Merge branch 'claude/security-fix-011CUNoDXtLiN1njyUjx8XqX' into main

Author: Frodo Podschwadek

CHANGELOG.md

@@ -5,6 +5,32 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [1.7.0] - 2025-10-22
+
+> With few ambitions, most people allowed efficient machines to perform everyday tasks for them.
+
+### Added
+
+- Enabled Ansible pipelining for 300-500% performance improvement in playbook execution.
+- Added performance profiling callbacks (`profile_tasks`, `timer`) for task execution visibility.
+- Implemented BuildKit cache mounts for `/var/cache/apk` and `/root/.cache/pip` in Dockerfile for faster rebuilds.
+- Added GitHub Actions cache support to Docker build workflows for 70-90% faster CI/CD builds.
+- Introduced comprehensive cleanup steps in Dockerfile to reduce image size by 50-100MB.
+
+### Changed
+
+- Increased Ansible fork count from 5 to 20 for improved parallel task execution (4-20x faster for multi-container deployments).
+- Switched fact caching from `community.general.memcached` to `jsonfile` for persistent caching without external dependencies.
+- Reduced multi-platform Docker builds from 7 to 2 architectures (linux/amd64, linux/arm64) for 50-70% faster release builds.
+- Migrated Docker image build workflow to `docker/build-push-action@v6` with layer caching support.
+- Replaced semicolons with `&&` in Dockerfile RUN commands for better error propagation.
+- Removed `NODE_OPTIONS=--openssl-legacy-provider` workaround from documentation build process.
+
+### Fixed
+
+- Set task timeout to 3600 seconds (1 hour) to prevent infinite task hangs.
+- Updated [vite](https://github.com/vitejs/vite) from 7.0.7 to 7.0.8 to address security vulnerability GHSA-93m4-6634-74q7 (moderate severity path traversal issue allowing server.fs.deny bypass on Windows).
+
 ## [1.6.8] - 2025-10-06
 
 > Generalities are intellectually necessary evils.