chore(release): cut orb-v0.6.0

[github-actions]

Proposes cutting orb-v0.6.0 (a minor release) from the current
stable release orb-v0.5.0.

Merging this PR tags orb-v0.6.0 and dispatches the image build/publish --
which still requires a release environment approval before anything reaches GHCR (see
.github/workflows/release-selfhost.yml). The daily beta channel is unaffected either way.

Image-relevant commits since the last stable release

• fix(selfhost): make Docker Compose secret files readable by the container (fix(selfhost): make Docker Compose secret files readable by the container #5124) (a416632)
• feat(analytics): surface org-wide slop-band calibration + add the dashboard card (feat(ui): slop-band calibration card on the analytics dashboard #2196) (feat(analytics): surface org-wide slop-band calibration + dashboard card (#2196) #5126) (f799c2c)
• feat(review): add finding acceptance rate calculation and related types (Maintainer analytics dashboard (gate precision, calibration, acceptance rate) #1967) (feat(review-stats): add finding acceptance-rate signal to the maintainer stats feed (#1967) #5127) (d1cb4e5)
• feat(ui): gate-outcome breakdown card (feat(ui): gate-outcome breakdown card (auto-merge / auto-close / hold) #2203) (feat(ui): gate-outcome breakdown card (#2203) #5098) (19fbd93)
• feat(analytics): add aggregate queue-health to the maintainer quality dashboard (feat(ui): queue-health trend card on the maintainer quality dashboard #2201) (feat(analytics): add aggregate queue-health to the maintainer quality dashboard (#2201) #5141) (1d4a6fd)
• feat(miner-governor): build a real production runSlopAssessment implementation (Build a real production runSlopAssessment implementation #5133) (feat(miner-governor): build a real production runSlopAssessment implementation (#5133) #5140) (e7d95a9)
• fix(review): guard contributor screenshot fetches (fix(review): guard contributor screenshot fetches #4976) (6c40d1e)
• fix(public-stats): redact sparse accuracy trend counts (fix(public-stats): redact sparse accuracy trend counts #4979) (c085724)
• feat(selfhost): add claude code token to native Docker secrets (feat(selfhost): add claude code token to native Docker secrets #5144) (af23119)
• fix(review): keep screenshots allowlist-bound (fix(review): keep screenshots allowlist-bound #4990) (db28d8f)
• fix(github): require repo stats allowlist (fix(github): require repo stats allowlist #4978) (b1ab5c2)
• fix(selfhost): remove Claude reviewer tools (fix(selfhost): remove Claude reviewer tools #5105) (ea78975)
• fix(chat): restrict grounding to public summaries (fix(chat): restrict grounding to public summaries #5106) (6dd59f2)
• fix(review): scope gittensor opt-in to installed repos (fix(review): scope gittensor opt-in to installed repos #5110) (810b203)
• fix(review): bound impact-map query cache retention (fix(review): bound impact-map query cache retention #4992) (1c99635)
• fix(review): avoid overlapping screenshot table extraction (fix(review): avoid overlapping screenshot table extraction #4993) (acb4f6c)
• fix(commands): authorize intent routing before AI classification (fix(commands): authorize intent routing before AI classification #5107) (3680301)
• fix(chat): redact private lane signals from Q&A (fix(chat): redact private lane signals from Q&A #5149) (b349784)
• fix(selfhost): validate ready retry settings (fix(selfhost): validate ready retry settings #5146) (0b8bc5d)
• fix(review): resync bot re-entry before skipping (fix(review): resync bot re-entry before skipping #5151) (dc7a19b)
• fix(review): enforce miner-scoped breakers (fix(review): enforce miner-scoped breakers #5209) (9fa67f5)
• fix(review): preserve per-repo issue cap when miner global cap is set to off (fix(review): preserve per-repo issue cap when miner global cap is set to off #5205) (352507c)
• fix(review): canonicalize calibration login lookup (fix(review): canonicalize calibration login lookup #5206) (0dcbf81)
• fix(agent): respect dry-run for tracker auto-apply (fix(agent): respect dry-run for tracker auto-apply #5207) (5f3ebf7)
• fix(review): keep recap cohorts private (fix(review): keep recap cohorts private #5204) (c772d74)
• fix(review): verify linked issue closure source (fix(review): verify linked issue closure source #5233) (5efa953)
• fix(observability): repo-scope + fix stale data on the Reviews & PRs dashboard (fix(observability): repo-scope + fix stale data on the Reviews & PRs dashboard #5234) (316296b)
• fix(selfhost): mount observability/backup scripts as directories, not single files (fix(selfhost): mount observability/backup scripts as directories, not single files #5238) (8cb5e74)
• fix(api): allow the gittensory-ui dev-server port in CORS (fix(api): allow the gittensory-ui dev-server port in CORS #5248) (e3523a1)
• fix(ai-usage): record embeddings + self-host vision, fix advisory-routed model attribution (fix(ai-usage): record embeddings + self-host vision, fix advisory-routed model attribution #5247) (a6d93c6)
• fix(orb): stop double-counting PRs already tracked by the own-ledger (fix(orb): stop double-counting PRs already tracked by the own-ledger #5257) (5b9e9e1)
• fix(selfhost): attribute embed/vision/advisory AI usage to a real provider (fix(selfhost): attribute embed/vision/advisory AI usage to a real provider #5259) (738c8ca)
