chore: release 0.5.6

Author: erichare

CHANGELOG.md

@@ -9,6 +9,27 @@ release — they will be called out under **Changed** below.
 
 ## [Unreleased]
 
+## [0.5.6] — 2026-07-02
+
+**Release metadata + dependency refresh.** 0.5.6 moves the project-owned
+package manifests, lockfiles, CLI/web runtime constants, README badge, docs
+site metadata, and release-note pointers from 0.5.4 to 0.5.6 so the shipped
+artifacts agree with the release tag. This release also carries the dependency
+and GitHub Actions refreshes that landed after v0.5.5. There is **no HTTP
+wire-contract change**, **no data migration**, and **no Docker runtime behavior
+change**.
+
+### Changed
+
+- **Refreshed dependency and workflow pins across the monorepo.** The root
+  toolchain, web app, TypeScript runtime, docs site, and GitHub Actions
+  workflows have been updated to the current Dependabot-reviewed versions on
+  `main`.
+- **Aligned release-facing version metadata at 0.5.6.** The previous v0.5.5 tag
+  shipped without moving the manifests off 0.5.4; this release corrects the
+  version fields and visible app/CLI version strings before cutting the new
+  tag.
+
 ## [0.5.4] — 2026-06-10
 
 **Beta-feedback release.** Every change in 0.5.4 responds to first-wave beta
@@ -1429,7 +1450,8 @@ These were scoped for 0.1.0 but deferred to keep the release focused:
   flow.
 - Discoverability tooltips + "What's new in 0.1.0" modal in the web UI.
 
-[Unreleased]: https://github.com/datastax/ai-workbench/compare/v0.5.4...HEAD
+[Unreleased]: https://github.com/datastax/ai-workbench/compare/v0.5.6...HEAD
+[0.5.6]: https://github.com/datastax/ai-workbench/compare/v0.5.5...v0.5.6
 [0.5.4]: https://github.com/datastax/ai-workbench/compare/v0.5.3...v0.5.4
 [0.5.3]: https://github.com/datastax/ai-workbench/compare/v0.5.2...v0.5.3
 [0.5.2]: https://github.com/datastax/ai-workbench/compare/v0.5.1...v0.5.2

README.md

@@ -1,6 +1,6 @@
 # AI Workbench
 
-[![Status: Beta · v0.5.4](https://img.shields.io/badge/status-Beta%20%C2%B7%20v0.5.4-9d688f)](./CHANGELOG.md)
+[![Status: Beta · v0.5.6](https://img.shields.io/badge/status-Beta%20%C2%B7%20v0.5.6-9d688f)](./CHANGELOG.md)
 [![CI](https://img.shields.io/github/actions/workflow/status/datastax/ai-workbench/ci.yml?branch=main&label=CI)](https://github.com/datastax/ai-workbench/actions/workflows/ci.yml)
 [![Runtimes](https://img.shields.io/github/actions/workflow/status/datastax/ai-workbench/runtimes.yml?branch=main&label=Runtimes)](https://github.com/datastax/ai-workbench/actions/workflows/runtimes.yml)
 [![Secret scan](https://img.shields.io/github/actions/workflow/status/datastax/ai-workbench/secret-scan.yml?branch=main&label=Secret%20scan)](https://github.com/datastax/ai-workbench/actions/workflows/secret-scan.yml)
@@ -16,7 +16,7 @@ browser app, with a matching HTTP API and CLI.
 > **AI Workbench 0.5 is a public beta.** APIs, schemas, and UI surfaces
 > may still change between minor versions until 1.0. See
 > [`CHANGELOG.md`](./CHANGELOG.md) for what's in this release,
-> [`docs/whats-new-0.5.4.md`](./docs/whats-new-0.5.4.md) for the
+> [`docs/whats-new-0.5.6.md`](./docs/whats-new-0.5.6.md) for the
 > latest highlights, and
 > [`docs/whats-new-0.5.0.md`](./docs/whats-new-0.5.0.md) for the
 > narrative tour.

