v1.0.0-beta.7

What's Changed

• fix: install grype with checksum verification for container scan reports by @coopernetes in #180
• fix: bump grype to 0.111.1 and fix checksum verification in container scan by @coopernetes in #183
• fix: gate release tags behind container scan, add retag workflow by @coopernetes in #186
• fix: make container scan blocking on main to gate tag pushes by @coopernetes in #187
• refactor: use provider name as canonical DB foreign key by @coopernetes in #190
• refactor: provider registry name cleanup + Optional return types by @coopernetes in #191
• fix: bump base images, overhaul container scan and release workflow by @coopernetes in #195
• fix: committer email policy and malformed permission deny URL (#181, #182) by @coopernetes in #196
• fix: record blocked fetches and enforce URL rules on store-and-forward path by @coopernetes in #198
• fix: secret scanning broken in Docker — missing git binary + exit code ambiguity by @coopernetes in #202
• chore(deps): bundle open Renovate PRs and group future updates by @coopernetes in #207
• feat: bundle gitleaks for all supported architectures by @coopernetes in #209
• chore(deps): update frontend npm dependencies by @renovate[bot] in #210
• fix(deps): update java dependencies by @renovate[bot] in #211
• chore(deps): bump github/codeql-action from 4.35.2 to 4.35.3 by @dependabot[bot] in #212
• fix: resolve react-hooks/set-state-in-effect lint errors from v7 upgrade by @coopernetes in #213
• feat: require explicit admin override for self-approval; fix :run PID file by @coopernetes in #216
• fix: mark push CANCELED when client disconnects mid-push by @coopernetes in #217
• feat: reject conflicting permission entries at load/save time; document GLOB semantics by @coopernetes in #218
• feat: upgrade to Java 25 (Temurin LTS) by @coopernetes in #222
• fix: promote lettuce-core from compileOnly to implementation by @coopernetes in #223
• fix: use multi-arch index digest for eclipse-temurin:25-jre runtime stage by @coopernetes in #225
• feat: unified (target, matchType, value) match shape for rules and permissions by @coopernetes in #227
• chore: bump version to 1.0.0-beta.7 by @coopernetes in #228

New Contributors

• @renovate[bot] made their first contribution in #210

Full Changelog: v1.0.0-beta.6...v1.0.0-beta.7