chore(main): release lobu 4.3.0

[buremba]

🤖 I have created a release beep boop

lobu: 4.3.0

4.3.0 (2026-04-25)

Features

• ci: autonomous PR triage workflow (#349) (1fd4add)
• examples: add LLM-judged ping eval to each surfaced example (#366) (d6aa5ad)
• gateway: LLM-judged egress via per-skill action: judge (#319) (#327) (0171679)
• watchers: in-process lifecycle tracker, durable correlation, drop heartbeat (#336) (51be366)

Bug Fixes

• auth: align Claude OAuth client with public CLI to avoid 429 (#345) (aa91a81)
• ci: bump landing deploy to Node 22 for Astro 6 (#344) (1eb9d60)
• cli: migrate to @inquirer/prompts to fix Node 25 readline crash (#364) (8ab0dd9)
• embedded-lobu: make the embedded gateway boot cleanly in the owletto app image (#332) (c378015)
• events: tolerate stale client_id refs on insert + relax FK (#339) (5c19d26)
• gateway,dev-native: thread worker entryPoint through config, unblock native dev (#347) (e5ff4d8)
• mcp-handler,entity-management: SSE close race + classify entity-type errors (#340) (4b4649a)
• owletto-backend: unblock image builds after dead-code refactor (#329) (5619e1f)
• post-merge review follow-ups (path traversal, Sentry PII, Slack instr guard, MCP join rate-limit) (#325) (3faad40)
• resolve_path: return 4xx instead of throwing on client-input errors (#338) (326f543)
• sentry: disable NodeSystemError integration to unblock node v24 builds (#341) (4124e00)
• stabilize multiple security and reliability gaps across gateway (#321) (3c6efc2)
• watchers: no-op complete_window when all events already analyzed (#337) (495d615)

Performance Improvements

• auth: consolidate better-auth onto shared postgres.js pool (#342) (012754a)

---

This PR was generated with Release Please. See documentation.

[buremba]

No correctness or regression-risk issues found here. This looks like a standard release-please bump/changelog PR with no runtime logic changes.

[github-actions]

Triage decision: needs-human

Reasons:

• Changes to infra paths: charts/lobu/Chart.yaml (under charts/lobu/) - infra blast radius protection
• Release-please generated version bumps require manual review for Helm chart changes

Next: Manual review and merge required. The PR updates Helm chart versions as part of the automated release process, but infra paths require human oversight per triage policy.

[github-actions]

Triage decision: needs-human

Reasons:

• Changes to infra paths: charts/lobu/Chart.yaml (under charts/lobu/) - infra blast radius protection
• Release-please generated version bumps require manual review for Helm chart changes

Next: Manual review and merge required. The PR updates Helm chart versions as part of the automated release process, but infra paths require human oversight per triage policy.

[buremba]

🤖 Created releases:

• lobu-v4.3.0

🌻