🔧 chore(release): cut v1.6.0-rc.12

[scttbnsn]

Summary

rc.12 release prep: renames [Unreleased] to [1.6.0-rc.12] — 2026-08-04 and rolls the release identity forward across README (badge + highlights), site config/content, quickstart tag matrix, demo mocks, API docs, the updates highlights page, and the identity/changelog-link tests. Adds the routine dependency-maintenance rollup (#653, #654, #655, #656, #664) and the Crowdin sync note (#665) to the changelog entry.

Version files stay at 1.6.0 (base version, set at rc.1 — the release-cut workflow validates base version, full-tag changelog heading).

rc.12 contents

• 🔒 🔒 security(deps): pin brace-expansion 5.0.9 + ip-address 10.3.1, advance fast-uri to 4.1.2 #659 security pins: brace-expansion 5.0.9 (app/ui/e2e), ip-address 10.3.1 (app runtime), fast-uri 4.1.2 (app/ui)
• 🐛 Maturity clock: swallowed GHCR/LSCR auth errors and divergent age thresholds #604 maturity badge/gate threshold agreement + surfaced publish-date auth failures
• 🐛 Eligibility can show "Agent Mismatch" during the agent trigger registration window #605 agent-mismatch grace during component (re)registration (display only, admission fail-closed)
• 🐛 WebSocket log streams reject anonymous-auth sessions (DD_ANONYMOUS_AUTH_CONFIRM) #636 WS log streams accept anonymous-auth sessions
• 🐛 Container lifecycle actions (start/stop/restart) 404 for edge-agent containers #637 explicit 501 for agent containers without controller lifecycle transport

After merge: dev→main wholesale-tree sync, then dispatch release-cut.yml --ref main -f release_tag=v1.6.0-rc.12.

Changelog

🔧 Changed

• Updated release identity from 1.6.0-rc.11 to 1.6.0-rc.12 across documentation, site content, quickstart materials, API examples, demo mocks, and tests.
• Added v1.6.0-rc.12 release highlights dated August 4, 2026.
• Updated changelog links and release metadata expectations.
• Kept version files at 1.6.0.

🔒 Security

• Added security dependency updates for #653, #654, #655, #656, and #664.
• Added the Crowdin synchronization note for #665.
• Documented security dependency pins from #659.

✨ Added

• Maturity badge and publish-date authentication updates from #604.
• Agent-mismatch grace during component registration from #605.
• Anonymous authentication support for WebSocket log streams from #636.
• Explicit 501 responses when agent containers lack controller lifecycle transport from #637.

Concerns

• Verify all 1.6.0-rc.11 references are intentionally replaced or retained.
• Verify the August 4, 2026 release date matches the release workflow.
• Run changelog and release-identity tests after the updates.
• Confirm the planned dev to main sync and release-cut workflow occur after merge.

[vercel]

Deployment failed with the following error:

Resource is limited - try again in 24 hours (more than 100, code: "api-deployments-free-per-day").

Learn More: https://vercel.com/codeswhat?upgradeToPro=build-rate-limit

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro Plus

Run ID: bbf487d5-e148-4aef-88e4-853dc008587a

📥 Commits

Reviewing files that changed from the base of the PR and between ab72a62 and 0966ad1.

⛔ Files ignored due to path filters (1)

• CHANGELOG.md is excluded by !CHANGELOG.md

📒 Files selected for processing (16)

• README.md
• apps/demo/src/mocks/data/agents.ts
• apps/demo/src/mocks/data/audit.ts
• apps/demo/src/mocks/data/containers.ts
• apps/demo/src/mocks/data/server.ts
• apps/demo/src/mocks/handlers/app.ts
• apps/web/src/lib/site-config.ts
• apps/web/src/lib/site-content.ts
• content/docs/current/api/agent.mdx
• content/docs/current/api/app.mdx
• content/docs/current/api/portwing.mdx
• content/docs/current/quickstart/index.mdx
• content/docs/current/updates/index.mdx
• scripts/changelog-links.test.mjs
• scripts/release-docs-identity.test.mjs
• scripts/release-identity.test.mjs

---

📝 Walkthrough

Walkthrough

The release candidate version changes from 1.6.0-rc.11 to 1.6.0-rc.12 across demo mocks, site configuration, documentation, README content, and release tests. Release notes document security updates, maturity handling, agent registration behavior, anonymous-auth WebSocket support, and explicit 501 responses. Changelog comparison expectations and release dates also change.

Possibly related PRs

• CodesWhat/drydock#633: Updates the same release metadata, mocks, documentation, and release tests.
• CodesWhat/drydock#521: Updates changelog comparison-link test expectations for a new release.
• CodesWhat/drydock#651: Provides the documented changes promoted by this release update.

🚥 Pre-merge checks | ✅ 2

✅ Passed checks (2 passed)

Check name	Status	Explanation
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches 💡 1

🛠️ Fix failing CI checks 💡

• Create stacked PR
• Commit on current branch

📝 Generate docstrings

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch release/v1.6-rc.12-prep

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}