chore(release): 1.3.2

CHANGELOG.md

@@ -7,6 +7,8 @@ All notable changes to KTMS are listed here. The format follows
 
 ## [Unreleased]
 
+## [1.3.2] - 2026-10-24
+
 ### Fixed
 - The release publishes the images, the chart and the Homebrew formulas again: GoReleaser takes a
   tap token only as exactly `{{ .Env.HOMEBREW_TAP_TOKEN }}`. 1.3.0 and 1.3.1 have binaries on
@@ -283,7 +285,8 @@ Backport on the 0.12 line.
 Releases before 0.10.0 are described on the
 [GitHub releases page](https://github.com/ai-process/ktms/releases).
 
-[Unreleased]: https://github.com/ai-process/ktms/compare/v1.3.1...HEAD
+[Unreleased]: https://github.com/ai-process/ktms/compare/v1.3.2...HEAD
+[1.3.2]: https://github.com/ai-process/ktms/compare/v1.3.1...v1.3.2
 [1.3.1]: https://github.com/ai-process/ktms/compare/v1.3.0...v1.3.1
 [1.3.0]: https://github.com/ai-process/ktms/compare/v1.2.0...v1.3.0
 [1.2.0]: https://github.com/ai-process/ktms/compare/v1.1.0...v1.2.0

README.md

@@ -260,7 +260,7 @@ kubectl create secret generic ktms-secrets \
   --from-literal=BOOTSTRAP_ADMIN_KEY="$(head -c 24 /dev/urandom | base64 | tr -d '/+=')"
 
 # 2. Install the release
-helm install ktms oci://ghcr.io/ai-process/charts/ktms --version 1.3.1 \
+helm install ktms oci://ghcr.io/ai-process/charts/ktms --version 1.3.2 \
   --set secrets.existingSecret=ktms-secrets \
   --set ingress.enabled=true \
   --set "ingress.hosts[0].host=proxy.example.com" \

SECURITY.md

@@ -21,7 +21,7 @@ build does not pass. Docker images (signature, SBOM and SLSA provenance are atta
 image; each platform manifest is signed too):
 
 ```bash
-V=v1.3.1
+V=v1.3.2
 cosign verify coyl/ktms:${V#v} \
   --certificate-identity "https://github.com/ai-process/ktms/.github/workflows/docker-publish.yml@refs/tags/$V" \
   --certificate-oidc-issuer https://token.actions.githubusercontent.com

deploy/helm/ktms/Chart.yaml

@@ -2,8 +2,8 @@ apiVersion: v2
 name: ktms
 description: "Official Helm chart for KTMS (Keystone: The Model Switchboard) — high-performance, self-hosted LLM gateway with intelligent routing, circuit breaking, and centralized encryption."
 type: application
-version: 1.3.1
-appVersion: "1.3.1"
+version: 1.3.2
+appVersion: "1.3.2"
 kubeVersion: ">=1.26.0-0"
 keywords:
   - llm

deploy/helm/ktms/README.md

@@ -25,7 +25,7 @@ kubectl create secret generic ktms-secrets \
 ### 2. Install
 
 ```bash
-helm install ktms oci://ghcr.io/ai-process/charts/ktms --version 1.3.1 \
+helm install ktms oci://ghcr.io/ai-process/charts/ktms --version 1.3.2 \
   --set secrets.existingSecret=ktms-secrets
 ```
 

plugin/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "ktms",
   "displayName": "Keystone (KTMS)",
-  "version": "1.3.1",
+  "version": "1.3.2",
   "description": "Skills for Keystone (KTMS) and light-tokenmeter, with their MCP servers: connect a service, configure routing, deploy, add a local node, migrate, report on usage, review for production",
   "author": { "name": "ai-process", "url": "https://ai-process.dev" },
   "homepage": "https://ai-process.dev/docs/ktms/",