release: v1.25.0 — DuckDB excerpt encryption (SEC-6) + doc-truth fixes - #303

Merged

qnbs merged 11 commits into

mainfrom

feat/duckdb-excerpt-encryption-v1.25.0

Jul 31, 2026

Commits on Jul 31, 2026

feat(security): encrypt codex_mentions.excerpt at rest in DuckDB analytics (SEC-6)
qnbs
committed
358913c
docs: fix stale plan status + archive completed v1.25.0 provider workstream
qnbs
committed
d7c7083
docs(security): correct SEC-6 status, add Claude-proxy monitoring guidance
qnbs
committed
e4a2d88
chore(release): cut v1.25.0
qnbs
committed
51cd0cc
fix(deps): bump event-listener 5.4.1 -> 5.4.2 (RUSTSEC-2026-0221)
qnbs
committed
ff3a6ff
fix(security): scope codex excerpt migration marker per project (SEC-6)
qnbs
committed
f013395
docs: fix doc-drift risk and clarify observability wording (CodeRabbit)
qnbs
committed
fe94b2b
test(coverage): close Codecov patch-coverage gaps for SEC-6 migration wiring
qnbs
committed
da667fa
fix(tests): satisfy full module type for codexExcerptEncryptionMigration mock
qnbs
committed
fdf47d9
fix(security): skip SEC-6 done-marker when a row update or encryption fails (CodeRabbit)
qnbs
committed
2972137
docs(changelog): expand [1.25.0] release notes to cover all unreleased commits
qnbs
committed
f91574c