chore(main): release 1.7.0

[source-release-bot]

🤖 I have created a release beep boop

1.7.0 (2026-10-05)

Features

• accounts: service accounts, behind the CREATE_SERVICE_ACCOUNTS flag (#563, #635)
  • create, rename, disable and delete them from account settings, and grant them product access on the membership pages (#567, #564)
  • sign in with API keys: opaque sck_ keys with a CRC-32 checksum that can be revoked or set to expire, and leaked keys are revoked through GitHub secret scanning (#570, #596, #581)
  • sign in from GitHub Actions by trusting a repository's branch, tag or environment (#566, #565, #632)
• accounts: label the create_repositories flag "Create Products" (#637) (bbe9b14)
• object-browser: delete in the background with progress, in batches (#583) (b00c17e)
• products: refresh button for the object listing (#625) (bf47211)

Bug Fixes

• admin: search users as you type and list every match (#568) (73e3be9)
• api: answer unmatched /api paths with a JSON 404 (#630) (e79eb4a)
• api: remove legacy API keys and the api-keys table (#374) (f845857)
• auth: keep the session across a server action redirect, e.g. after creating a product (#604) (2572d85)
• profiles: keep deactivated products listed for their owners (#579) (1f06414)
• products: render inline markdown in product list descriptions (#603) (7e9a94a)
• seo: disallow crawling on non-production deployments (#585) (5e05878)
• seo: keep crawlers on product pages, out of the file browser (#586) (0ffe1e6)

---

This PR was generated with Release Please. See documentation.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
source-coop-ui	Ready	Preview	Oct 5, 2026 5:59pm UTC
source-cooperative	Ready	Preview	Oct 5, 2026 5:59pm UTC

[alukach]

Before merging: edit the changelog. The bug fixes below already shipped in v1.6.1. That release was cut from release/1.6.x, which starts at 4482c04 (the last commit before the service-account features, #563–#567) plus a cherry-pick of #574. Release Please doesn't know about it, because v1.6.1 isn't in main's history, so this PR still counts from v1.6.0 and lists those fixes again.

We deliberately didn't merge release/1.6.x into main. Its commits are newer than the features, so Release Please would stop at the v1.6.1 commit and never read the features, and they'd be missing from 1.7.0.

Release Please rewrites this PR every time something is pushed to main, so make these edits just before merging, on this PR's branch (release-please--branches--main--components--source-cooperative):

1. In CHANGELOG.md, remove these fix lines from the 1.7.0 section (drop the ### Bug Fixes heading too if nothing is left under it). Any fix that landed on main after v1.6.1 stays.
   • authz: allow org owners to create products without CREATE_REPOSITORIES flag (fix(authz): allow org owners to create products without CREATE_REPOSITORIES flag #508)
   • authz: limit the self-authorization shortcut to individual accounts (fix(authz): limit the self-authorization shortcut to individual accounts #562)
   • data-connections: let a connection row wrap instead of collapsing on mobile (fix(data-connections): let a connection row wrap instead of collapsing on mobile #532)
   • keep unlisted products out of search engines and profile listings (fix: keep unlisted products out of search engines and profile listings #574)
   • make organization contact email editable (fix: make organization contact email editable #293)
   • products: truncate a product's DOI instead of overflowing the row (fix(products): truncate a product's DOI instead of overflowing the row #533)
   • profiles: truncate long website links instead of wrapping them (fix(profiles): truncate long website links instead of wrapping them #531)
2. In CHANGELOG.md, add the 1.6.1 section between 1.7.0 and 1.6.0. main's changelog doesn't have it yet. Here it is exactly as it shipped:

## [1.6.1](https://github.com/source-cooperative/source.coop/compare/v1.6.0...v1.6.1) (2026-09-24)


### Bug Fixes

* **authz:** allow org owners to create products without CREATE_REPOSITORIES flag ([#508](https://github.com/source-cooperative/source.coop/issues/508)) ([b77a514](https://github.com/source-cooperative/source.coop/commit/b77a514b1a68cc4c642e33b50d84379b16c88014))
* **authz:** limit the self-authorization shortcut to individual accounts ([#562](https://github.com/source-cooperative/source.coop/issues/562)) ([4482c04](https://github.com/source-cooperative/source.coop/commit/4482c04bdf5c0579807f3e38dcf2afabadeec7ea))
* **data-connections:** let a connection row wrap instead of collapsing on mobile ([#532](https://github.com/source-cooperative/source.coop/issues/532)) ([03b8747](https://github.com/source-cooperative/source.coop/commit/03b8747e21ba64fa60e12c5a5c77ca5e37f2dd1d))
* keep unlisted products out of search engines and profile listings ([#574](https://github.com/source-cooperative/source.coop/issues/574)) ([ab5bd08](https://github.com/source-cooperative/source.coop/commit/ab5bd08de4edbbe201d02696e97a5c380921f9b5))
* make organization contact email editable ([#293](https://github.com/source-cooperative/source.coop/issues/293)) ([a14311e](https://github.com/source-cooperative/source.coop/commit/a14311eab6f8e2e9e953bbfb712f4b246bec74d3))
* **products:** truncate a product's DOI instead of overflowing the row ([#533](https://github.com/source-cooperative/source.coop/issues/533)) ([4f1fab8](https://github.com/source-cooperative/source.coop/commit/4f1fab87630eba0c673fc0fa0853d7e4fcc0b028))
* **profiles:** truncate long website links instead of wrapping them ([#531](https://github.com/source-cooperative/source.coop/issues/531)) ([5df79d5](https://github.com/source-cooperative/source.coop/commit/5df79d54e9bfff7411d9c42e22542b515e86db07))

3. Make the same edit to this PR's description. Release Please takes the GitHub release notes for v1.7.0 from the description, not from CHANGELOG.md, so remove the same seven fix lines there too.

package.json doesn't need to change: 1.7.0 is the right version whether you count from 1.6.0 or from 1.6.1.

[source-release-bot]

🤖 Release is at https://github.com/source-cooperative/source.coop/releases/tag/v1.7.0 🌻