v0.4.0-preview.1

Release notes: https://googlecloudplatform.github.io/scion/release-notes/v0-4-0-preview-1/

What's Changed

• chore: update LATEST.json for nightly-20261107 by @github-actions[bot] in #4634
• provision: accept a refused chown when the entry already has the wanted owner by @ptone in #4635
• Hub: supervise message-bus plugins and recover lost sessions by @ptone in #4480
• changelog: daily entry 2026-11-06 by @ptone in #4637
• docs(release-notes): add notes for v0.3.0-preview.6 by @ptone in #4638
• docs: document message-bus plugin supervision, delegated lists, artifact owner notifications, and cloud log level filter by @ptone in #4640
• sciontool: apply network policy and drop the extra capability in init by @ptone in #4636
• Hub: list the plugin transport settings in hubKeys by @ptone in #4641
• web: shared-dir PVC inputs on the admin server-config page by @ptone in #4639
• artifacts: tell the user named in a grant, on request by @ptone in #4646
• single-node-vm: build release images with the release image driver by @ptone in #4644
• image-build: VERSION accepts only release tag forms by @ptone in #4645
• feat(web,hub): read-only version line on server config; validate the rebuild branch (hub update channels phase 6) by @ptone in #4642
• artifacts: serve shared artifacts from a separate content host (ptone#7107, phase A) by @ptone in #4648
• Web: keep artifact review text at 16px on touch screens by @ptone in #4650
• chore: update LATEST.json for v0.3.0-preview.7 by @github-actions[bot] in #4651
• Decide chat thread actions through chat access resolvers and add the project-viewer role by @ptone in #4643
• fix(hub): clean up update staging after a successful update (hub update channels phase 5b) by @ptone in #4653
• publish-homebrew: fail when a pushed image is not anonymously pullable by @ptone in #4657
• chat: Copy link to msg rename and Copy link address for message links by @ptone in #4654
• release images: move channel tags by digest; stage 2a checklist by @ptone in #4655
• chore: update LATEST.json for nightly-20261108 by @github-actions[bot] in #4658
• hub: answer chat topic and topic-project lookup faults with 500, not 404 by @ptone in #4659
• image_tag: a release build defaults to its own version tag by @ptone in #4660
• content host: refuse a same-site content URL and report its status by @ptone in #4661
• cloudrun: decide native identity in the hub and run block instances by @ptone in #4663
• chat: toast feedback and a guarded clipboard helper for message copy actions by @ptone in #4664
• changelog: daily entry 2026-11-07 by @ptone in #4662
• cr-ci mediator: runner bookkeeping by @ptone in #4416
• messaging: bound the conversation consistency check and index its lookups by @ptone in #4666
• hub: log the image_tag latest opt-out at Info by @ptone in #4667
• hub: stop per-item permission and standing checks after the request is cancelled by @ptone in #4668
• hub: test the dev identity call sites; take *AuthConfig in currentDevUser by @GodD001 in #4652
• docs: correct three hosted CLI examples by @ptone in #4670
• web: show a legacy Runtime Broker's conversion plan read-only by @ptone in #4656
• hub: bound the caller-supplied chat key in store-fault log lines by @ptone in #4674
• hub: wait for the right condition in three flaky tests by @ptone in #4669
• docs(release-notes): add notes for v0.3.0-preview.7 by @ptone in #4677
• chore: update LATEST.json for nightly-20261109 by @github-actions[bot] in #4681
• docs: document project-viewer role, chat capability rules, artifact grant notifications, and content host by @ptone in #4678
• runtime: follow the Docker env order on Kubernetes
  by @ptone in #4676
• hub: render upstream response text in errors and logs by @ptone in #4679
• docs(release-notes): publish v0.3.0 stable release notes by @ptone in #4680
• changelog: daily entry 2026-11-08 by @ptone in #4683
• docs: name the existing ignore file in the HA Helm build command by @ptone in #4685
• web: split the chat group header when the recipient changes by @ptone in #4682
