Release 0.13.0

[seonghobae]

Bump version to 0.13.0 to sync GHCR publish for merged security remediation.

Summary by CodeRabbit

• Bug Fixes
  • Resolved multiple security vulnerabilities and critical alerts across the system
  • Cleaned up deprecated code patterns to ensure better compatibility
  • Fixed important Python security issues
  • Optimized runtime stack components for improved stability and reliability

[coderabbitai]

Note

.coderabbit.yaml has unrecognized properties

CodeRabbit is using all valid settings from your configuration. Unrecognized properties (listed below) have been ignored and may indicate typos or deprecated fields that can be removed.

⚠️ Parsing warnings (1)

Validation error: Unrecognized key(s) in object: 'version'

⚙️ Configuration instructions

• Please see the configuration documentation for more information.
• You can also validate your configuration using the online YAML validator.
• If your editor has YAML language server enabled, you can add the path at the top of this file to enable auto-completion and validation: # yaml-language-server: $schema=https://coderabbit.ai/integrations/schema.v2.json

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro

Run ID: 29eada78-f1c9-444e-a816-e61dcae0f91b

📥 Commits

Reviewing files that changed from the base of the PR and between 4716b51 and 6ded603.

📒 Files selected for processing (2)

• CHANGELOG.md
• VERSION

---

📝 Walkthrough

Walkthrough

This PR bumps the project version from 0.12.1 to 0.13.0 and documents the release in the changelog. The changelog entry records dependency upgrades across frontend and backend to resolve security alerts and deprecated import issues.

Changes

Release 0.13.0

Layer / File(s)	Summary
Version and release notes VERSION, CHANGELOG.md	VERSION incremented to 0.13.0; CHANGELOG.md adds release entry documenting frontend/backend dependency version upgrades (next, eslint-config-next, python-multipart) and backend runtime stack alignment (fastapi, starlette, uvicorn, OpenTelemetry) to address security alerts and Python vulnerabilities.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

Possibly related PRs

• Seongho-Bae/naruon#163: Both PRs are release/version-bump updates that modify VERSION and add entries to CHANGELOG.md.
• Seongho-Bae/naruon#166: Both PRs update release metadata by bumping VERSION and adding CHANGELOG.md entries for new releases.
• Seongho-Bae/naruon#185: Both PRs are version bumps updating VERSION and CHANGELOG.md to align project versioning.

Poem

🐰 A version bumps with gentle care,
Dependencies now fresh and fair,
From 0.12 to 0.13,
Security concerns set free!

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title 'Release 0.13.0' directly and clearly summarizes the main change: bumping the project version to 0.13.0 as documented in the VERSION and CHANGELOG.md files.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch release/bump-0.13.0

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[github-actions]

PR governance metadata gate is not ready for 6ded60325ecb8cfdafbb77d80820d7724754e473:

• 3 required check(s) are not successful on 6ded603.\n- Missing current-head CodeRabbit/coderabbitai evidence for 6ded603.\n

[seonghobae]

@coderabbitai approve

[github-actions]

PR governance metadata gate is not ready for 6ded60325ecb8cfdafbb77d80820d7724754e473:

• 2 required check(s) are not successful on 6ded603.\n- Missing current-head CodeRabbit/coderabbitai evidence for 6ded603.\n

[github-actions]

PR governance metadata gate is not ready for 6ded60325ecb8cfdafbb77d80820d7724754e473:

• 2 required check(s) are not successful on 6ded603.\n- Missing current-head CodeRabbit/coderabbitai evidence for 6ded603.\n

[coderabbitai]

✅ Actions performed

Comments resolved and changes approved.

[greptile-apps]

Greptile Summary

이전 PR(e653973)에서 병합된 보안 의존성 패치(프론트엔드 next 계열 및 백엔드 python-multipart·FastAPI 스택)를 GHCR에 게시하기 위해 버전을 0.12.1에서 0.13.0으로 올리는 릴리스 PR입니다.

• VERSION 파일을 0.13.0으로 업데이트하고, CHANGELOG.md에 0.13.0 항목을 추가해 보안 수정 내용을 기록했습니다.
• 실질적인 코드 변경 없이 버전 메타데이터만 수정되므로 기능 영향은 없습니다.

Confidence Score: 5/5

버전 메타데이터 파일 두 개만 수정되며, 실행 코드 변경이 전혀 없어 안전하게 병합 가능합니다.

변경 범위가 VERSION 문자열 교체와 CHANGELOG.md 항목 추가로 한정되어 있어 런타임 동작에 영향을 줄 코드가 없습니다. 기존 포맷과 일관성도 유지되고 있습니다.

별도로 주의가 필요한 파일은 없습니다.

Important Files Changed

Filename	Overview
VERSION	단순 버전 문자열을 0.12.1에서 0.13.0으로 변경 — 문제 없음
CHANGELOG.md	0.13.0 항목 추가 — 보안 의존성 업데이트 내용 기록, 기존 포맷과 일관성 유지

Flowchart

%%{init: {'theme': 'neutral'}}%%
flowchart TD
    A["PR #186: fix(security)\n보안 의존성 패치 병합\ne653973"] --> B["VERSION: 0.12.1 → 0.13.0\nCHANGELOG.md 항목 추가"]
    B --> C["GHCR 이미지 게시 트리거\n(0.13.0 태그)"]
    C --> D1["Frontend\nnext / eslint-config-next → 16.2.6"]
    C --> D2["Backend\npython-multipart → 0.0.27\nfastapi 0.136.1 / starlette 0.52.1\nuvicorn 0.34.3 / OpenTelemetry 1.41.1"]

Loading

_{Reviews (1): Last reviewed commit: "chore: bump version to 0.13.0 for securi..." | Re-trigger Greptile}

[github-actions]

PR governance metadata gate is not ready for 6ded60325ecb8cfdafbb77d80820d7724754e473:

• Missing current-head CodeRabbit/coderabbitai evidence for 6ded603.\n