• fix(orb): fix production outage caused by the anti-join query (hotfix(orb): fix production outage in /v1/public/stats caused by anti-join perf #5263) (864c52d)
• feat(ui): add analytics dashboard time-window selector (feat(ui): analytics dashboard time-window selector (#2199) #5268) (96e1557)
• chore(auth): remove the fully-deleted old GitHub App's dead vars/secrets (chore(auth): remove the fully-deleted old GitHub App's dead vars/secrets #5269) (d56f4ec)
• docs(settings): disclose that agentDryRun doesn't stop AI/LLM spend (docs(settings): disclose that agentDryRun doesn't stop AI/LLM spend #5296) (595855b)
• fix(review): generated contributor docs no longer overclaim requireLinkedIssue enforcement (fix(review): generated contributor docs no longer overclaim requireLinkedIssue enforcement #5300) (29cb3f3)
• feat(miner): generated env-var reference with CI drift check (Add a generated, CI-drift-checked env-var reference for gittensory-miner (npm run miner:env-reference) #5179) (feat(miner): generated env-var reference with CI drift check (#5179) #5295) (83944c4)
• docs(review): fix docs pages that describe checkRunMode/reviewCheckMode backwards (docs(review): fix docs pages that describe checkRunMode/reviewCheckMode backwards #5301) (6f05c31)
• fix(selfhost): recognize experimental: as a valid top-level manifest field (fix(selfhost): recognize experimental: as a valid top-level manifest field #5307) (acc99a8)
• feat(observability): register 26 missing metrics, add memory limits to 4 more services (feat(observability): register 26 missing metrics, add memory limits to 4 more services #5310) (395643d)
• docs(settings): document that publicSurface doesn't suppress either check-run (docs(settings): document that publicSurface doesn't suppress either check-run #5311) (62d7f22)
• docs(settings): clarify moderationGateMode gates only the shared violation tally (docs(settings): clarify moderationGateMode gates only the shared violation tally #5314) (cf58317)
• docs(settings): fix stale reviewEvasionProtection default claim, disclose always-on counter (docs(settings): fix stale reviewEvasionProtection default claim, disclose always-on counter #5315) (870d47f)
• docs(settings): document that autoLabelEnabled only gates the base context label (docs(settings): document that autoLabelEnabled only gates the base context label #5318) (6688156)
• docs(settings): cross-reference gateDryRun and agentDryRun (docs(settings): cross-reference gateDryRun and agentDryRun #5316) (23604df)
• fix(config): stop documenting the retired blockedPaths key as a live feature (fix(config): stop documenting the retired blockedPaths key as a live feature #5304) (329af5a)
• fix(ui): disclose the inert firstTimeContributorGrace dashboard toggle (fix(ui): disclose the inert firstTimeContributorGrace dashboard toggle #5321) (5f62463)
• feat(infra): wire loopover.ai as a live secondary domain (feat(infra): wire loopover.ai as a live secondary domain #5345) (b779f28)
• fix(config): warn on ambiguous gate.enabled without gate.checkMode (Fix gate.enabled/gate.checkMode ambiguity at the code level (root cause of the Orb Review Agent check-run incident) #5355) (fix(config): warn on ambiguous gate.enabled without gate.checkMode #5375) (af05e48)
• fix(review): stop generic_secret_assignment from auto-closing PRs (fix(review): stop generic_secret_assignment from auto-closing PRs #5370) (5855f8a)
• fix(github): count reviewCheckMode toward installation health's Checks permission (fix(github): count reviewCheckMode toward installation health's Checks permission #5377) (f026a96)
• fix(review): stop restating blockers twice in the PR review comment (fix(review): stop restating blockers twice in the PR review comment #5378) (f23886d)
• feat(observability): host/container/Redis/Qdrant metrics + stack self-monitoring (feat(observability): host/container/Redis/Qdrant metrics + stack self-monitoring #5380) (bdeb673)
• fix(review): allowlist AWS's official example key in secret detection (fix(review): allowlist AWS's official example key in secret detection #5381) (e31095b)
• feat(review): add a combined "Copy for AI agents" block to the PR comment (feat(review): add a combined "Copy for AI agents" block to the PR comment #5387) (1da48c9)
• feat(observability): instrument REES + its main-app client with real Prometheus metrics (feat(observability): instrument REES + its main-app client with real Prometheus metrics #5398) (15f191a)
• fix(review): stop the deterministic type-label mislabel from fix(review): verify linked issue closure source #5233's broken closure check (fix(review): stop the deterministic type-label mislabel from #5233's broken closure check #5407) (e58f00c)
• docs: rename AI-contributor tooling and meta-docs for LoopOver (docs: rename AI-contributor tooling and meta-docs for LoopOver #5431) (566b4e5)

[superagent-security]

Superagent didn't find any vulnerabilities or security issues in this PR.

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Preview URL	Updated (UTC)
✅ Deployment successful! View logs	gittensory-ui	48910c8	Commit Preview URL Branch Preview URL	Jul 12 2026, 07:21 PM

[JSONbored]

Closing for now — beta (orb-v0.6.0-beta.1) is intentionally ahead of stable (orb-v0.5.0) and that's the correct state. Not ready to promote to a new stable release yet. orb-stable-release-pr.yml will recreate this proposal on its normal schedule (or on demand) whenever we do want to ship 0.6.0 as stable.