v0.8.0

GraphNest v0.8.0

Compatibility: pre-1.0 pilot; Kubernetes 1.25 or newer. The browser console
is rebuilt as a React application served from the same binary; no migrations
and no configuration changes are required. Building from source or images now
needs Node 24 (make build, make test and the Docker image run make ui; run it
before Dockerfile.offline). The bearer token moves to the sessionStorage key
graphnest_token with a one-time migration from graphnest_admin_token; legacy
hash links into the old pages are not preserved.
Security: images include SBOMs, provenance, and GitHub attestations. The
console keeps script-src 'self' (no inline script, no eval) and now allows
inline styles for Radix UI, Recharts and Sonner; API text renders as React
text only, guarded by a test, and the token is never stored in localStorage
or a cookie.

Immutable artifacts

• ghcr.io/balcsida/graphnest/application@sha256:f9f471216b2a16eb2ed301149bd3abbd7aaac59180df724e74d9e2b446a20f80
• ghcr.io/balcsida/graphnest/node@sha256:f6c32a3f4d667ce0aa132e406d34a779adcf2896c29ebe83cdc5de979df70e31
• oci://ghcr.io/balcsida/graphnest/charts/graphnest:0.8.0@sha256:2d13a95974c8aa71deb7482a09da2ba6028ffb8fc4c37a2e8dd8315463c694d6

Verification

gh attestation verify "oci://ghcr.io/balcsida/graphnest/application@sha256:f9f471216b2a16eb2ed301149bd3abbd7aaac59180df724e74d9e2b446a20f80" --repo "balcsida/graphnest"
gh attestation verify "oci://ghcr.io/balcsida/graphnest/node@sha256:f6c32a3f4d667ce0aa132e406d34a779adcf2896c29ebe83cdc5de979df70e31" --repo "balcsida/graphnest"
gh attestation verify "graphnest-0.8.0.tgz" --repo "balcsida/graphnest"

What's Changed

• fix(mcp): drop top-level oneOf from context tool schema by @balcsida in #126
• feat(webui): rebuild the console on React and shadcn/ui by @balcsida in #128
• chore(release): prepare v0.8.0 by @balcsida in #129

Full Changelog: v0.7.0...v0.8.0