Release v0.7.0

Curated summary: CHANGELOG.md

What's Changed

• build(docker): optimizations and python-3.12 migration complete on pre-built images by @remsky in #491 and #482
  • Image sizes (compressed, amd64):
    • CPU: 1.66 -> 1.56 GB
    • GPU: 6.81 -> 4.68 GB (-31%)
    • GPU cu128: 8.11 -> 5.23 GB (-36%)
    • ROCm: 13.08 -> 13.36 GB (model now bakes at build, unchanged base)
• fix(download_model): release artifact checksums, temp-dir avoids existing model clobber (#301)
• fix(paths): file lookups reject escapes outside voice/model/web dirs (../, absolute); in-dir symlinks resolve
• fix(normalizer): version numbers read digit-by-digit, ranges keep hyphens, decimal regex hardened against digit floods (#493)
• fix: prevent ReDoS in text normalizer (URL/email/acronym patterns) by @Fieldnote-Echo in #489
• fix(normalizer): expand wh-word 're contractions espeak voices as -ray by @radzrader in #488
• fix(dependency graph, normalizer): bump and pin deps, harden _find_file and normalizer by @remsky in #492
• fix(normalizer): expand apostrophe-less "'re" contractions by @radzrader in #493

New Contributors

• @Fieldnote-Echo made their first contribution in #489
• @radzrader made their first contribution in #488

Full Changelog: v0.6.0...v0.7.0