v1.7.0

⚠️ Back up your database before upgrading

This release runs migration upgradeFor170, which remaps the legacy notify_status column.
This change cannot be undone, so please back up your database before upgrading.

Changelog

New Features

• 3165974 feat(notify): multi-condition triggers and regex keyword matching
• 932cccb feat(secret): add encrypted secret storage with AES-GCM, masking and CRUD API
• c349565 feat(secret): add secrets management UI (list, create/edit, delete)
• 5a59c0c feat(secret): inject secrets as env vars into task execution and mask them in logs
• 14b5a6f feat(task): support YAML import/export for tasks
• fd456a6 feat(utils): 动态检测 bash 路径并优化临时目录使用

Bug Fixes

• c7e1ecf fix(ai-chat): move markdown styles to unscoped block to drop :deep() lightningcss warnings
• be83005 fix(secret): security hardening from self-review
• 70abf99 fix(task-log): render host list as text to prevent stored XSS
• 97171e3 fix(utils): flush gbk writer before sync on windows to avoid truncated bat

Others

• c9beee0 Merge pull request #228 from foecmke/202607041105
• 78e8573 chore(release): bump version to 1.7.0 and align secret migration to v1.7.0
• 833fafb chore: add AI collaboration config (verify command, release skill, AGENTS.md, CLAUDE.md guardrails)
• a4d2da0 style(notify): inline conditional assignment to satisfy golangci-lint (QF1007)
• 8cf6d1b test(notify): expand keyword-regex matching cases (#222)