chore(main): release 0.70.3

.release-please-manifest.json

@@ -1,3 +1,3 @@
 {
-  ".": "0.70.2"
+  ".": "0.70.3"
 }

CHANGELOG.md

@@ -1,5 +1,14 @@
 # Changelog
 
+## [0.70.3](https://github.com/adea-ai/cortana/compare/v0.70.2...v0.70.3) (2026-10-24)
+
+
+### Maintenance
+
+* **deps:** bump pypdf from 6.21.1 to 6.21.2 in the uv group across 1 directory ([#2627](https://github.com/adea-ai/cortana/issues/2627)) ([005d75f](https://github.com/adea-ai/cortana/commit/005d75f6ed35c6019f2b58802a1fa8a159228137))
+* **deps:** update taiki-e/install-action digest to 1e29709 ([#2625](https://github.com/adea-ai/cortana/issues/2625)) ([d0e6046](https://github.com/adea-ai/cortana/commit/d0e6046358478c9be4534541fb1193daeb7af682))
+* **web:** adopt @adea-ai/ui 0.146.7; strict checks pending ([#2617](https://github.com/adea-ai/cortana/issues/2617)) ([d3a6977](https://github.com/adea-ai/cortana/commit/d3a69772e4a232bac55aabcac401356df63fe476))
+
 ## [0.70.2](https://github.com/adea-ai/cortana/compare/v0.70.1...v0.70.2) (2026-10-23)
 
 

Cargo.toml

@@ -67,7 +67,7 @@ libc = "0.2"
 
 [package]
 name = "cortana"
-version = "0.70.2"
+version = "0.70.3"
 edition.workspace = true
 rust-version.workspace = true
 description = "Local-first, agent-native second brain with configurable ingestion and hybrid retrieval"

apps/desktop/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cortana/desktop",
-  "version": "0.70.2",
+  "version": "0.70.3",
   "private": true,
   "type": "module",
   "scripts": {

apps/desktop/src-tauri/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "cortana-desktop"
-version = "0.70.2"
+version = "0.70.3"
 edition = "2024"
 rust-version = "1.88"
 description = "Tauri control plane for the Cortana local second brain"

apps/desktop/src-tauri/tauri.conf.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://schema.tauri.app/config/2",
   "productName": "Cortana",
-  "version": "0.70.2",
+  "version": "0.70.3",
   "identifier": "ai.cortana.desktop",
   "build": {
     "beforeDevCommand": "bun run prepare:resources && bun run prepare:sidecar && bun run --cwd ../web dev",

apps/web/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cortana/web",
-  "version": "0.70.2",
+  "version": "0.70.3",
   "private": true,
   "type": "module",
   "scripts": {

crates/core/Cargo.toml

@@ -1,7 +1,7 @@
 [package]
 name = "cortana-core"
 description = "Core storage, memory, and ingestion engine for the Cortana second brain"
-version = "0.70.2"
+version = "0.70.3"
 edition.workspace = true
 rust-version.workspace = true
 license.workspace = true

crates/mcp/Cargo.toml

@@ -1,7 +1,7 @@
 [package]
 name = "cortana-mcp"
 description = "Model Context Protocol server surface for the Cortana second brain"
-version = "0.70.2"
+version = "0.70.3"
 edition.workspace = true
 rust-version.workspace = true
 license.workspace = true

crates/retrieval/Cargo.toml

@@ -1,7 +1,7 @@
 [package]
 name = "cortana-retrieval"
 description = "Embedding, retrieval, and answer engine for the Cortana second brain"
-version = "0.70.2"
+version = "0.70.3"
 edition.workspace = true
 rust-version.workspace = true
 license.workspace = true

crates/server/Cargo.toml

@@ -1,7 +1,7 @@
 [package]
 name = "cortana-server"
 description = "HTTP API, service runtime, and relay surfaces for the Cortana second brain"
-version = "0.70.2"
+version = "0.70.3"
 edition.workspace = true
 rust-version.workspace = true
 license.workspace = true

docs/desktop-ux-audit.md

@@ -346,7 +346,7 @@ and screenshots use settled media-query geometry.
 The same acceptance script can validate an immutable published renderer by setting
 `CORTANA_KNOWLEDGE_WEB_DIR` to the extracted package's `share/cortana/web` directory and recording
 the release tag in `CORTANA_KNOWLEDGE_REVISION`. The published-package workflow does this on each
-supported target and sets `CORTANA_KNOWLEDGE_RUN_LARGE=true` for the current `v0.70.2` release, <!-- x-release-please-version -->
+supported target and sets `CORTANA_KNOWLEDGE_RUN_LARGE=true` for the current `v0.70.3` release, <!-- x-release-please-version -->
 whose bundle includes the large fixture. The current source/preview lane records the same bounded
 large-corpus screenshots and resource observations. Its report and screenshots are uploaded with the package evidence; any responsive or
 accessibility failure remains a packaged-release failure until a new release is built and checked.

docs/evaluation.md

@@ -352,7 +352,7 @@ resizes.
 
 The published-package acceptance workflow also extracts the exact release bundle's
 `share/cortana/web` directory and runs the standard document/graph acceptance against that immutable
-renderer through a loopback static server. The current `v0.70.2` bundle includes the provider-free <!-- x-release-please-version -->
+renderer through a loopback static server. The current `v0.70.3` bundle includes the provider-free <!-- x-release-please-version -->
 large-corpus fixture, so the workflow sets `CORTANA_KNOWLEDGE_RUN_LARGE=true` and records its bounded
 document/graph screenshots and resource measurements. The current source/preview lane also sets the
 large fixture explicitly. The package lane still checks keyboard operation, responsive layout,

docs/getting-started.md

@@ -23,7 +23,7 @@ The installer preserves an existing configuration, index, backups, and secrets.
 authorize an account, download a connector corpus, start a sync, or enable a scheduler by itself.
 
