chore(main): release 0.39.0

[github-actions]

🤖 I have created a release beep boop

0.39.0 (2026-07-22)

⚠ BREAKING CHANGES

• attribution: --author-attribution-cluster-annotation-key is renamed to --author-attribution-audit-route-annotation-key, and the chart value attribution.clusterAnnotationKey to attribution.auditRouteAnnotationKey. There is no deprecated alias: an operator still passing the old flag fails to start. The fact-key infix changes from cluster: to route: with no dual-read, so a rolling upgrade has a TTL-bounded window where events commit as the configured committer.
• api: a resync no longer deletes Git documents whose resources are absent from the desired snapshot. Set spec.prune.mode: always on a GitTarget that needs full desired-state convergence. Deleting a resource in the cluster still deletes its file. Ships in the same release as the rule-kind scope change, which it exists to make non-destructive.
• api: ClusterWatchRule is cluster-scope-only and WatchRule.spec.sourceNamespace moved to spec.rules[].sourceNamespace. A namespaced ClusterWatchRule becomes a WatchRule in the tenant namespace; its namespaced items become sourceNamespace: "*" (or explicit names). A target that declares no allowedSourceNamespaces admits NOTHING to a "*" item, so converting without also declaring that policy narrows production data. See docs/UPGRADING.md.

Features

• api: add GitTarget.spec.prune.mode and stop inferring deletions (#260) (f103ca8)
• api: scope by kind — per-item WatchRule source namespaces, cluster-only ClusterWatchRule (#259) (982e816)
• make unresolved attribution explicit and harden operations (#257) (e41f69c)

Bug Fixes

• attribution: partition author facts by declared audit route (#263) (0d61128)
• watch: a cluster-wide selection must not collapse named-namespace streams (#255) (10a530a)
• watch: enforce ClusterProvider admission wherever rules compile (#258) (82d0c39)

Documentation

• five-PR plan for WatchRule source namespaces, plus PR 1 — namespace-scoped resync (#254) (a60590b)

---

This PR was generated with Release Please. See documentation.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

[github-actions]

🤖 Created releases:

• v0.39.0

🌻