• v1.0.4 d820c22d7d

    Ghost released this 2026-04-15 14:39:57 +00:00 | 214 commits to main since this release

    Post-audit cleanup release. Zero feature changes, but the repository
    is realigned with reality on every axis:

    • 220 MB of debris removed from the working tree (binaries, reports,
      session docs, stale scripts)
    • 174 session markdown files archived (not deleted) under
      docs/archive/{frontend,backend}-sessions-2026 and v0-history
    • CLAUDE.md, README.md, k8s disaster-recovery runbooks rewritten
      to describe the actual repo layout and operational state
    • TODO(HIGH-007) GDPR hard-delete closed: Redis user:{id}:* SCAN
      cleanup + Elasticsearch DeleteByQuery on user/track/playlist
      docs, injected into the existing hard_delete_worker
    • Legacy backend-ci.yml workflow retired (moved to .disabled);
      consolidated Veza CI (ci.yml) now the sole Go quality gate,
      green for the first time in weeks
    • govulncheck resolved without allowlist by bumping x/image,
      quic-go, x/net and testcontainers-go (the latter removes
      containerd and docker/docker from the dep graph entirely)
    • Legacy v2-v3-types.ts renamed to domain.ts, Storybook CI kill
      documented, GeoIP deferred to v1.1.0 with justification
    • lint-staged bug fixed (ESLint no longer scans the entire
      workspace on every staged TypeScript file)

    Commits in this release: 7c9eece09..2268b06fc

    Full breakdown in CHANGELOG.md. Audit that generated this sprint
    is preserved at AUDIT_REPORT.md in the repo root.

    Downloads