v0.7.0

0.7.0 (2026-10-04)

Features

• add AIMAAS threshold sync and Product eligibility recalculation (#770) (5b1222d)
• add automatic Ticket reference ingestion (#754) (477a0b7)
• add CVE fetcher per-CVE finalization and the default CVE catch-up (#801) (1a9329f)
• add CVE fetcher registry, source status, and catch-up task (#760) (342a232)
• add CVE list, CVE detail, and CVE source listing endpoints (#752) (6272db6)
• add CVE refetch endpoint and create/associate freshness refresh (#804) (e88f462)
• add on-demand CVE fetch publication and the fetch_single_cve task (#803) (f3b8f5c)
• add post-ingest CVE package resolution (#796) (97419b6)
• add source-neutral CVE upsert with Ticket composition (#759) (3c2b79c)
• add the AIMAAS Product lifecycle synchronization fetcher (#769) (c457503)
• add the lifecycle transition evaluator and reconciliation (#771) (01f91c4)
• add the maintainer workbench queries and endpoints (#776) (c9ee9e4)
• add the package addition endpoint and Product catalog backfill (#795) (03e9a10)
• add the package addition orchestration (#792) (5889754)
• add the package-record creation boundary (#777) (142e1cd), closes #774
• add the Product catalog list query and endpoint (#767) (5f2abd7)
• add the SMELT maintained-package client (#788) (b007667)
• add the SMELT package maintainership client (#778) (d637811)
• add the SMELT Product catalog synchronization fetcher (#768) (7ad3069)
• add Ticket convergence publication, drains, and operator rerun (#794) (6c5fcd4)
• add trusted-external CVSS batch and CVE-rejection boundary (#756) (288d446), closes #749

Bug Fixes

• reject NUL characters in consumer-supplied API input (#791) (c6869c7)
• reject NUL characters in persisted external strings (#790) (2c1696b)