## mattrobinsonsre/terrapod — v1.3.3…v1.4.0

_37 commits._

### Features
- **feat(1296): concurrent lanes for triggered tasks, and a queued-summary placeholder (#1295) (#1302)** (969a55b)
- **feat: implement --allow-api-version-mismatch, and turn the gate on (#1288)** (a32cf4d)
- **feat: migrate workspaces with an auto-apply mode, not a boolean (#1284)** (220e06e)
- **feat: conditional auto-apply modes (#1275)** (1b24957)
- **feat(1253): undelete UI and MCP tools for deleted workspaces (#1266)** (ce0d2e7)
- **feat(1253): restore a deleted workspace as a new workspace (#1265)** (79ae525)
- **feat(1255): review the accepted-risk register on a schedule (#1256)** (a26927a)
- **feat(1253): delete markers + orphaned-state reaper (#1254)** (155990a)

### Fixes
- **fix: retry cosign signing so one timeout does not lose a release (#1316)** (6a00311)
- **fix(1313): record every workspace setting in the delete marker (#1314)** (d6b1182)
- **fix: override nanoid past the zero-size infinite-loop advisory (#1315)** (a7a9c39)
- **fix(1307): run-trigger runs can be applied on VCS-connected workspaces (#1309)** (3ffe00f)
- **fix(1301): consumer-surface polish from the v1.4.0 review (#1308)** (3a3750e)
- **fix(1300): make GPG signing-key management delegable, and document it (#1306)** (f534fe6)
- **fix(1299): harden deleted-workspace restore and the orphan reaper (#1304)** (ec52db6)
- **fix(1294): four conditional auto-apply blockers, with regression cover (#1303)** (3cdb487)
- **fix: enable the version check in terrapod-publish and the provider (#1293)** (0dde9d6)
- **fix: bound the eval-boot teardown and always rebuild the e2e images (#1292)** (f38f039)
- **fix: require registry admin to manage provider signing keys (#1290)** (45bb0e1)
- **fix: stop the re-scan raising advisories with nothing in them (#1289)** (7e977ad)
- **fix: make the auto-apply e2e test auto-apply again (#1282)** (18b891c)
- **fix: offer the auto-apply mode on the bulk-update and autodiscovery pages (#1277)** (78e3eb5)
- **fix: pin js-yaml past the omap CPU-consumption advisory (#1278)** (ba57e76)
- **fix: let scrolling up disengage log follow (#1273)** (f9384ec)
- **fix: engage log follow when a confirmed run starts applying (#1272)** (4b866ae)
- **fix(1263): gate the release chain on a quality aggregator (#1264)** (af35548)
- **fix: group multi-part report strings explicitly (#1262)** (ca87f0f)
- **fix(1260): pin the Go toolchain floor in every module (#1261)** (d25ebab)
- **fix(1257): the register review must scan unfixed findings too (#1259)** (947267c)
- **fix(1251): retry transient offer downloads in pricegen (#1252)** (49fb5c2)

### Tests
- **test(1297): cover the orchestrators and wiring lines shipped in v1.4.0 (#1305)** (301571e)
- **test(1253): cover the restore paths a real deployment actually hits (#1268)** (6e09264)
- **test(1253): real e2e coverage for the undelete surface (#1267)** (b36d953)

### Docs
- **docs(1311): stop hardcoding the current release in prose (#1312)** (79c5643)
- **docs(1298): close the discoverability gaps found in the v1.4.0 review (#1310)** (058bfb5)

### Chore
- **refactor: drop the invented resource name from the GPG key gate (#1291)** (2be6780)
- **chore: gofmt the Go modules and gate formatting in CI (#1285)** (4ac3836)

_Recap by [Repo Wrapped](https://repowrapped.com/gh/mattrobinsonsre/terrapod?utm_source=github-action)._