• sciontool: log init warnings at WARN level by @ptone in #4684
• web: show Unlimited for stored zero limits on the agent detail page by @ptone in #4686
• githubapp: trim a .git suffix in any letter case when recovering owner/repo by @ptone in #4687
• api: workspace marker entries must be real directories, matched under another case by @ptone in #4688
• web: route every copy action through one guarded clipboard helper by @ptone in #4689
• scion/si5-wsfiles-land by @ptone in #4690
• hub: refuse a config edit whose disposition needs an unreadable broker record by @ptone in #4691
• runtime: capture command stdout and stderr separately by @stevegeek in #4671
• flat brokers: enable flat cloudrun Runtime Broker instances by @ptone in #4694
• skills: apply the published/deprecated status filter to version-number reads by @ptone in #4696
• hub: validate the rebuild branch at the request, keep run results by @ptone in #4692
• hub: decide progeny-shared owner secrets on the owner-material chain by @ptone in #4698
• hub: revoke agent credentials on auto-suspend by @ptone in #4697
• runtime-broker convert: add --apply, --status and --rollback by @ptone in #4693
• Clarify direct routing and follow-up ownership in messaging guidance by @ptone in #4700
• Clarify completion and lifecycle authority by @ptone in #4701
• hub: fixed client text for GitHub App and validate failures; render upstream text in logs by @ptone in #4699
• hub: move the wave 3 authz test helpers into hubtestutil by @ptone in #4626
• hub: replace the broker secret on co-located flat activation by @ptone in #4703
• image-build: record pushed digests as Cloud Build step output by @ptone in #4665
• Events stream phase 1: timeouts and publish cadence. by @ptone in #4649
• Hub: fail plugin hub credentials when the broker row is not confirmed by @ptone in #4704
• docs(site): document 2026-11-08 release and runtime updates by @ptone in #4705
• hub: split the authz kernel vocabulary into its own files by @ptone in #4708
• agent: run the start-time repository probes through the host-side git door by @ptone in #4709
• cli: test that every settings API route has a command or a web-only reason by @ptone in #4707
• artifacts: warn publishers when a review is open by @ptone in #4710
• chore: update LATEST.json for nightly-20261110 by @github-actions[bot] in #4723
• hub: finalize a broker-refused create without waiting on the broker by @ptone in #4702
• test hubs: offline hub-admin test identity delegation by @ptone in #4711
• runtime: apply operator-only substrate validation to the default profile by @ptone in #4706
• extras/herdr-scion: herdr plugin for scion agents by @ptone in #4719
• feat(hub): let a user leave a project (experimental, off by default) by @ptone in #4712
• sciontool: drop CAP_NET_ADMIN once init's network setup is done by @ptone in #4727
• sciontool: report the metadata iptables check as not verifiable by @ptone in #4728
• Infer the project of hub env and hub secret from scion use by @ptone in #4714
• Keep broker hub connections out of settings files by @ptone in #4718
• Report harnessesSeeded from the harness configs the wizard lists by @ptone in #4716
• extras/herdr-scion: page the dashboard and focus it by @ptone in #4730
• Keep agent containerStatus consistent with its phase by @ptone in #4717
• Exit 0 from sciontool init on a requested stop by @ptone in #4715
• hub: limit which hub secrets reach agents and appear in agent reads by @ptone in #4713
• Hub: decode and verify secrets in the Secret Manager migration by @ptone in #4729
• hub, telegram: deliver chat-plugin inbound attachments as hub uploads by @ptone in #4725
• web: leave a project from the web UI (experimental) by @ptone in #4731
• hub: route project-default GCP passthrough through shared checks by @ptone in #4721
• changelog: daily entry 2026-11-09 by @ptone in #4733
• conduit: authenticate relay peers with per-peer keys (opt-in) by @ptone in #4412
• hub: add an opt-in welcome project with sha-pinned agent-team templates by @ptone in #4720
