chore(release): prepare v1.4.0

[domcyrus]

Release prep for v1.4.0. Stacked on #395 (now merged), so this diff is just the version bump + changelog.

Changes

• Binary → 1.4.0: Cargo.toml [package], rpm/rustnet.spec, Cargo.lock. The library crates (rustnet-core/-capture/-host) stay at 0.2.0 — this release is their first crates.io publish.
• CHANGELOG: turned [Unreleased] into the [1.4.0] entry. The previous draft only covered the TUI redesign + one fix; this fills in everything that actually landed this cycle:
  • Workspace split into four crates (refactor: split into Cargo workspace with dedicated crates #367) — the three libraries are now published to crates.io.
  • FTP DPI (feat(dpi): add FTP control-channel protocol detection and metadata extraction #266), DNS/mDNS/LLMNR response IPs (fix(dpi/dns): populate DnsInfo.response_ips from answer A/AAAA records (closes #297) #319/dpi(dns): extend response_ips to mDNS and LLMNR #333/feat(dpi): extend response_ips to mDNS and LLMNR (#333) #341), log identity banner (feat(log): emit program identity banner + module target on every line (closes #310) #320), Landlock v6 IPC scoping (feat(sandbox): best-effort Landlock with v6 IPC scoping #363), no_new_privs + cargo-deny (Always set PR_SET_NO_NEW_PRIVS on Linux and adopt cargo-deny #382), openSUSE OBS pipeline (feat(packaging): add openSUSE OBS release pipeline #356), connection-list scrollbar (feat(ui): scrollbar on the connection list when it overflows #365), direct-jump tab shortcuts (feat(ui): direct-jump tab shortcuts (1-5) and bracket cycle aliases #318).
  • Fixes: DLT_NULL header (fix(link_layer): strip DLT_NULL 4-byte family header before parsing #394), panic terminal restore (fix(ui): restore terminal on panic via chained panic hook #364), Landlock /sys (fix(sandbox): allow read access to /sys for interface stats under Landlock #370), filter backspace (fix: handle raw backspace chars in filter mode #335), eBPF error surfacing (Linux, still need root for eBPF although capabilities set #255/fix(ebpf): classify libbpf errors and surface them in the TUI (#255) #258), RPM packaging (fix(rpm): own directories the package creates #357–fix(rpm): require libcap-progs on openSUSE, not just recommend #360).
  • Performance: per-packet allocations + CoW snapshots (perf: cut per-packet allocations and snapshot CoW copies #380), Protocol::as_str() (perf(core): add Protocol::as_str(), drop per-row/per-filter to_string allocs #392), process_text borrow (perf(ui/connection_table): borrow process name in process_text, drop wasted clone #390), parser/sparkline allocs (perf(dpi): drop redundant lines().collect::<Vec<&str>>() in HTTP + SSH parsers #339/perf: drop clippy::redundant_clone calls in render path + sandbox init #345/perf(types): single-alloc sparkline getters via skip instead of double rev-collect #355).
  • i18n + install docs.
• Contributors section crediting this cycle's five new contributors: @0xghost42, @obchain, @iccccccccccccc, @whtis, @luojiyin1987 (plus @joshka's UI review).

Verification

./scripts/pre-release-check.sh 1.4.0 passes clean: version consistency, changelog entry + link, [Unreleased] empty, fmt/clippy/test, both crates/rustnet-core/assets/{oui.gz,services} validated against the Dockerfile, Docker image builds, and Cargo.lock up to date.

After merge

1. Run Test Platform Builds on main (all platforms).
2. cargo publish --dry-run for all four crates; confirm CRATES_IO_TOKEN has publish-new scope (the three libraries are brand new on crates.io).
3. Tag v1.4.0 → the release pipeline builds all platforms, publishes the four crates in dependency order, Docker, PPA/OBS/COPR/AUR/Homebrew/Chocolatey.

Note: the [1.4.0] date is set to 2026-06-16 — update it if the tag is cut on a different day.