chore(release): cut orb-v1.0.0

[github-actions]

Proposes cutting orb-v1.0.0 (a major release) from the current
stable release orb-v0.5.0.

Merging this PR tags orb-v1.0.0 and dispatches the image build/publish --
which still requires a release environment approval before anything reaches GHCR (see
.github/workflows/release-selfhost.yml). The daily beta channel is unaffected either way.

Image-relevant commits since the last stable release

• fix(selfhost): make Docker Compose secret files readable by the container (fix(selfhost): make Docker Compose secret files readable by the container #5124) (a416632)
• feat(analytics): surface org-wide slop-band calibration + add the dashboard card (feat(ui): slop-band calibration card on the analytics dashboard #2196) (feat(analytics): surface org-wide slop-band calibration + dashboard card (#2196) #5126) (f799c2c)
• feat(review): add finding acceptance rate calculation and related types (Maintainer analytics dashboard (gate precision, calibration, acceptance rate) #1967) (feat(review-stats): add finding acceptance-rate signal to the maintainer stats feed (#1967) #5127) (d1cb4e5)
• feat(ui): gate-outcome breakdown card (feat(ui): gate-outcome breakdown card (auto-merge / auto-close / hold) #2203) (feat(ui): gate-outcome breakdown card (#2203) #5098) (19fbd93)
• feat(analytics): add aggregate queue-health to the maintainer quality dashboard (feat(ui): queue-health trend card on the maintainer quality dashboard #2201) (feat(analytics): add aggregate queue-health to the maintainer quality dashboard (#2201) #5141) (1d4a6fd)
• feat(miner-governor): build a real production runSlopAssessment implementation (Build a real production runSlopAssessment implementation #5133) (feat(miner-governor): build a real production runSlopAssessment implementation (#5133) #5140) (e7d95a9)
• fix(review): guard contributor screenshot fetches (fix(review): guard contributor screenshot fetches #4976) (6c40d1e)
• fix(public-stats): redact sparse accuracy trend counts (fix(public-stats): redact sparse accuracy trend counts #4979) (c085724)
• feat(selfhost): add claude code token to native Docker secrets (feat(selfhost): add claude code token to native Docker secrets #5144) (af23119)
• fix(review): keep screenshots allowlist-bound (fix(review): keep screenshots allowlist-bound #4990) (db28d8f)
• fix(github): require repo stats allowlist (fix(github): require repo stats allowlist #4978) (b1ab5c2)
• fix(selfhost): remove Claude reviewer tools (fix(selfhost): remove Claude reviewer tools #5105) (ea78975)
• fix(chat): restrict grounding to public summaries (fix(chat): restrict grounding to public summaries #5106) (6dd59f2)
• fix(review): scope gittensor opt-in to installed repos (fix(review): scope gittensor opt-in to installed repos #5110) (810b203)
• fix(review): bound impact-map query cache retention (fix(review): bound impact-map query cache retention #4992) (1c99635)
• fix(review): avoid overlapping screenshot table extraction (fix(review): avoid overlapping screenshot table extraction #4993) (acb4f6c)
• fix(commands): authorize intent routing before AI classification (fix(commands): authorize intent routing before AI classification #5107) (3680301)
• fix(chat): redact private lane signals from Q&A (fix(chat): redact private lane signals from Q&A #5149) (b349784)
• fix(selfhost): validate ready retry settings (fix(selfhost): validate ready retry settings #5146) (0b8bc5d)
• fix(review): resync bot re-entry before skipping (fix(review): resync bot re-entry before skipping #5151) (dc7a19b)
• fix(review): enforce miner-scoped breakers (fix(review): enforce miner-scoped breakers #5209) (9fa67f5)
• fix(review): preserve per-repo issue cap when miner global cap is set to off (fix(review): preserve per-repo issue cap when miner global cap is set to off #5205) (352507c)
• fix(review): canonicalize calibration login lookup (fix(review): canonicalize calibration login lookup #5206) (0dcbf81)