• docs(site): document secret, runtime-broker, project, and api rules by @ptone in #4734
• feat(cli): complete scion project leave (experimental, off by default) by @ptone in #4732
• Choices: agent-to-user multiple-choice decisions (hub and CLI) by @ptone in #4726
• hub, web: bound chat search so it cannot stall the hub by @ptone in #4735
• harnesses/muse-code: drop the hook handler key muse rejects by @ptone in #4737
• Carry the session generation in hub JWTs and check it on validation by @ptone in #4741
• docs(site): describe hub.project_self_leave once in the experiments reference by @ptone in #4736
• hub: answer broker errors with generic text and relay only allowlisted details by @ptone in #4742
• runtime-broker convert: apply and roll back on a co-located host by @ptone in #4738
• runtime: podman Run requires a full container ID by @stevegeek in #4672
• Hub-side git refuses every ssh repository URL by @ptone in #4739
• docs: distinguish deliverables, files and durability in glossary by @ptone in #4744
• artifacts: the grant ladder, and the review-only grant path removed (ptone#5145, part 3) by @ptone in #4745
• scion/si5-d375-land by @ptone in #4740
• hub: answer a multi-decision choice prompt as one set by @ptone in #4743
• a2a-bridge: read an agent's reply from the caller's own conversation by @ptone in #4746
• conduit: compare the user's session generation on session and stream re-check by @ptone in #4752
• Agent-written user secrets wait for owner approval by @ptone in #4747
• Limits, expiry, audit events, notifications and reveal for pending user secrets by @ptone in #4751
• Web UI for approving pending user secrets by @ptone in #4754
• fix(maintenance): take the pre-update database snapshot on its own connection by @ptone in #4748
• fix(hub): deliver no hub notices to an agent while it is held by @ptone in #4749
• fix(hub): log each request once in the combined hub and web server by @ptone in #4750
• a2a-bridge: read a federated user's reply from the user's own conversation by @ptone in #4753
• chore: update LATEST.json for nightly-20261111 by @github-actions[bot] in #4756
• a2a-bridge: end-to-end test of project visitors across two hubs by @ptone in #4755
• build(deps): bump @vitest/mocker and vitest in /web by @dependabot[bot] in #3960
• build(deps): bump vite from 8.1.4 to 8.3.4 in /docs-site by @dependabot[bot] in #3906
• build(deps): bump dompurify from 3.4.16 to 3.4.17 in /web by @dependabot[bot] in #4051
• build(deps-dev): bump happy-dom from 20.10.6 to 21.0.4 in /web by @dependabot[bot] in #4129
• build(deps): bump undici from 8.10.2 to 8.12.3 in /docs-site by @dependabot[bot] in #4130
• build(deps-dev): bump vite from 7.3.2 to 7.3.8 in /web by @dependabot[bot] in #3959
• build(deps): bump github.com/go-chi/chi/v5 from 5.3.1 to 5.4.0 in /extras/scion-teams by @dependabot[bot] in #4131
• build(deps): bump postcss-selector-parser from 6.1.4 to 6.1.5 in /docs-site by @dependabot[bot] in #4202
• build(deps): bump github.com/go-jose/go-jose/v4 from 4.1.4 to 4.1.6 in /extras/scion-telegram by @dependabot[bot] in #4260
• build(deps): bump astro from 7.3.2 to 7.4.10 in /docs-site by @dependabot[bot] in #4052
• agent/tmuxdeliver: shared tmux delivery steps, sanitiser and readiness wait by @ptone in #4724
• scion/si5-runtime-target-missing-land by @ptone in #4675
• runtime: keep the runtime's start command on Kubernetes, as on Docker
  by @ptone in #4695
• runtime/k8s: check that NFS volumes are usable before the agent starts by @ptone in #4647
• changelog: daily entry 2026-11-10 by @ptone in #4757
• web: keep chat palette shortcut tests on the manual visibility walk by @ptone in #4759
• docs: reword project log line that tripped the single-node-vm artifact guard by @ptone in #4758
• docs: update documentation for 2026-11-10 changelog by @ptone in #4760
• runtime: keep secret env values out of podman's argv by @stevegeek in #4673
• pat/2143-p4-orphans by @ptone in #4761

Full Changelog: v0.3.0-preview.7...v0.4.0-preview.1