chore(release): phlo 0.18.0 + 38 packages

[iamgp]

Release summary

[phlo 0.18.0 + 38 packages] - 2026-10-08

Added

• phlo: add phase-1 v1 identity, environments, services and events (feat(api): add phase-1 v1 identity, environments, services and events #1040)
• phlo: add durable incident management endpoints (feat(api): add durable incident management endpoints #1042)
• phlo: add phase-3 asset overview endpoints (feat(api): add phase-3 asset overview endpoints #1044)
• phlo: add phase 4 jobs and runs API (feat(phlo-api): add phase 4 jobs and runs API #1045)
• phlo: add phase 5 query workspace (feat(phlo-api): add phase 5 query workspace #1046)
• phlo: add phase 6 administration and audit (feat(phlo-api): add phase 6 administration and audit #1047)
• phlo: add branch workflows for unified API (feat(api): add branch workflows for unified API #1048)
• phlo: finish Observatory cutover and signed staging promotion (feat(api): finish Observatory cutover and signed staging promotion #1049)
• phlo: add OIDC authentication with oauth2-proxy (feat(auth): add OIDC authentication with oauth2-proxy #1050)
• phlo: replace legacy UI in Phlo (feat(observatory): replace legacy UI in Phlo #1051)
• phlo: separate merge, maintenance and immutable release contracts (feat(ci): separate merge, maintenance and immutable release contracts #1068)
• phlo: publish complete local file export sets (feat: publish complete local file export sets #1074)
• phlo: add shared service-file overrides across providers (feat: add shared service-file overrides across providers #1076)
• phlo: enforce explicit write schema policies (feat(iceberg): enforce explicit write schema policies #1075)
• phlo: replay-safe immutable history ingestion (feat(iceberg): replay-safe immutable history ingestion #1077)
• phlo-alerting: replace legacy UI in Phlo (feat(observatory): replace legacy UI in Phlo #1051)
• phlo-api: add phase-1 v1 identity, environments, services and events (feat(api): add phase-1 v1 identity, environments, services and events #1040)
• phlo-api: add durable incident management endpoints (feat(api): add durable incident management endpoints #1042)
• phlo-api: add phase-3 asset overview endpoints (feat(api): add phase-3 asset overview endpoints #1044)
• phlo-api: add phase 4 jobs and runs API (feat(phlo-api): add phase 4 jobs and runs API #1045)
• phlo-api: add phase 5 query workspace (feat(phlo-api): add phase 5 query workspace #1046)
• phlo-api: add phase 6 administration and audit (feat(phlo-api): add phase 6 administration and audit #1047)
• phlo-api: add branch workflows for unified API (feat(api): add branch workflows for unified API #1048)
• phlo-api: finish Observatory cutover and signed staging promotion (feat(api): finish Observatory cutover and signed staging promotion #1049)
• phlo-api: add OIDC authentication with oauth2-proxy (feat(auth): add OIDC authentication with oauth2-proxy #1050)
• phlo-api: replace legacy UI in Phlo (feat(observatory): replace legacy UI in Phlo #1051)
• phlo-dagster: add durable incident management endpoints (feat(api): add durable incident management endpoints #1042)
• phlo-dagster: add phase-3 asset overview endpoints (feat(api): add phase-3 asset overview endpoints #1044)
• phlo-dagster: add OIDC authentication with oauth2-proxy (feat(auth): add OIDC authentication with oauth2-proxy #1050)
• phlo-dagster: replace legacy UI in Phlo (feat(observatory): replace legacy UI in Phlo #1051)
• phlo-dagster: add shared service-file overrides across providers (feat: add shared service-file overrides across providers #1076)
• phlo-dbt: replace legacy UI in Phlo (feat(observatory): replace legacy UI in Phlo #1051)
• phlo-dlt: replace legacy UI in Phlo (feat(observatory): replace legacy UI in Phlo #1051)
• phlo-dlt: enforce explicit write schema policies (feat(iceberg): enforce explicit write schema policies #1075)
• phlo-dlt: replay-safe immutable history ingestion (feat(iceberg): replay-safe immutable history ingestion #1077)
• phlo-grafana: separate merge, maintenance and immutable release contracts (feat(ci): separate merge, maintenance and immutable release contracts #1068)
• phlo-iceberg: replace legacy UI in Phlo (feat(observatory): replace legacy UI in Phlo #1051)
• phlo-iceberg: separate merge, maintenance and immutable release contracts (feat(ci): separate merge, maintenance and immutable release contracts #1068)
• phlo-iceberg: enforce explicit write schema policies (feat(iceberg): enforce explicit write schema policies #1075)
• phlo-iceberg: replay-safe immutable history ingestion (feat(iceberg): replay-safe immutable history ingestion #1077)
• phlo-kafka: enforce explicit write schema policies (feat(iceberg): enforce explicit write schema policies #1075)
• phlo-nessie: finish Observatory cutover and signed staging promotion (feat(api): finish Observatory cutover and signed staging promotion #1049)
• phlo-nessie: replace legacy UI in Phlo (feat(observatory): replace legacy UI in Phlo #1051)
• phlo-oauth2-proxy: add OIDC authentication with oauth2-proxy (feat(auth): add OIDC authentication with oauth2-proxy #1050)
• phlo-observatory: finish Observatory cutover and signed staging promotion (feat(api): finish Observatory cutover and signed staging promotion #1049)
• phlo-observatory: replace legacy UI in Phlo (feat(observatory): replace legacy UI in Phlo #1051)
• phlo-polaris: replace legacy UI in Phlo (feat(observatory): replace legacy UI in Phlo #1051)
• phlo-postgres: add phase 6 administration and audit (feat(phlo-api): add phase 6 administration and audit #1047)
• phlo-trino: add phase-3 asset overview endpoints (feat(api): add phase-3 asset overview endpoints #1044)
• phlo-trino: add phase 5 query workspace (feat(phlo-api): add phase 5 query workspace #1046)
• phlo-trino: finish Observatory cutover and signed staging promotion (feat(api): finish Observatory cutover and signed staging promotion #1049)
• phlo-trino: replace legacy UI in Phlo (feat(observatory): replace legacy UI in Phlo #1051)

