chore(main): release 1.6.0

[air-gapped-release-bot]

🚀 A new release is ready to publish

1.6.0 (2026-04-03)

Features

• add --frame-ancestors flag for iframe embedding (8c9536f)
• add --trusted-proxies for X-Forwarded-For client IP logging (e50437a)
• add AsciiDoc and Org-mode rendering support (3d63832)
• add automated releases with release-please (7066965)
• add dependency review workflow with CVE check and AI security analysis (a5df1fd)
• add Helm chart for Kubernetes deployment (eae7614)
• proxy images and assets through /_cooked/raw/ to fix CORS (0a7c38e)
• run update-ca-certificates at container startup for runtime CA injection (0b460bb)
• serve docs assets at /_cooked/docs/ for embedded README images (2bf4d95)

Bug Fixes

• add container to all release workflow jobs (248f377)
• add github.com host to kaniko git context URL (5802f3d)
• align first line of code blocks with subsequent lines (d62eee4)
• correct Chart.yaml version to 1.4.0 and fix release-please config (e9527eb)
• deps: update module github.com/sirupsen/logrus to v1.9.4 (#39) (2039de7)
• deps: update module github.com/yuin/goldmark to v1.7.17 (#37) (3483394)
• deps: update module github.com/yuin/goldmark to v1.8.1 (#40) (8a81874)
• deps: update module github.com/yuin/goldmark to v1.8.2 (#48) (aeaeb27)
• eliminate two-character offset on first line (6bd172d)
• eliminate two-character offset on first line by disabling chroma line number padding (c0231a6), closes #11
• remove left padding from line numbers to eliminate two-character offset (66763c1)
• remove left padding from line numbers to eliminate two-character offset (4e212e5), closes #11
• remove non-existent WithLineNumberPad chroma option (c09d01c)
• replace coverage theater TestSetup_JSONOutput with real Setup() test (e57b850)
• resolve hostnames against CIDR allowlist, proxy raw content for copy button, silence .well-known noise (e22c596)
• sign Docker images with cosign and attach SBOM attestations (cfac0c3)
• silence logrus output from libasciidoc (f03fe85)
• strip leading space-padding from chroma line numbers (0bf1f05)
• suppress healthz probe log noise and add favicon (342c198)
• update favicon to three-layer flame SVG (53d37d3)
• update favicon to three-layer flame SVG (8814cd7)
• use crane for Docker image builds instead of BuildKit (575f8e6)
• use full ghcr.io registry path for Docker images in README (453c12c)
• use git:// protocol for kaniko context URL (679bc4e)
• use GitHub App token for release-please PR creation (c85c4b1)
• use kaniko for Docker image builds on ARC runners (e2f5fbf)

---

Merging creates a draft GitHub release. Review the release notes, add highlights if needed, then publish.