Prepare github-delivery 1.7.1 follow-up release

[Wibias]

Summary

Prepare the patch follow-up release for the consumer-facing fixes merged since 1.7.0.

• bump package version from 1.7.0 to 1.7.1
• add the dated 1.7.1 changelog section
• include the CodeQL dependency refresh from PR chore(deps): bump the codeql-action group with 4 updates #467
• include the attributed instruction-injection / merge-intent hardening from PR fix: harden adversarial routing against injected merge intent #468
• extend the release-completeness contract to require both post-1.7.0 PRs

SemVer

PATCH: the release contains backward-compatible security/routing correctness fixes and CI dependency maintenance; it adds no new supported consumer capability and introduces no breaking contract.

Scope

Release preparation only. This PR does not create a tag, GitHub Release, or npm publication.

Validation

The branch follows the established release-PR shape used by 1.7.0: CHANGELOG.md, package.json, and the release-completeness unit test. Repository CI must pass on the exact candidate before merge.

[coderabbitai]

Important

• 🔍 Trigger review

This repository does not receive automatic reviews because it has fewer than 10 stars.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: 8cd4e8f2-c3db-477c-95d2-ce572d45825d

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}