Changed

• phlo: remove unmounted Observatory routers and bound Trino queries (refactor(api): remove unmounted Observatory routers and bound Trino queries #1034)
• phlo: reduce core service and evidence complexity (refactor: reduce core service and evidence complexity #1056)
• phlo: reduce complexity in small Python functions (refactor: reduce complexity in small Python functions #1057)
• phlo: consolidate validation into four check buckets (refactor(ci): consolidate validation into four check buckets #1072)
• phlo: reduce provider package complexity (refactor: reduce provider package complexity #1079)
• phlo-api: remove unmounted Observatory routers and bound Trino queries (refactor(api): remove unmounted Observatory routers and bound Trino queries #1034)
• phlo-api: reduce complexity in small Python functions (refactor: reduce complexity in small Python functions #1057)
• phlo-api: reduce provider package complexity (refactor: reduce provider package complexity #1079)
• phlo-dagster: reduce complexity in small Python functions (refactor: reduce complexity in small Python functions #1057)
• phlo-dagster: reduce provider package complexity (refactor: reduce provider package complexity #1079)
• phlo-dbt: reduce complexity in small Python functions (refactor: reduce complexity in small Python functions #1057)
• phlo-dbt: reduce provider package complexity (refactor: reduce provider package complexity #1079)
• phlo-iceberg: reduce provider package complexity (refactor: reduce provider package complexity #1079)
• phlo-nessie: reduce provider package complexity (refactor: reduce provider package complexity #1079)
• phlo-openmetadata: reduce provider package complexity (refactor: reduce provider package complexity #1079)
• phlo-pandera: reduce complexity in small Python functions (refactor: reduce complexity in small Python functions #1057)
• phlo-polaris: reduce provider package complexity (refactor: reduce provider package complexity #1079)

