agent-bom v0.97.0
What's Changed
- refactor(api): consolidate auth resolution into one resolve_principal pipeline (#4274) by @msaad00 in #4290
- fix(auth): boot-time non-superuser DB preflight; guard the audit fork-guard index by @msaad00 in #4292
- fix(audit): select the audit chain head by chain link, not timestamp by @msaad00 in #4293
- feat(graph): random-access reads for the graph build workspace by @msaad00 in #4295
- chore(deps): consolidate weekly dependency and registry updates by @msaad00 in #4301
- fix(output): harden evidence exports and graph rendering by @msaad00 in #4302
- fix(runtime): close matching and Postgres correctness gaps by @msaad00 in #4303
- feat(graph)+fix(export): store-backed UnifiedGraph (unwired) and unified-type parquet/lake export by @msaad00 in #4308
- fix(security): auth posture single-source + OIDC-invalid decision; legacy audit-checkpoint backfill by @msaad00 in #4309
- chore(release): prepare 0.97.0 by @msaad00 in #4310
Full Changelog: v0.96.4...v0.97.0