v0.0.7-beta

What's Changed

• fix: always surface login code when SHOW_LOGIN_CODE_IN_RESPONSE is set by @trottomv in #105
• feat: add structured JSON logging by @trottomv in #106
• docs: clarify SHOW_LOGIN_CODE_IN_RESPONSE works regardless of SMTP by @trottomv in #109
• feat: add OpenTelemetry observability with OTel Collector and Jaeger (#79) by @trottomv in #110
• feat: add product-agnostic error tracking (#84) by @trottomv in #111
• feat: instrument Celery tasks with OpenTelemetry (#112) by @trottomv in #113
• feat: add site favicon by @trottomv in #114
• feat: automate PostgreSQL backup and restore by @trottomv in #115
• feat: replace inline SVG icons with Lucide icon sprite by @trottomv in #116
• chore: bump version to 0.0.7-beta by @trottomv in #117

Full Changelog: v0.0.6-beta...v0.0.7-beta

v0.0.6-beta

What's Changed

• feat: centralize project version in app/VERSION.md by @trottomv in #76
• fix: make hatchling read version from VERSION.md and harden docs CI by @trottomv in #77
• feat: add app healthcheck with liveness and readiness probes by @trottomv in #99
• feat: self-host CDN assets and drop unsafe-inline from CSP (#90) by @trottomv in #100
• feat: add security headers to responses (#83) by @trottomv in #101
• feat: migrate to Alpine CSP build to drop unsafe-eval (#83) by @trottomv in #102
• feat: add proxy-edge rate limiting for login and API by @trottomv in #103
• chore: bump version to 0.0.6-beta by @trottomv in #104

Full Changelog: v0.0.5-beta...v0.0.6-beta

v0.0.5-beta

What's Changed

• fix: add GHCR package description via OCI annotations by @trottomv in #75

Full Changelog: v0.0.4-beta...v0.0.5-beta

v0.0.4-beta

What's Changed

• chore: enable stricter ruff rules and comply with them by @trottomv in #74

Full Changelog: v0.0.3-beta...v0.0.4-beta

v0.0.3-beta

What's Changed

• feat: use GHCR image in remote stack instead of building by @trottomv in #50
• Remove placeholder text from email input field by @trottomv in #52
• feat: surface login code via dedicated env flag instead of APP_ENV by @trottomv in #53
• docs: add step-by-step deployment guide and expand setup docs by @trottomv in #54
• docs: add CI/CD integration guide for SBOM upload by @trottomv in #55
• feat: generated project slug + upload SBOM by slug by @trottomv in #56
• test: standalone local test compose (docker-compose.test.yml) by @trottomv in #57
• fix: handle slug collision in UI project rename by @trottomv in #58
• chore: adopt uv for requirements compilation and installation by @trottomv in #59
• chore: upgrade dependencies by @trottomv in #60
• refactor: replace _project_to_dict with ProjectResponse by @trottomv in #61
• refactor: rename models/user.py to models/auth.py by @trottomv in #62
• feat: inherit BaseModel in auth/service/snapshot models by @trottomv in #63
• chore: remove dead logo partial and strip svg metadata by @trottomv in #64
• feat: schedule check_alerts in the Celery beat by @trottomv in #65
• docs: update project roadmap in README by @trottomv in #66
• feat: episode-scoped notification dedup by @trottomv in #67
• feat: centralized API response schemas and extend test api coverage by @trottomv in #68
• feat: back enum-typed model columns with ValueLabelEnum choices by @trottomv in #69
• refactor: semantic loop variables and enum usage in tests by @trottomv in #70
• Fix README roadmap section by @trottomv in #71
• test: reach 100% test coverage and enforce it via fail-under by @trottomv in #72
• chore: bump version to 0.0.3-beta by @trottomv in #73

Full Changelog: v0.0.2-beta...v0.0.3-beta

v0.0.2-beta

What's Changed

• fix: run celery worker and scheduler as non-root appuser by @trottomv in #24
• docs: document Caddy + Coraza WAF proxy service by @trottomv in #25
• ci: add GitHub Actions workflow for docs deployment to GitHub Pages by @trottomv in #26
• fix: GitHub Actions workflow for docs deployment to GitHub Pages by @trottomv in #29
• fix: remove --rebase flag from mike deploy (not supported) by @trottomv in #30
• fix: use distinct version and alias for mike deploy on main by @trottomv in #31
• fix: delete previous latest version before mike redeploy by @trottomv in #32
• fix: remove stale docs/versions.json conflicting with mike-managed versions by @trottomv in #33
• refactor: remove unnecessary noqa suppressions by @trottomv in #27
• fix: rename UploadSBOM to upload_sbom, add alias for gRPC dispatch by @trottomv in #34
• feat: add language and PR policy to AGENTS.md by @trottomv in #35
• chore: migrate frontend build tooling from node/npm to bun by @trottomv in #36
• feat: scheduled vulnerability rescan of latest SBOMs by @trottomv in #37
• chore: make compose image pull policy configurable by @trottomv in #38
• security: remove shell from remote image via python entrypoint by @trottomv in #39
• feat: add manual refresh CTA for snapshot metrics by @trottomv in #40
• feat: show affected library and fixed version in vulnerabilities lists by @trottomv in #41
• docs: add per-recipe descriptions to justfile by @trottomv in #43
• ci: build and push app image to GHCR on release by @trottomv in #42
• chore: bump version to 0.0.2-beta by @trottomv in #44
• ci: fix sigstore/cosign-installer version to v4.1.2 by @trottomv in #45
• ci: deploy docs on release publish instead of tag push by @trottomv in #47
• fix: create protos/generated dir before running protoc in Docker build by @trottomv in #46
• fix: remove deprecated cosign --upload-bundle flag by @trottomv in #48

Full Changelog: v0.0.1-beta...v0.0.2-beta

v0.0.1-beta

What's Changed

• fix: update logo gradient to match CTA gradient (indigo-500 → purple-… by @trottomv in #2
• feat: pagination and lazy-load for all list views by @trottomv in #1
• refactor: split docker-compose, optimize Dockerfile, upgrade PG to 18 by @trottomv in #3
• login: replace placeholder icon with SVG logo by @trottomv in #4
• feat: add Caddy + Coraza WAF proxy for remote stack by @trottomv in #5
• fix: timezone-aware datetime rendering with configurable display TZ by @trottomv in #6
• feat: delete services, collapsible SBOM history, UI polish by @trottomv in #7
• Enhance/requirements and audit by @trottomv in #8
• docs: add logo to README by @trottomv in #9
• Feature/mkdocs by @trottomv in #10
• docs: user-oriented README and docs, deduplicate CONTRIBUTING via pym… by @trottomv in #11
• Enhance/beta version by @trottomv in #12
• docs: add dashboard and project-detail screenshots to docs by @trottomv in #13
• docs: versioned documentation with mike by @trottomv in #14
• fix(auth): prevent unauthenticated admin account takeover via login (#15) by @WaYdotNET in #18
• fix(config): harden session cookie signing key and Secure flag (#16) by @WaYdotNET in #19
• fix(auth): enforce API key expiration in validate_api_key (#17) by @WaYdotNET in #20
• ci: run tests on pull requests (GitHub Actions) by @WaYdotNET in #21
• ci: add pre-commit quality gate workflow by @trottomv in #22
• docs: add Claude Code guidelines pointing to AGENTS.md by @trottomv in #23

New Contributors

• @trottomv made their first contribution in #2
• @WaYdotNET made their first contribution in #18

Full Changelog: https://github.com/trottomv/argus-sbomguard/commits/v0.0.1-beta