0.6.0-rc.1 (REJECTED: wrong source)

REJECTED. DO NOT DEPLOY. This candidate was built from the wrong source SHA because the reusable image workflow ignored the requested release ref. It was never deployed. The workflow was fixed in PR #167; use 0.6.0-rc.2 instead.

data-olympus 0.6.0

New features

• MCP catalog discovery is clearer. Eight tool definitions now describe their
  behavior, parameters, side effects, and when to use a related tool instead,
  giving registries and agents more useful guidance without changing the API.
• The Glama sandbox now starts with the bundled example corpus, publishes
  related server metadata, and documents the maintenance checks used to keep
  the catalog profile complete.

Fixed

• Search, document reads, lists, outlines, onboarding status, and cleanup
  planning now handle an empty or incomplete SQLite index without exposing raw
  database errors. They return safe empty results until the index is ready.
• The transitive MCP SDK was updated to 1.28.1, closing the WebSocket transport
  advisory tracked as GHSA-vj7q-gjh5-988w. Data Olympus uses Streamable HTTP,
  but the patched dependency removes the vulnerable code from the lock.
• The optional benchmark stack now resolves torch 2.13.0, closing
  GHSA-rrmf-rvhw-rf47 in torch.jit.script. Production embeddings do not use
  torch, and the benchmark integration remains compatible with
  sentence-transformers.