• fix(agent): respect dry-run for tracker auto-apply (fix(agent): respect dry-run for tracker auto-apply #5207) (5f3ebf7)
• fix(review): keep recap cohorts private (fix(review): keep recap cohorts private #5204) (c772d74)
• fix(review): verify linked issue closure source (fix(review): verify linked issue closure source #5233) (5efa953)
• fix(observability): repo-scope + fix stale data on the Reviews & PRs dashboard (fix(observability): repo-scope + fix stale data on the Reviews & PRs dashboard #5234) (316296b)
• fix(selfhost): mount observability/backup scripts as directories, not single files (fix(selfhost): mount observability/backup scripts as directories, not single files #5238) (8cb5e74)
• fix(api): allow the gittensory-ui dev-server port in CORS (fix(api): allow the gittensory-ui dev-server port in CORS #5248) (e3523a1)
• fix(ai-usage): record embeddings + self-host vision, fix advisory-routed model attribution (fix(ai-usage): record embeddings + self-host vision, fix advisory-routed model attribution #5247) (a6d93c6)
• fix(orb): stop double-counting PRs already tracked by the own-ledger (fix(orb): stop double-counting PRs already tracked by the own-ledger #5257) (5b9e9e1)
• fix(selfhost): attribute embed/vision/advisory AI usage to a real provider (fix(selfhost): attribute embed/vision/advisory AI usage to a real provider #5259) (738c8ca)
• fix(orb): fix production outage caused by the anti-join query (hotfix(orb): fix production outage in /v1/public/stats caused by anti-join perf #5263) (864c52d)
• feat(ui): add analytics dashboard time-window selector (feat(ui): analytics dashboard time-window selector (#2199) #5268) (96e1557)
• chore(auth): remove the fully-deleted old GitHub App's dead vars/secrets (chore(auth): remove the fully-deleted old GitHub App's dead vars/secrets #5269) (d56f4ec)
• docs(settings): disclose that agentDryRun doesn't stop AI/LLM spend (docs(settings): disclose that agentDryRun doesn't stop AI/LLM spend #5296) (595855b)
• fix(review): generated contributor docs no longer overclaim requireLinkedIssue enforcement (fix(review): generated contributor docs no longer overclaim requireLinkedIssue enforcement #5300) (29cb3f3)
• feat(miner): generated env-var reference with CI drift check (Add a generated, CI-drift-checked env-var reference for gittensory-miner (npm run miner:env-reference) #5179) (feat(miner): generated env-var reference with CI drift check (#5179) #5295) (83944c4)
• docs(review): fix docs pages that describe checkRunMode/reviewCheckMode backwards (docs(review): fix docs pages that describe checkRunMode/reviewCheckMode backwards #5301) (6f05c31)
• fix(selfhost): recognize experimental: as a valid top-level manifest field (fix(selfhost): recognize experimental: as a valid top-level manifest field #5307) (acc99a8)
• feat(observability): register 26 missing metrics, add memory limits to 4 more services (feat(observability): register 26 missing metrics, add memory limits to 4 more services #5310) (395643d)
• docs(settings): document that publicSurface doesn't suppress either check-run (docs(settings): document that publicSurface doesn't suppress either check-run #5311) (62d7f22)
• docs(settings): clarify moderationGateMode gates only the shared violation tally (docs(settings): clarify moderationGateMode gates only the shared violation tally #5314) (cf58317)
• docs(settings): fix stale reviewEvasionProtection default claim, disclose always-on counter (docs(settings): fix stale reviewEvasionProtection default claim, disclose always-on counter #5315) (870d47f)
• docs(settings): document that autoLabelEnabled only gates the base context label (docs(settings): document that autoLabelEnabled only gates the base context label #5318) (6688156)
• docs(settings): cross-reference gateDryRun and agentDryRun (docs(settings): cross-reference gateDryRun and agentDryRun #5316) (23604df)
• fix(config): stop documenting the retired blockedPaths key as a live feature (fix(config): stop documenting the retired blockedPaths key as a live feature #5304) (329af5a)