apps/web/package-lock.json

@@ -2,7 +2,7 @@
 	"name": "ai-workbench-web",
 	"private": true,
 	"license": "MIT",
-	"version": "0.5.4",
+	"version": "0.5.6",
 	"type": "module",
 	"description": "AI Workbench — workspace management UI (Vite + React + TypeScript).",
 	"scripts": {

apps/web/package.json

@@ -7,4 +7,4 @@
  * so the value is stable across build environments (CI, local dev,
  * Docker) and visible at code-review time.
  */
-export const APP_VERSION = "0.5.4";
+export const APP_VERSION = "0.5.6";

apps/web/src/lib/version.ts

@@ -31,21 +31,21 @@ export const WHATS_NEW_VERSION = APP_VERSION;
  */
 export const WHATS_NEW_HIGHLIGHTS: readonly WhatsNewItem[] = [
 	{
-		title: "Bulk delete + parallel ingest in the Knowledge Base Explorer",
+		title: "Maintenance refresh for the beta line",
 		summary:
-			'The document table now has checkbox multi-select (select-all follows your filter) with a "Delete selected" action and one confirmation for the whole batch — each document still passes the same row-level access check and audit as a single delete. The ingest queue also runs up to 4 files in parallel (configurable 1–8 in the queue header), with live progress on every running row.',
+			"AI Workbench 0.5.6 refreshes the web, runtime, docs-site, CLI, and GitHub Actions dependency set while keeping the HTTP API, data model, and Docker runtime behavior stable for existing 0.5.x users.",
 		link: {
-			label: "Read the 0.5.4 notes",
-			href: "https://datastax.github.io/ai-workbench/whats-new-0.5.4",
+			label: "Read the 0.5.6 notes",
+			href: "https://datastax.github.io/ai-workbench/whats-new-0.5.6",
 		},
 	},
 	{
-		title: "The Docker quickstart works on the first run",
+		title: "Release metadata is aligned again",
 		summary:
-			"Three beta-reported fixes: the data volume is created writable for the non-root container user (no more EACCES on the first workspace), Ollama on the host is reachable from the container (OLLAMA_BASE_URL default, host-gateway mapping, and a new Endpoint base URL field on LLM services), and mock workspaces seed a credential-free embedder so the zero-credential demo ingests out of the box.",
+			"The root package, web app, CLI, TypeScript runtime, docs site, lockfiles, README badge, and in-app version all now point at 0.5.6, so the release tag, published artifacts, and visible version strings agree.",
 		link: {
-			label: "Ollama-on-host setup",
-			href: "https://datastax.github.io/ai-workbench/docker",
+			label: "Full changelog",
+			href: "https://github.com/datastax/ai-workbench/blob/main/CHANGELOG.md",
 		},
 	},
 ];

apps/web/src/lib/whats-new-content.ts

@@ -0,0 +1,25 @@
+# What's new in AI Workbench 0.5.6
+
+0.5.6 is a maintenance release on the 0.5.0 **Enterprise Access Control** line.
+It refreshes the dependency and GitHub Actions baseline that landed after
+v0.5.5, and it realigns release-facing metadata that had stayed on 0.5.4. There
+is **no HTTP wire-contract change**, **no data migration**, and **no Docker
+runtime behavior change**.
+
+## Dependency and workflow refresh
+
+The root toolchain, web app, TypeScript runtime, docs site, and GitHub Actions
+workflows have all moved to the current Dependabot-reviewed versions on
+`main`. This keeps the beta line current with security and maintenance patches
+without changing the user-facing API surface.
+
+## Version metadata alignment
+
+The previous v0.5.5 tag shipped on a runtime fix, but the package manifests and
+visible version strings still said 0.5.4. 0.5.6 updates the root package, web
+app, CLI, TypeScript runtime, docs site, lockfiles, README badge, in-app version,
+and CLI version so the release tag and artifacts agree.
+
+See [`CHANGELOG.md`](../CHANGELOG.md) for the full 0.5.6 entry, and
+[`docs/whats-new-0.5.0.md`](./whats-new-0.5.0.md) for the narrative tour of the
+Enterprise Access Control release this line builds on.

docs/whats-new-0.5.6.md

@@ -1,6 +1,6 @@
 {
 	"name": "ai-workbench",
-	"version": "0.5.4",
+	"version": "0.5.6",
 	"description": "AI Workbench monorepo — polyglot green-box runtimes (TypeScript default) plus shared conformance harness and aiw-cli.",
 	"private": true,
 	"license": "MIT",