v1.7.0

1.7.0 (2026-10-14)

Features

• renovate: group security fixes into one PR per manager (#125) (913fa4b)
• renovate: merge green Renovate PRs after each run (#129) (9d26388)

Bug Fixes

• ccf-bump: fetch org modules directly, not through the public proxy (#140) (987851d)
• ccf-bump: ignore templated refs and hold only for applied changes (#127) (1e897fc)
• deps: update module golang.org/x/net to v0.60.0 [security] (#134) (504d18d)
• deps: update module google.golang.org/grpc to v1.83.2 [security] (#123) (40f3ffa)
• train: /retry re-runs a failed release-please run (#139) (78b07c8)
• train: bump helm to the latest final release of each dependency (#141) (224b0b9)
• train: check commenters' org role in the run that starts a train (#135) (4286ab1)
• train: re-probe a fix release only once it is published (#133) (92edb34)
• train: read the gate run ID from the dispatch response (#131) (5986720)