chore(release): finalize v0.5.1

[fvadicamo]

What

Release finalization for v0.5.1: version bump 0.5.0 → 0.5.1 across the 8 workspace components, CHANGELOG promotion ([Unreleased] → [0.5.1] - 2026-07-12 with a fresh empty Unreleased block), lockfile refresh, and backlog bookkeeping (DEBT-024 completed with resolution notes; new DEBT-025 for local .env test isolation).

Also reconciles the esbuild 0.28 security bump that Dependabot recreated against main (PR #77) back into the develop line, so develop and main converge at the release merge. Widget build verified with esbuild 0.28.

Testing

• make lint green (ruff, mypy, import-linter)
• make test green: 638 passed, 3 skipped (clean env)
• npm run build in vektra-learn/widget green with esbuild 0.28

Next

After merge: release PR develop → main, tag v0.5.1.

🤖 Generated with Claude Code

Summary by CodeRabbit

• Release
  • Released version 0.5.1 across the platform’s packages.
• Security
  • Updated development tooling and automation components to incorporate security improvements.
• Chores
  • Updated the widget build toolchain to a newer version for improved compatibility and maintenance.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro

Run ID: 53d3068e-92b2-4189-84e6-28c53b20b704

📥 Commits

Reviewing files that changed from the base of the PR and between 43d31fc and cd76653.

⛔ Files ignored due to path filters (3)

• .s2s/BACKLOG.md is excluded by !.s2s/**
• uv.lock is excluded by !**/*.lock, !**/*.lock
• vektra-learn/widget/package-lock.json is excluded by !**/package-lock.json

📒 Files selected for processing (10)

• CHANGELOG.md
• vektra-admin/pyproject.toml
• vektra-analytics/pyproject.toml
• vektra-app/pyproject.toml
• vektra-core/pyproject.toml
• vektra-index/pyproject.toml
• vektra-ingest/pyproject.toml
• vektra-learn/pyproject.toml
• vektra-learn/widget/package.json
• vektra-shared/pyproject.toml

---

📝 Walkthrough

Walkthrough

The release updates Python package versions to 0.5.1, bumps the widget’s development esbuild constraint from ^0.25 to ^0.28, and records development dependency and GitHub Actions updates in the 0.5.1 security changelog.

Changes

Release 0.5.1 updates

Layer / File(s)	Summary
Align Python package versions vektra-*/pyproject.toml	All listed Python packages update their project version from 0.5.0 to 0.5.1.
Update widget tooling and security changelog vektra-learn/widget/package.json, CHANGELOG.md	The widget esbuild development dependency changes to ^0.28, and the 0.5.1 security section records development dependency and GitHub Actions updates.

Estimated code review effort: 2 (Simple) | ~10 minutes

Possibly related PRs

• vektralabs/vektra-stack#73: Also updates the widget toolchain’s esbuild development dependency.

Suggested labels: ci, component:learn, javascript

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly summarizes the release finalization and version bump to v0.5.1.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch chore/v0.5.1-release

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[gemini-code-assist]

Code Review

This pull request bumps the version of all Vektra packages from 0.5.0 to 0.5.1, updates the changelog with details for the 0.5.1 security hardening release, and upgrades esbuild to version 0.28 in the widget build toolchain. It also updates the backlog to mark the DEBT-024 security sweep as completed and schedules a new task (DEBT-025) to isolate unit tests from local environment variables. There are no review comments, and I have no feedback to provide.

Important

The consumer version of Gemini Code Assist on GitHub is being sunset. Starting June 18, 2026, new organization installations will be blocked, and all code review activity will officially cease on July 17, 2026.
For more details on the timeline and next steps, please review the Help Documentation.