 Before you begin, use a supported release package for your operating system and CPU and keep at
-least one backup location available. The current v0.70.2 release publishes Linux x86_64, Windows <!-- x-release-please-version -->
+least one backup location available. The current v0.70.3 release publishes Linux x86_64, Windows <!-- x-release-please-version -->
 x86_64, and macOS arm64 Desktop packages plus macOS/Linux core archives. The macOS Desktop package
 is ad-hoc because Developer ID signing and notarization credentials are not configured, so it is
 downloadable but not trusted Gatekeeper distribution; macOS users should use the core archive or
@@ -37,7 +37,7 @@ non-notarized build may be rejected by Gatekeeper; follow the host-acceptance no
 
 1. **Download Cortana Desktop.** Open the [latest GitHub release](https://github.com/adea-ai/cortana/releases/latest)
    and choose the installer for your operating system and CPU. The current protected release is
-   **v0.70.2**; <!-- x-release-please-version --> [Release history](releases.md) records its verifier state and remaining trust gate.
+   **v0.70.3**; <!-- x-release-please-version --> [Release history](releases.md) records its verifier state and remaining trust gate.
 2. **Install and launch.** Approve the optional tooling that Cortana offers to install. Choose a
    local Qwen-compatible embedding runtime if you want local embeddings; choose a cloud provider
    if you do not want local model tooling.

docs/ingestion.md

@@ -4,7 +4,7 @@ The provider-neutral connector and reconciliation contract is [Connector contrac
 
 ## Current release boundary
 
-The current protected source and published package are `v0.70.2`. <!-- x-release-please-version --> This release retains the bounded
+The current protected source and published package are `v0.70.3`. <!-- x-release-please-version --> This release retains the bounded
 connector, cursor, cache, retry, cancellation, and deletion-safety contracts described below. It
 does not authorize accounts, enable disabled sources, reconcile the index, or install recurring
 sync; source validation remains an explicit, bounded operator gate.

docs/integrations.md

@@ -15,7 +15,7 @@ configuration only.
 
 ## Current release boundary
 
-The current protected source and published package are `v0.70.2`. <!-- x-release-please-version --> The portable skill, MCP, HTTP,
+The current protected source and published package are `v0.70.3`. <!-- x-release-please-version --> The portable skill, MCP, HTTP,
 and CLI contracts below are version-aligned with that release. Installing the skill does not expose
 credentials, authorize a source, enable recurring sync, or change client configuration implicitly.
 

docs/memory.md

@@ -9,7 +9,7 @@ retain.
 
 ## Current release boundary
 
-The current protected source and published package are `v0.70.2`. <!-- x-release-please-version --> Native memory remains the only
+The current protected source and published package are `v0.70.3`. <!-- x-release-please-version --> Native memory remains the only
 supported memory engine: it is local, explicit-write, ACL-filtered, auditable, exportable, and
 separate from source knowledge. External memory providers are not product dependencies.
 

docs/query.md

@@ -7,7 +7,7 @@ Cortana separates agent retrieval from human-facing answers.
 
 ## Current release boundary
 
-The current protected source and published package are `v0.70.2`. <!-- x-release-please-version --> Query-only retrieval, native
+The current protected source and published package are `v0.70.3`. <!-- x-release-please-version --> Query-only retrieval, native
 memory separation, ACL filtering, bounded context, citations, cache invalidation, and extractive
 fallback remain the safe defaults; provider-backed synthesis is still an explicit opt-in.
 

docs/releases.md

@@ -9,11 +9,11 @@ single-package flow. The following patch release reconciles the Release Please
 manifest, Rust crate, Python package, web application, and lockfile versions
 under the automated manifest flow.
 
-## Current release: v0.70.2 <!-- x-release-please-version -->
+## Current release: v0.70.3 <!-- x-release-please-version -->
 
 Download the Desktop app or a matching core archive from the
 [latest GitHub release](https://github.com/adea-ai/cortana/releases/latest).
-The current release is `v0.70.2`. <!-- x-release-please-version -->
+The current release is `v0.70.3`. <!-- x-release-please-version -->
 
 This release completes the M11 cross-device and managed-mode architecture and the M13
 build-path and performance work: the device identity and key hierarchy (`cortana identity`),

eval/desktop-acceptance-private.example.json

@@ -131,7 +131,7 @@
     ]
   },
   "release": {
-    "version": "0.70.2",
+    "version": "0.70.3",
     "release_digest": "sha256:0000000000000000000000000000000000000000000000000000000000000000",
     "source": "published-release-assets"
   },

eval/live-manifest.example.json

@@ -1,6 +1,6 @@
 {
   "version": 2,
-  "release_version": "0.70.2",
+  "release_version": "0.70.3",
   "corpus": {
     "id": "replace-with-approved-corpus-id",
     "revision": "replace-with-corpus-revision",

eval/relationship-quality-private.example.json

@@ -1,6 +1,6 @@
 {
   "contract_version": "cortana.relationship-quality-private.v3",
-  "release_version": "0.70.2",
+  "release_version": "0.70.3",
   "approved": false,
   "raw_data_location": "external-encrypted-store",
   "graph_activation_authorized": false,

pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "cortana-brain"
-version = "0.70.2"
+version = "0.70.3"
 description = "Local-first, agent-native second brain with configurable ingestion and hybrid retrieval."
 readme = "README.md"
 requires-python = ">=3.11"

src/cortana/__init__.py

@@ -1,3 +1,3 @@
 """Cortana second-brain platform."""
 
-__version__ = "0.70.2"  # x-release-please-version
+__version__ = "0.70.3"  # x-release-please-version