• fix(ui): disclose the inert firstTimeContributorGrace dashboard toggle (fix(ui): disclose the inert firstTimeContributorGrace dashboard toggle #5321) (5f62463)
• feat(infra): wire loopover.ai as a live secondary domain (feat(infra): wire loopover.ai as a live secondary domain #5345) (b779f28)
• fix(config): warn on ambiguous gate.enabled without gate.checkMode (Fix gate.enabled/gate.checkMode ambiguity at the code level (root cause of the Orb Review Agent check-run incident) #5355) (fix(config): warn on ambiguous gate.enabled without gate.checkMode #5375) (af05e48)
• fix(review): stop generic_secret_assignment from auto-closing PRs (fix(review): stop generic_secret_assignment from auto-closing PRs #5370) (5855f8a)
• fix(github): count reviewCheckMode toward installation health's Checks permission (fix(github): count reviewCheckMode toward installation health's Checks permission #5377) (f026a96)
• fix(review): stop restating blockers twice in the PR review comment (fix(review): stop restating blockers twice in the PR review comment #5378) (f23886d)
• feat(observability): host/container/Redis/Qdrant metrics + stack self-monitoring (feat(observability): host/container/Redis/Qdrant metrics + stack self-monitoring #5380) (bdeb673)
• fix(review): allowlist AWS's official example key in secret detection (fix(review): allowlist AWS's official example key in secret detection #5381) (e31095b)
• feat(review): add a combined "Copy for AI agents" block to the PR comment (feat(review): add a combined "Copy for AI agents" block to the PR comment #5387) (1da48c9)
• feat(observability): instrument REES + its main-app client with real Prometheus metrics (feat(observability): instrument REES + its main-app client with real Prometheus metrics #5398) (15f191a)
• fix(review): stop the deterministic type-label mislabel from fix(review): verify linked issue closure source #5233's broken closure check (fix(review): stop the deterministic type-label mislabel from #5233's broken closure check #5407) (e58f00c)
• docs: rename AI-contributor tooling and meta-docs for LoopOver (docs: rename AI-contributor tooling and meta-docs for LoopOver #5431) (566b4e5)
• chore(types): mark gateCheckMode @deprecated at every declaration site (Stage and remove the derived-only gateCheckMode field (naming sprawl, #5355 follow-up) #5373) (chore(types): mark gateCheckMode @deprecated at every declaration site #5430) (e137ddc)
• feat(observability): translate browserless's JSON metrics into Prometheus text (feat(observability): translate browserless's JSON metrics into Prometheus text #5436) (55f8fd1)
• chore(types): widen gateCheckMode to optional, drop internal-only passthroughs (Stage and remove the derived-only gateCheckMode field (naming sprawl, #5355 follow-up) #5373) (chore(types): widen gateCheckMode to optional, drop internal-only passthroughs #5440) (e0c1000)
• feat(db): drop the dead gate_check_mode column (Stage and remove the derived-only gateCheckMode field (naming sprawl, #5355 follow-up) #5373) (feat(db): drop the dead gate_check_mode column #5446) (08500b5)
• refactor(rebrand): consolidate and rename hardcoded User-Agent literals (refactor(rebrand): consolidate and rename hardcoded User-Agent literals #5445) (cc9080a)
• feat(observability): add a Grafana Sentry datasource for in-Grafana issue visualization (feat(observability): add a Grafana Sentry datasource for in-Grafana issue visualization #5453) (3043c97)
• chore(api): drop gateCheckMode from registration-readiness and settings-preview responses (Stage and remove the derived-only gateCheckMode field (naming sprawl, #5355 follow-up) #5373) (chore(api): drop gateCheckMode from registration-readiness and settings-preview responses #5454) (2d49c5c)
• chore(activation): replace gateCheckMode with reviewCheckMode on the maintainer-activation surface (Stage and remove the derived-only gateCheckMode field (naming sprawl, #5355 follow-up) #5373) (chore(activation): replace gateCheckMode with reviewCheckMode on the maintainer-activation surface #5455) (4e9ce1a)