Fixed

• phlo: audit frozen Python locks (fix(security): audit frozen Python locks #969)
• phlo: enable verified release recovery (fix(release): enable verified release recovery #972)
• phlo: retry transient PyPI metadata failures (fix(release): retry transient PyPI metadata failures #973)
• phlo: regenerate support docs in release PRs (fix(release): regenerate support docs in release PRs #974)
• phlo: keep transformer workspace clean (fix(release): keep transformer workspace clean #975)
• phlo: resolve nightly integration test failures (fix: resolve nightly integration test failures #978)
• phlo: report route failures as typed HTTP errors, not 200 error dicts (fix(phlo-api): report route failures as typed HTTP errors, not 200 error dicts #1024)
• phlo: record actor, reason and time on break-glass deny/revoke (fix(compliance): record actor, reason and time on break-glass deny/revoke #1026)
• phlo: replace forked Loki regex worker with a spawned interpreter (fix: replace forked Loki regex worker with a spawned interpreter #1028)
• phlo: default Observatory auth on in production-like environments (fix(security): default Observatory auth on in production-like environments #1025)
• phlo: enforce scoped authorization on every phlo-api mutation (fix(security): enforce scoped authorization on every phlo-api mutation #1023)
• phlo: bind generated ports to loopback and reject exposed MCP (fix: bind generated ports to loopback and reject exposed MCP #1031)
• phlo: redact credentials from logged URLs (fix: redact credentials from logged URLs #1041)
• phlo: restore release candidate evidence on main (fix: restore release candidate evidence on main #1043)
• phlo: repair post-merge release checks (fix(ci): repair post-merge release checks #1052)
• phlo: restore schedule and automation host tools (fix(agents): restore schedule and automation host tools #1054)
• phlo: restore signed review capability lookup (fix(agents): restore signed review capability lookup #1060)
• phlo: improve keyboard and screen reader accessibility (fix(observatory): improve keyboard and screen reader accessibility #1058)
• phlo: restore clean dependency audits on main (fix(deps): restore clean dependency audits on main #1063)
• phlo: patch writer sharp vulnerability with scoped override (fix(deps): patch writer sharp vulnerability with scoped override #1069)
• phlo: restrict image publication to explicit release staging (fix(ci): restrict image publication to explicit release staging #1070)
• phlo: reuse authenticated queue validation on main automatically (fix(ci): reuse authenticated queue validation on main automatically #1071)
• phlo: publish merge deletes and append atomically (fix(iceberg): publish merge deletes and append atomically #1073)
• phlo-api: report route failures as typed HTTP errors, not 200 error dicts (fix(phlo-api): report route failures as typed HTTP errors, not 200 error dicts #1024)
• phlo-api: replace forked Loki regex worker with a spawned interpreter (fix: replace forked Loki regex worker with a spawned interpreter #1028)
• phlo-api: enforce scoped authorization on every phlo-api mutation (fix(security): enforce scoped authorization on every phlo-api mutation #1023)
• phlo-api: bind generated ports to loopback and reject exposed MCP (fix: bind generated ports to loopback and reject exposed MCP #1031)
• phlo-api: repair post-merge release checks (fix(ci): repair post-merge release checks #1052)
• phlo-dagster: report route failures as typed HTTP errors, not 200 error dicts (fix(phlo-api): report route failures as typed HTTP errors, not 200 error dicts #1024)
• phlo-dagster: repair post-merge release checks (fix(ci): repair post-merge release checks #1052)
• phlo-dlt: publish merge deletes and append atomically (fix(iceberg): publish merge deletes and append atomically #1073)
• phlo-iceberg: restore release candidate evidence on main (fix: restore release candidate evidence on main #1043)
• phlo-iceberg: publish merge deletes and append atomically (fix(iceberg): publish merge deletes and append atomically #1073)
• phlo-mcp: report route failures as typed HTTP errors, not 200 error dicts (fix(phlo-api): report route failures as typed HTTP errors, not 200 error dicts #1024)
• phlo-mcp: bind generated ports to loopback and reject exposed MCP (fix: bind generated ports to loopback and reject exposed MCP #1031)
• phlo-minio: resolve nightly integration test failures (fix: resolve nightly integration test failures #978)
• phlo-observatory: report route failures as typed HTTP errors, not 200 error dicts (fix(phlo-api): report route failures as typed HTTP errors, not 200 error dicts #1024)
• phlo-observatory: default Observatory auth on in production-like environments (fix(security): default Observatory auth on in production-like environments #1025)
• phlo-observatory: improve keyboard and screen reader accessibility (fix(observatory): improve keyboard and screen reader accessibility #1058)
• phlo-postgres: report route failures as typed HTTP errors, not 200 error dicts (fix(phlo-api): report route failures as typed HTTP errors, not 200 error dicts #1024)

Contributors

Thanks to our contributors for this release:

• @iamgp (159 commits)

Maintainer checklist

• Review version bump
• Review changelog
• Merge to cut the release

[coldtea-pr-lens]

Note

The title starts with chore(release):, so PR Lens left this pull request undrawn. Comment @pr-lens draw to draw it

_{github.comment.notice: false in .github/pr-lens.yml turns this note off}