chore(main): release 1.0.0

[github-actions]

🤖 I have created a release beep boop

1.0.0 (2026-06-14)

Features

• CP-102,CP-103: invitation accept/decline + GitHub commit sync (25f8ece)
• CP-102,CP-103: invitation accept/decline + GitHub commit sync (c49fca4)
• CP-104: add GetProjectDashboard query + ProjectTask CRUD (7e3eb87)
• CP-105,CP-106: messaging domain — Conversation/Message entities, SignalR MessagingHub, and full command/query slice (52e227f)
• CP-105,CP-106: messaging domain — Conversation/Message entities… (3081e80)
• CP-107, CP-108: freelancer matching endpoint + AI project summary (cf74e3f)
• CP-107, CP-108: freelancer matching endpoint + AI project summary (b015d73)
• CP-120: add Nginx Ingress and HPA manifests for frontend/backend (7dff8c9)
• CP-121: add Terraform AWS modules + staging/production envs (ecbc8c2)
• CP-122,CP-123: add Prometheus scrape config, Grafana dashboards, and alert rules (78775b0)
• CP-122,CP-123: add Prometheus scrape config, Grafana dashboards… (c1055d4)
• CP-126, CP-127: wire onboarding wizard and discovery feed to ba… (d834488)
• CP-126, CP-127: wire onboarding wizard and discovery feed to backend APIs (239fa9b)
• CP-131: implement RabbitMQ consumer, publisher and IEventPublisher abstraction (60eb152)
• CP-131: implements RabbitMQ consumer, publisher and IEventPublisher abstraction. (85609f5)
• CP-132: implement Leave/Archive Project (26d9167)
• CP-132: implement Leave/Archive Project (115c57f)
• CP-140: add platform analytics dashboard with admin endpoint an… (77c97af)
• CP-140: add platform analytics dashboard with admin endpoint and SVG trend charts (f3cba83)
• CP-141: standup analytics endpoint + widget + CSV export (d205c83)
• CP-144,CP-145: add staging kustomize overlay and staging auto-d… (7a6273f)
• CP-144,CP-145: add staging kustomize overlay and staging auto-deploy CD pipeline (fcc5e6f)
• CP-146,CP-147: production deploy gate + mobile responsive polish (ef769ac)
• CP-148: complete WCAG 2.1 AA accessibility audit (focus states, contrast, a11y labels, keyboard nav, Lighthouse >=90) (39ef35a)
• CP-148: complete WCAG 2.1 AA accessibility audit (focus states,… (81eed92)
• CP-149,CP-150: add Lighthouse perf audit + k6 load test script (48089a9)
• CP-149,CP-150: add Lighthouse perf audit + k6 load test script (c5a60bd)
• CP-207: add Terraform apply runbook and CI validation workflow (f36f694)
• CP-61, CP-79: responsive landing page and direction-aware wizar… (a67647a)
• CP-61, CP-79: responsive landing page and direction-aware wizard animations (feea593)
• CP-63,CP-64: add mocked Discovery, Projects pages + app navigat… (907c526)
• CP-63,CP-64: add mocked Discovery, Projects pages + app navigation + docs sync (ee3f6e9)
• CP-65: add mocked Messaging UI + docs sync (d8fab1f)
• CP-65: add mocked Messaging UI + docs sync (f96113b)
• CP-66: build mocked standup UI (f369580)
• CP-66: build mocked standup UI (957cbca)
• CP-67: add mocked Freelancer and Enterprise Profile pages (b538f71)
• CP-67: add mocked Freelancer and Enterprise Profile pages (d22c489)
• CP-67: wire profile avatar link and polish own-profile view (bcbacb0)
• CP-67: wire profile avatar link and polish own-profile view (a50f0c0)
• CP-76, CP-77: complete GitHub SSO mock flow and polish AuthPage… (f016636)
• CP-76, CP-77: complete GitHub SSO mock flow and polish AuthPageShell (d78824c)
• CP-78: add onboarding confirmation step and project docs (7d83ec4)
• CP-82: wire Keycloak JWT Bearer auth + RBAC policies (5309fb1)
• CP-82: wire Keycloak JWT Bearer auth + RBAC policies (9e5a8b2)
• CP-83: add Serilog structured logging pipeline (b81c361)
• CP-83: add Serilog structured logging pipeline (278cc6e)
• CP-84: add MediatR pipeline with validation and logging behaviors (fd501b7)
• CP-84: add MediatR pipeline with validation and logging behaviors (532a69c)
• CP-85,CP-86: auth domain + onboarding skills/embeddings (162ebbe)
• CP-85,CP-86: auth domain + onboarding skills/embeddings (060b5bc)
• CP-87: standup domain (entity, submit command, paged feed query) (b9994c6)
• CP-87: standup domain (entity, submit command, paged feed query) (3a484ed)
• CP-94: standup reminder notification service (e24de12)
• deploy: Phase D - bake frontend NEXT_PUBLIC API/Keycloak URLs + prod redirect URIs (238400b)
• deploy: Phase E auto-deploy to project-01 via helm on green CI (bd006d2)
• devops: bootstrap-ubuntu script hardened with ssh, users, systemd, cron, certbot (28ad60b)
• devops: DO-8 minimal live Terraform sandbox (AWS S3 bucket) (cba04f5)
• devops: project-01 helm deploy + in-cluster data tier (GitHub Models, prod migration job, CI image rename, auth guards) (a6fe3ef)
• files: implement S3-compatible file upload & signed download URLs (2073d2c)
• files: implement S3-compatible file upload & signed download URLs (4fb28ff)
• observability: deploy Prometheus/Grafana, ELK, Uptime Kuma, AIOps to project-01 (5f1f92d)
• prod hardening, security + bug fixes, runtime config, summary-s… (7e07722)
• prod hardening, security + bug fixes, runtime config, summary-status, cleanup (3e9142e)
• security: phase 2 hardening (httpOnly cookies, URL sanitization, CSP, SSO wiring) + fix runtime apiBaseUrl localhost fallback (f31781e)
• security: phase 2 hardening (httpOnly cookies, URL sanitization… (204256a)
• sprint-5: close M4/M5 deliverables (AIOps demo, postmortem, ERD, n8n, e2e fixtures, ProfileMenu logout) + fix 8 RBAC handlers (4a6a598)
• summary: ProjectSummary status pipeline, job enqueuer, orphan cleanup, GitHub webhook secret, pgvector HNSW index (3e9142e)
• synchronous commit sync (member-email filter) + synchronous AI … (1b46d6c)
• synchronous commit sync (member-email filter) + synchronous AI summary (16428cd)
• web: distinct admin subdomain (login then dashboard) via middleware (2a73ca7)
• wire AuthGuard/AdminGuard + fix CI blockers (b644549)
• wire AuthGuard/AdminGuard + fix CI blockers (0bd4de3)
• wire SignalR messaging UI and add admin user management endpoints (a68121d)
• wire SignalR messaging UI and add admin user management endpoints (e119bcb)