• refactor(rebrand): rename brand literals in public API/webhook payloads (refactor(rebrand): rename brand literals in public API/webhook payloads #5456) (d251c07)
• feat!: remove the gateCheckMode field from RepositorySettings entirely (Stage and remove the derived-only gateCheckMode field (naming sprawl, #5355 follow-up) #5373) (feat!: remove the gateCheckMode field from RepositorySettings entirely #5459) (7a1051c)
• fix(review): index calibration login canonicalization (fix(review): add expression index for case-insensitive calibration login lookup #5324) (293ed1e)
• fix(observability): avoid mutating captured error names (fix(observability): avoid mutating captured error names #5432) (42330a4)
• refactor(rebrand): rename bot-posted check-run names and PR-comment branding (refactor(rebrand): rename bot-posted check-run names and PR-comment branding #5468) (ae46bbd)
• fix(observability): avoid exposing live AMS ledgers (fix(observability): avoid exposing live AMS ledgers #5471) (2fd9196)
• fix(review): stop retrying an AI provider 429 immediately with zero backoff (fix(review): stop retrying an AI provider 429 immediately with zero backoff #5481) (c533294)
• fix(review): coalesce a repeated over-cap sibling wake by head SHA, not just PR number (fix(review): coalesce a repeated over-cap sibling wake by head SHA, not just PR number #5485) (ee9cf6f)
• refactor(selfhost): rename gittensory self-host deployment identifiers to loopover (refactor(selfhost): rename gittensory self-host deployment identifiers to loopover #5502) (ff2e6db)
• fix(review): stop charging a regate-repair attempt before readiness is confirmed (fix(review): stop charging a regate-repair attempt before readiness is confirmed #5482) (f6e5d07)
• refactor(observability): hard-cutover rename gittensory_ metric prefix to loopover_ (refactor(observability): hard-cutover rename gittensory_ metric prefix to loopover_ #5522) (577a69e)
• refactor(visual): rename R2 buckets, /gittensory/shot route, and R2 key prefixes to loopover (refactor(visual): rename R2 buckets, /gittensory/shot route, and R2 key prefixes to loopover #5531) (ff94e35)
• refactor(actions): rename visual-capture-fallback.yml workflow name, env vars, and artifact to loopover (refactor(actions): rename visual-capture-fallback.yml workflow name, env vars, and artifact to loopover #5534) (851234c)
• refactor(release): publish self-host container image as loopover-selfhost with old-name alias (refactor(release): publish self-host container image as loopover-selfhost with old-name alias #5559) (81f9dc0)
• refactor(selfhost): dual-read LOOPOVER_-prefixed env vars alongside GITTENSORY_ (refactor(selfhost): dual-read LOOPOVER_-prefixed env vars alongside GITTENSORY_ #5561) (f30061c)
• refactor(selfhost): dual-read .loopover.yml config filename alongside .gittensory.yml (refactor(selfhost): dual-read .loopover.yml config filename alongside .gittensory.yml #5566) (0798d02)
• feat(loopover): flip site-identity domain to loopover.ai (feat(loopover): flip site-identity domain to loopover.ai #5580) (dc86cf7)
• refactor(selfhost): dual-read GITTENSORY_REVIEW_* feature flags alongside LOOPOVER_ (refactor(selfhost): dual-read GITTENSORY_REVIEW_* feature flags alongside LOOPOVER_ #5593) (e7af086)
• refactor(packages): rename all npm workspace packages to the @Loopover org (refactor(packages): rename all npm workspace packages to the @loopover org #5601) (3de6e1b)
• refactor(rebrand): update GitHub App slug to loopover-orb (GitHub App rename #4772) (refactor(rebrand): update GitHub App slug to loopover-orb #5612) (8106063)
• feat(loopover): flip PUBLIC_API_ORIGIN to api.loopover.ai (feat(loopover): flip PUBLIC_API_ORIGIN to api.loopover.ai #5618) (3f89ea8)

[superagent-security]

Superagent didn't find any vulnerabilities or security issues in this PR.