chore: release v1.1.0 — latest tag on releases, image cleanup

- Docker `latest` tag now only set on version tags (not every push to main)
- Added cleanup job to prune old untagged container versions
- Bumped version to 1.1.0

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: 0xzerolight

.github/workflows/docker-publish.yml

@@ -24,7 +24,7 @@ jobs:
         with:
           images: ghcr.io/${{ github.repository }}
           tags: |
-            type=raw,value=latest,enable={{is_default_branch}}
+            type=raw,value=latest,enable=${{ startsWith(github.ref, 'refs/tags/v') }}
             type=ref,event=branch
             type=semver,pattern={{version}}
             type=semver,pattern={{major}}.{{minor}}
@@ -37,3 +37,16 @@ jobs:
           platforms: linux/amd64,linux/arm64
           cache-from: type=gha
           cache-to: type=gha,mode=max
+
+  cleanup:
+    needs: publish
+    runs-on: ubuntu-latest
+    permissions:
+      packages: write
+    steps:
+      - uses: actions/delete-package-versions@e5bc658cc4c965c472efe991f8beea3981499c55 # v5
+        with:
+          package-name: topic_watch
+          package-type: container
+          min-versions-to-keep: 5
+          delete-only-untagged-versions: true

docs/CHANGELOG.md

@@ -7,6 +7,8 @@ and this project adheres to [Semantic Versioning](https://semver.org/).
 
 ## [Unreleased]
 
+## [1.1.0] - 2026-04-04
+
 ### Added
 
 - OPML import/export for migrating feeds from RSS readers (FreshRSS, Miniflux, Tiny Tiny RSS)
@@ -20,6 +22,8 @@ and this project adheres to [Semantic Versioning](https://semver.org/).
 - LLM confidence and relevance thresholds to reduce false notifications (`min_confidence_threshold`, `min_relevance_threshold`)
 - Configurable LLM temperature (`llm_temperature`)
 - Semantic status colors and UI design polish (table scroll, danger button)
+- Docker image `latest` tag on GitHub releases (previously missing)
+- Automatic cleanup of old untagged container images
 
 ### Changed
 
@@ -31,6 +35,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/).
 
 - SSRF bypass via IPv6 and alternative IP encodings
 - LLM novelty detection accuracy (reasoning field, relevance scoring, below-threshold article re-examination)
+- Docker install script failing with `unauthorized` (GHCR package visibility + missing `latest` tag)
 
 ## [1.0.0] - 2026-03-20
 

pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "topic-watch"
-version = "1.0.0"
+version = "1.1.0"
 description = "Self-hosted news watchdog with AI-powered novelty detection"
 license = "GPL-3.0-or-later"
 readme = "README.md"