v0.6.1

What's Changed

• Fix E2E Playwright CI failures: gateway HTTP routing and missing service initialization by @Copilot in #60
• Bump 3 dependencies in requirements.txt (medium) by @fabgpt-coder in #80
• Bump 2 dependencies in requirements.txt (medium) by @fabgpt-coder in #81
• Bump 2 dependencies in requirements.txt (high) by @fabgpt-coder in #82
• Bump 3 dependencies in requirements-secure.txt (medium) by @fabgpt-coder in #83
• Bump 3 dependencies in requirements.txt (medium) by @fabgpt-coder in #84
• Bump 3 dependencies in requirements.txt (medium) by @fabgpt-coder in #85
• Bump python-dotenv to 1.2.2 (medium) by @fabgpt-coder in #86
• Bump 5 dependencies in requirements.txt (high) by @fabgpt-coder in #87
• Bump 2 dependencies in requirements.txt (medium) by @fabgpt-coder in #88
• Bump nltk to 3.9.4 (critical) by @fabgpt-coder in #89
• Bump aiohttp to 3.14.1 (medium) by @fabgpt-coder in #90
• Bump aiohttp to 3.14.1 (medium) by @fabgpt-coder in #91
• Bump aiohttp to 3.14.1 (medium) by @fabgpt-coder in #92
• Bump aiohttp to 3.14.1 (medium) by @fabgpt-coder in #93
• Bump aiohttp to 3.14.1 (medium) by @fabgpt-coder in #94
• Bump aiohttp to 3.14.1 (medium) by @fabgpt-coder in #95
• ci+sec: de-rot wildbox to fully-green CI (picconate 1–5) by @fabriziosalmi in #105
• ci: de-rot CI — trivy pin, pyOpenSSL/cryptography, postgres secret by @fabriziosalmi in #96
• feat(identity): remove Stripe/billing integration by @fabriziosalmi in #106
• fix(guardian): add the missing Django migrations (8 apps) by @fabriziosalmi in #109
• fix(gateway): real X-Gateway-Secret + correct identity port (security boundary) by @fabriziosalmi in #107
• fix: stop data/agents/responder crash-looping at startup on missing config by @fabriziosalmi in #111
• fix(tools): block SSRF in static_malware_analyzer + url_analyzer by @fabriziosalmi in #112
• fix(responder): fail loudly instead of fabricating success on connector error by @fabriziosalmi in #114
• fix(agents): close SSRF via tool-name path fallback + flag missing internal key by @fabriziosalmi in #115
• fix(identity): stop 3 user endpoints 500ing on TeamMembership fields by @fabriziosalmi in #117
• fix(cspm): undefined CheckResult.get_current_timestamp + trending-metrics arity by @fabriziosalmi in #118
• fix(data): healthcheck pointed at wrong port (8001 → 8002) by @fabriziosalmi in #119
• chore(tools): remove committed backup artifacts + spent codemods by @fabriziosalmi in #120
• fix(guardian): persist gateway users so writes stop 500ing (#110) by @fabriziosalmi in #121
• fix(gateway): make gateway auth work end-to-end + route Guardian (#113) by @fabriziosalmi in #122
• fix(gateway): enforce auth on routes using the no-op access_by_lua_file form (#123) by @fabriziosalmi in #124
• fix(compose): bring the full stack up healthy on docker-compose by @fabriziosalmi in #125
• fix(dashboard): render through the gateway — CSP unsafe-eval (dev) + drop redundant Google Fonts by @fabriziosalmi in #126
• fix(dashboard): make login work through the gateway (route + CORS origin) by @fabriziosalmi in #127
• fix: make a fresh stack usable end-to-end (guardian migrate + admin team) by @fabriziosalmi in #128
• refactor: remove Billing & Subscription (UI + logic) end-to-end by @fabriziosalmi in #129
• feat(agents): migrate LLM from OpenAI to Claude (#116) by @fabriziosalmi in #130
• fix(agents): derive the threat report from real findings (not stubs) by @fabriziosalmi in #131
• fix: clear known runtime errors (scheduler race, hydration warning, icon 404) by @fabriziosalmi in #132
• sec(auth): require gateway-origin secret to trust X-Wildbox-* identity headers by @fabriziosalmi in #133
• feat(identity,gateway): enforce API key scopes (least-privilege) by @fabriziosalmi in #134
• fix(dashboard,identity): wire API-key UI to the working scoped endpoints by @fabriziosalmi in #135
• chore(gateway): remove dead X-Wildbox-Plan header (billing removed) by @fabriziosalmi in #136
• sec(automations): bind n8n to localhost so webhooks aren't network-exposed by @fabriziosalmi in #137
• sec(tools): central SSRF guard for all tool targets by @fabriziosalmi in #138
• feat(automations,gateway): make n8n optional and fix the automations route by @fabriziosalmi in #139

New Contributors

• @fabgpt-coder made their first contribution in #80

Full Changelog: v0.6.0...v0.6.1