Release v1.1.0 readiness

[CoreyLeath-code]

L6 release-readiness changes

• adds Python package metadata and a reproducible 1.1.0 wheel/sdist build;
• replaces the semantic-release workflow with a deterministic, tag-driven release gate;
• publishes wheel, source distribution, SHA-256 checksums, and SPDX SBOM to a GitHub Release;
• publishes an immutable versioned GHCR image plus minor and latest tags on a release tag;
• removes the committed root environment file and prevents it being recommitted;
• records a literal v1.1.0 changelog and release note.

Required gates before tagging

The tag workflow runs Black, Ruff, mypy, unit tests, the deterministic benchmark harness, Python package build, Docker image build, checksum generation, and SPDX SBOM generation. This PR must be green before creating v1.1.0.

Explicit scope

This is a release for the repository's reference implementation. It does not attest production availability, real-time payment processing, identity/PII controls, or an integrated production broker/deployment environment.

Summary by CodeRabbit

• New Features

  • Added Redis-backed driver-location storage.
  • Added NGINX routing and service readiness checks.
  • Added published container images and reproducible release artifacts, including checksums and SBOMs.

• Documentation

  • Added v1.1.0 release notes and updated the changelog.
  • Documented the reference implementation scope and production limitations.

• Release Improvements

  • Added automated validation for versions, release notes, builds, tests, and release packages.
  • Updated project metadata for the 1.1.0 release.

[coderabbitai]

Caution

Review failed

The pull request is closed.

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: 9059b441-b5e5-42c1-a495-c47a824c74a6

📥 Commits

Reviewing files that changed from the base of the PR and between c444e01 and bfe05f1.

📒 Files selected for processing (7)

• .env (Root)
• .github/workflows/release.yml
• .gitignore
• CHANGELOG.md
• RELEASE_NOTES_1.1.0.md
• package.json
• pyproject.toml

---

📝 Walkthrough

Walkthrough

The project moves to version 1.1.0 with setuptools packaging, updated release documentation, and a GitHub Actions workflow that verifies, builds, and publishes release artifacts and a container image.

Changes

1.1.0 Release Engineering

Layer / File(s)	Summary
Project packaging and metadata pyproject.toml, package.json, .gitignore	The project declares setuptools packaging, Python requirements, runtime dependencies, module discovery, version 1.1.0 metadata, and updated ignore guidance.
Release notes and changelog RELEASE_NOTES_1.1.0.md, CHANGELOG.md	Release documentation describes the 1.1.0 scope, artifacts, verification process, and production limitations.
Release verification and publication .github/workflows/release.yml	The workflow validates release inputs, runs quality checks, builds distributions and a container image, generates checksums and an SPDX SBOM, and publishes assets to GitHub Releases and GHCR.

Estimated code review effort: 4 (Complex) | ~45 minutes

Sequence Diagram(s)

sequenceDiagram
  participant GitHub as GitHub Actions
  participant Verify as verify job
  participant Artifacts as Release artifacts
  participant Release as GitHub Release
  participant GHCR as GHCR

  GitHub->>Verify: Start from tag, pull request, or manual tag input
  Verify->>Verify: Validate version, notes, changelog, and checks
  Verify->>Artifacts: Build distributions, image, checksums, and SBOM
  Artifacts->>Release: Upload verified release assets
  Artifacts->>GHCR: Push tagged container image

Loading

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch release/v1.1.0-readiness

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}