Add semantic release with automatic versioning, CHANGELOG, and VERSION file

Agent-Logs-Url: https://github.com/christianlouis/dmarq/sessions/00a0c62f-f046-4f73-9c6a-79073906264c

Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>

docs/changelog.md

@@ -5,47 +5,45 @@ All notable changes to DMARQ will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
-## [1.0.0] - 2025-04-15
+This changelog is automatically maintained by
+[python-semantic-release](https://python-semantic-release.readthedocs.io/).
+See the root [CHANGELOG.md](https://github.com/christianlouis/dmarq/blob/main/CHANGELOG.md)
+for the canonical version.
+
+## [0.3.0] - 2026-02-09
+
+### Added
+- Database persistence with SQLAlchemy ORM (SQLite and PostgreSQL support)
+- Database migrations with Alembic
+- Persistent storage replacing in-memory data store
+
+### Security
+- Fixed missing authentication on admin endpoints (CRITICAL)
+- Replaced default SECRET_KEY with secure auto-generation (CRITICAL)
+- Replaced ElementTree with defusedxml to prevent XXE attacks (HIGH)
+- Fixed IMAP credentials exposure in URL query parameters (HIGH)
+- Added multi-layer file upload validation (HIGH)
+- Added security headers middleware (CSP, X-Frame-Options, HSTS, etc.) (MEDIUM)
+- Restricted CORS configuration (MEDIUM)
+- Sanitized error responses to prevent information disclosure (MEDIUM)
+- Added comprehensive security test suite
+
+## [0.2.0] - 2026-01-15
+
+### Added
+- IMAP integration for automatic DMARC report fetching
+- Background task scheduler for periodic mailbox polling
+- IMAP configuration UI with connection testing
+- Manual sync trigger and status indicators
+
+## [0.1.0] - 2025-12-01
 
 ### Added
 - Initial release of DMARQ
-- Domain management with basic health checks
-- DMARC report processing (aggregate and forensic)
-- Dashboard with compliance rate visualization
-- IMAP integration for automatic report collection
-- User authentication and management
-- SQLite and PostgreSQL database support
-- Docker deployment option
-- Basic alert system for compliance issues
-- API for third-party integration
-- Documentation site
-
-### Security
-- Secure password storage with bcrypt
-- JWT-based authentication for API
-- Rate limiting for API endpoints
-- Input validation for all user inputs
-
-## [0.9.0] - 2025-03-01
-
-### Added
-- Beta release for early testing
-- All core functionality implemented
-- Limited to SQLite database only
-
-### Fixed
-- Multiple parser bugs for different report formats
-- UI responsiveness issues on mobile devices
-
-## [0.8.0] - 2025-02-15
-
-### Added
-- Alpha release for internal testing
-- Basic DMARC report parsing
-- Simple domain management
-- Initial dashboard design
-
-### Known Issues
-- Limited support for forensic reports
-- Missing authentication features
-- No alerting capabilities
+- DMARC XML report parsing (supports XML, ZIP, and GZIP formats)
+- In-memory storage of report data for up to 5 domains
+- Simple dashboard UI showing DMARC compliance statistics
+- Report upload via web interface
+- Domain overview with compliance rates and email statistics
+- Docker Compose deployment support
+- FastAPI backend with Jinja2 templates and Tailwind CSS