0.7.0

What's Changed

• test(server): share CALL_DEADLINE via path include by @plusky in #293
• fix(server): quote upstream error text on log lines by @plusky in #294
• build: fat LTO and one codegen unit for release by @plusky in #295
• ci: prune rust-cache generations and skip MSRV target/ by @plusky in #296
• test: pin the refused-address helper copies and drop the dead arm by @plusky in #297
• fix(stdio): classify a pre-initialize stdin I/O error as failed by @plusky in #298
• fix(audit): bounds-check the export record slice by @plusky in #300
• ci: print live mutants counts instead of rotting numbers by @plusky in #299
• ci: raise the mutants timeout floor past a 4-vCPU wiremock hang by @plusky in #302
• docs(core): say the search chunk clamp is overrun-only by @plusky in #301
• ci(release): attest container image provenance by @plusky in #305
• docs(audit): pin rmcp pre-dispatch refusals as unrecorded by @plusky in #306
• ci(release): embed cargo-auditable data in shipped binaries by @plusky in #307
• test(core): instruction-count benches for classify and I14 scrub by @plusky in #308
• build(deps): bump crate-ci/typos from 1.50.0 to 1.50.1 in the actions-minor-patch group by @dependabot[bot] in #304
• build(deps): adopt rmcp 3.2.0 handshake-is-legacy by @plusky in #309
• chore: ignore local graphify-out/ by @plusky in #310
• ci: exclude three unreachable serve_failure mutants by @plusky in #311
• build(deps): bump rustls to 0.23.45 for RUSTSEC-2026-0285 by @plusky in #316
• build(deps): bump the actions-minor-patch group with 2 updates by @dependabot[bot] in #314
• build(deps): bump distroless/static-debian13 from 1c2c046 to e2e927e by @dependabot[bot] in #312
• build(deps): adopt rmcp 3.4.0 by @plusky in #321
• build(deps): bump the cargo-minor-patch group across 1 directory with 2 updates by @dependabot[bot] in #322
• ci(release): publish pre-release tags as GitHub pre-releases by @plusky in #334
• fix(stdio): keep a serve-loop panic payload off the exit line by @plusky in #331
• fix(core): refuse bug field names a path segment cannot carry by @plusky in #332
• fix(server): refuse unparsable allowed hosts before startup effects by @plusky in #333
• build(deps): bump the cargo-minor-patch group with 3 updates by @dependabot[bot] in #335
• build(deps): bump the actions-minor-patch group with 5 updates by @dependabot[bot] in #336
• fix(core): judge create requests as Bugzilla will file them by @plusky in #342
• build(deps): bump the actions-minor-patch group with 3 updates by @dependabot[bot] in #345
• build: bump the pinned toolchain to 1.98.1 by @plusky in #347
• build(deps): bump rmcp to 3.4.1 and thiserror to 2.0.21 by @plusky in #348
• build(deps): adopt rmcp 3.5.0 by @plusky in #350
• fix(server): stop forwarding Bugzilla's error text from write tools by @plusky in #352
• fix(core): scrub bug id custom fields out of served bugs by @plusky in #353
• fix: scrub bug ids out of write-tool responses by @plusky in #354
• fix(core): drop non-string see_also entries in scrub by @plusky in #355
• fix(server): refuse a fileless audit sink with no exporter by @plusky in #356
• fix(core): refuse all-digit bug field names before any request by @plusky in #357
• fix(server): refuse self-dependency and self-duplicate before PUT by @plusky in #358
• fix(server): drop BMO comment_count from served bug bodies by @plusky in #360
• fix(server): keep Bugzilla error text out of read-tool results by @plusky in #359
• fix(server): gate quicksearch predicates before any request by @plusky in #361
• fix(server): parse the audit config before the preflight and probe by @plusky in #362
• fix(audit): record upstream failures as error with bugzilla code by @plusky in #363
• fix(server): bound OTLP batches by encoded bytes, count 413 delivered by @plusky in #364
• fix(server): make audit failing lock-free with atomic mirror by @plusky in #365
• feat(server): watch bugs_quicksearch with changed_since filter by @plusky in #366
• ci: name exact release in four action-pin comments by @plusky in #367
• fix(server): demote version-fallback line from warn to info by @plusky in #368
• chore(release): bump version to 0.7.0 by @plusky in #370
• docs(policy): steer create rules to allowlists under collation limits by @plusky in #369
• fix(server): record stdio calls abandoned mid-dispatch by @plusky in #371
• ci(release): attest tag digest and platform children by @plusky in #372
• docs: add CI, crates.io, docs.rs and license badges by @plusky in #376
• build(deps): bump the actions-minor-patch group across 1 directory with 3 updates by @dependabot[bot] in #375
• build(deps): adopt rmcp 3.5.1 and tokio 1.53.2 by @plusky in #377
• fix(audit): quote the sink-failure error on the diagnostics line by @plusky in #378
• test(core): kill the guard's two mutation survivors by @plusky in #379
• test(server): pin the misc survivor cluster by @plusky in #380
• test(server): pin the abandonment machinery by @plusky in #381
• test(server): pin the quicksearch gate against mutant survivors by @plusky in #382
• test(server): anchor qs helper shapes and redundant skips by @plusky in #383
• docs(design): record the timing-only mutant dispositions by @plusky in #384
• test(server): pin the audit sink survivors by @plusky in #385
• ci(mutants): cover server.rs on twelve shards by @plusky in #386
• ci(mutants): cover audit.rs on the twelve shards by @plusky in #387
• test(server): pin the remaining exercise-run survivors by @plusky in #388
• ci(mutants): exclude the proven-equivalent mutants by @plusky in #389
• test(server): pin the otel shutdown-tail byte splits by @plusky in #390
• test(server): pin nine scattered otel export kills by @plusky in #391
• test(server): pin otel wall clock and loss-counter visibility by @plusky in #392
• ci(mutants): exclude the proven-equivalent otel mutants by @plusky in #393
• test(core): pin client-policy survivors against mutation by @plusky in #394
• ci(mutants): exclude the proven-equivalent glob mutant by @plusky in #395
• test(config): pin typo-port refusal and key-file permission warn by @plusky in #397
• test(auth): pin auth emptiness, refusal counts, and session behavior by @plusky in #398
• ci(mutants): widen Saturday scope to full workspace by @plusky in #399
• ci(automerge): auto-merge green Dependabot minor/patch bumps by @plusky in #402
• build(deps): bump the cargo-minor-patch group across 1 directory with 3 updates by @dependabot[bot] in #400
• build(deps): bump the actions-minor-patch group across 1 directory with 2 updates by @dependabot[bot] in #401
• build(deps): bump rustls to 0.23.46 by @plusky in #404
• build(deps): bump rustls-webpki, webpki-root-certs and tokio for advisories by @plusky in #411
• build: bump the pinned toolchain to 1.99.1 by @plusky in #412
• build(deps): adopt rmcp 3.7.0 by @plusky in #413
• build(deps): bump distroless/static-debian13 from e2e927e to 25ac8f0 by @dependabot[bot] in #407
• build(deps): bump the actions-minor-patch group across 1 directory with 5 updates by @dependabot[bot] in #410
• ci(mutants): exclude the hand-reproduced cursor hangs by @plusky in #416
• build(deps): adopt rmcp 3.8.0 by @plusky in #417

Full Changelog: 0.6.0...0.7.0