/graphnest"
gh attestation verify "graphnest-0.7.0.tgz" --repo "balcsida/graphnest"

What's Changed

• fix(webui): keep search rail controls inside the sidebar by @balcsida in #122
• feat(graph): add repository-scoped graph publication by @balcsida in #123
• feat(graph): add symbol callers, callees and impact tools by @balcsida in #124
• chore(release): prepare v0.7.0 by @balcsida in #125

Full Changelog: v0.6.1...v0.7.0