release: v0.7.0

[benvinegar]

Release v0.7.0

Bumps version to 0.7.0 and moves the Unreleased changelog entries into an immutable version section.

Release notes

Added

• Scope predicates injected for joined tables with declared rules in select builders
• InvalidScopedUpdateError and update payload validation via updateKey (falls back to insertKey) to prevent scope column reassignment during updates
• Drizzle ORM 1.0 RC peer dependency support and CI compatibility checks
• Social preview artwork, before/after diagram, release benchmark gate

Changed

• Strict mode is now the default; opt out with strict: false
• README reframed: scope-first positioning (tenant as example), TL;DR, badges, RLS comparison table, use cases section

Fixed

• Double .where() can no longer overwrite the injected scope predicate — scoped builders return facades that hide scope-unsafe methods
• Scope predicates injected for joined tables even when the root table is unscoped, closing a read-path leak
• Strict-mode scope detection matches the table's original (pre-alias) name, fixing false positives when joined tables share a column name while remaining safe for aliased self-joins

Validation

pnpm format:check  ✓
pnpm lint          ✓
pnpm typecheck     ✓
pnpm test          ✓  (40/40)
pnpm coverage      ✓  (100% statements/branches/functions/lines)
pnpm build         ✓