Bug Fixes

• admin user search/pagination, file delete + txt/pptx, matching & task counts (4008a2e)
• app: batch-2 — SSO roles, remove-member, notifications, idle session, admin seeder (+CI/lint) (5de2cfb)
• app: batch-2 prod fixes — SSO roles, remove-member, notifications, idle session, admin seeder + CI/lint (db3bbbf)
• app: resolve 9 prod issues + add project member removal (e380e22)
• app: resolve 9 prod issues + project member removal (8e7db85)
• avatar: serve avatars via API proxy (uploaded images now display) (9b0f0cd)
• avatar: serve avatars via API proxy so uploaded images display (7228f0b)
• ci: drop gitleaks-action (org license required) (3421436)
• ci: jest config to JS (drop ts-node) + trivy-action v0.36.0 tag (4081672)
• ci: non-fatal Trivy SARIF upload (no GHAS) + version.txt for release-please (c5a8313)
• ci: remove duplicate pages outside (protected) and bump Trivy action (28cbbbd)
• ci: stabilize CI and fix notification & project sync issues (c27b985)
• ci: stabilize CI and fix notification & project sync issues (c0b8250)
• ci: use v-prefixed Trivy tag (v0.36.0) (0abacb2)
• dedupe app/* pages, fix Trivy/Gitleaks, close FE-2/FE-5 gaps (1bbf640)
• deploy: drop dev frontendUrl from realm so KC_HOSTNAME drives issuer (fixes token iss + SSO broker URL) (3639fc9)
• deploy: keycloak health probes use /auth prefix (KC_HTTP_RELATIVE_PATH) (1fda0c3)
• deploy: namespaced Lets Encrypt Issuer + point ingress at it (no usable ClusterIssuer) (393da4f)
• deploy: set Keycloak AdminClientId/TokenClientId=loopless-api (were empty -> admin token 401 -> register/login 500) (dde2849)
• devops: drop dangling secrets.yaml refs from legacy kustomize overlays (0088b6e)
• ExecuteDeleteAsync ambiguity, GitHubSyncJob summary enqueue, migration [Migration] attributes (3e9142e)
• fe: close FE-2/FE-5 gaps + delete remaining app/* duplicates (2de2aa6)
• frontend: lazy-load @next/bundle-analyzer so prod next start works (22717fd)
• frontend: rename next.config.ts to next.config.mjs for Docker runtime (af1c81a)
• frontend: replace setState-in-effect with render-time derived state (582c017)
• observability: correct metric names, Loki sink, Kuma notifications, cAdvisor (96c9d6a)
• remove postgres exporters postgres dependency (e705de0)
• resolve apiBaseUrl per-request so the OAuth callback hits the pr… (3df9deb)
• resolve apiBaseUrl per-request so the OAuth callback hits the prod API, not localhost (c65ee44)
• security: phase 1 hardening — avatar IDOR/upload, log redaction, forwarded headers, keycloak brute-force + password policy (6cd3d72)
• security: phase 1 hardening — avatar IDOR/upload, log redaction,… (e35e3f2)
• web: admin role not recognized (PascalCase) — normalize in AdminGuard (078953c)
• web: bind dark mode to theme toggle + light-mode navbar/button/footer polish (20fd225)
• web: enterprise profile link + add lean hotfix-deploy workflow (b741d51)
• web: enterprise profile link + hotfix-deploy workflow (auto-CD via default=main) (7e9eaa4)
• web: normalize role in AdminGuard + getting-started checklist (ae3f7d4)

---

This PR was generated with Release Please. See documentation.