chore(release): extend version coverage and complete gateway changelog

release.sh now also bumps and verifies docs/Doxyfile PROJECT_NUMBER and the
QUALITY_DECLARATION.md current-version references, which previous releases
missed (Doxyfile was 0.1.0, the quality declaration 0.3.0); both are now
0.5.0 and validated by verify.

Gateway 0.5.0 changelog: add the GET /apps/{id}/belongs-to endpoint, the
pool-backed TopicDataProvider plus /health subscription-executor stats, and
the updates x-medkit.phase field; trim a stray out-of-scope sentence from the
SchemaWriter note.

Author: bburda

QUALITY_DECLARATION.md

@@ -33,7 +33,7 @@ All packages in the repository share the same version number.
 
 ### Version Stability [1.ii]
 
-The current version is **0.3.0**.
+The current version is **0.5.0**.
 The package follows semver; the pre-1.0 version reflects that the public API may still evolve
 based on early adopter feedback, not a lack of quality infrastructure.
 The 1.0.0 release is planned after the API has been validated through pilot deployments.
@@ -225,7 +225,7 @@ Security issues can be reported via GitHub Security Advisories on the
 
 | Requirement | Status | Notes |
 |---|---|---|
-| Version policy | Met | Semver, all packages at 0.3.0 |
+| Version policy | Met | Semver, all packages at 0.5.0 |
 | Stable version (>=1.0.0) | Caveat | Pre-1.0; API versioned, 1.0.0 planned post-pilot |
 | Change requests | Met | All changes via PR |
 | CI | Met | Build + test + coverage on every PR |
@@ -237,6 +237,6 @@ Security issues can be reported via GitHub Security Advisories on the
 | Platform support | Met | Ubuntu Noble / ROS 2 Jazzy + Ubuntu Jammy / ROS 2 Humble + Ubuntu Resolute / ROS 2 Lyrical |
 | Security policy | Met | REP-2006 compliant |
 
-**Caveat:** Version is 0.3.0 (pre-1.0.0, requirement 1.ii). The REST API is versioned (`/api/v1/`)
+**Caveat:** Version is 0.5.0 (pre-1.0.0, requirement 1.ii). The REST API is versioned (`/api/v1/`)
 and the package meets all other Level 3 requirements. The 1.0.0 release is planned after
 API validation through pilot deployments.

docs/Doxyfile

@@ -2,7 +2,7 @@
 # Used by Breathe extension to integrate with Sphinx
 
 PROJECT_NAME           = "ros2_medkit"
-PROJECT_NUMBER         = "0.1.0"
+PROJECT_NUMBER         = "0.5.0"
 PROJECT_BRIEF          = "SOVD Gateway for ROS 2"
 
 # Input settings

scripts/release.sh

@@ -33,6 +33,8 @@ SRC_DIR="${REPO_ROOT}/src"
 VERSION_HPP="${SRC_DIR}/ros2_medkit_gateway/include/ros2_medkit_gateway/core/version.hpp"
 CONF_PY="${REPO_ROOT}/docs/conf.py"
 DOCS_PYPROJECT="${REPO_ROOT}/docs/pyproject.toml"
+DOXYFILE="${REPO_ROOT}/docs/Doxyfile"
+QUALITY_DECL="${REPO_ROOT}/QUALITY_DECLARATION.md"
 
 usage() {
     echo "Usage: $0 {bump <version>|verify [<version>]}"
@@ -107,6 +109,23 @@ cmd_bump() {
         echo "  docs/pyproject.toml: -> ${target_version}"
     fi
 
+    # Update docs/Doxyfile PROJECT_NUMBER
+    if [ -f "$DOXYFILE" ]; then
+        sed -i "s|\(PROJECT_NUMBER[[:space:]]*=[[:space:]]*\)\"[0-9]\+\.[0-9]\+\.[0-9]\+\"|\1\"${target_version}\"|" "$DOXYFILE"
+        echo "  docs/Doxyfile PROJECT_NUMBER: -> ${target_version}"
+    fi
+
+    # Update QUALITY_DECLARATION.md current-version references (leave the
+    # ">=1.0.0" stability-policy mentions untouched via anchored patterns)
+    if [ -f "$QUALITY_DECL" ]; then
+        sed -i \
+            -e "s|current version is \*\*[0-9]\+\.[0-9]\+\.[0-9]\+\*\*|current version is **${target_version}**|" \
+            -e "s|all packages at [0-9]\+\.[0-9]\+\.[0-9]\+|all packages at ${target_version}|" \
+            -e "s|Version is [0-9]\+\.[0-9]\+\.[0-9]\+|Version is ${target_version}|" \
+            "$QUALITY_DECL"
+        echo "  QUALITY_DECLARATION.md: -> ${target_version}"
+    fi
+
     echo ""
     echo "Bumped ${count} packages + version.hpp + docs to ${target_version}."
     echo ""
@@ -177,6 +196,32 @@ cmd_verify() {
         versions_seen+=("$pyproject_version")
     fi
 
+    # Check docs/Doxyfile PROJECT_NUMBER
+    if [ -f "$DOXYFILE" ]; then
+        local doxy_version
+        doxy_version=$(grep -oP 'PROJECT_NUMBER\s*=\s*"\K[0-9]+\.[0-9]+\.[0-9]+' "$DOXYFILE" || echo "unknown")
+        if [ -n "$expected_version" ] && [ "$doxy_version" != "$expected_version" ]; then
+            echo "  MISMATCH: docs/Doxyfile PROJECT_NUMBER is ${doxy_version}, expected ${expected_version}"
+            all_ok=false
+        else
+            echo "  OK: docs/Doxyfile PROJECT_NUMBER = ${doxy_version}"
+        fi
+        versions_seen+=("$doxy_version")
+    fi
+
+    # Check QUALITY_DECLARATION.md current version
+    if [ -f "$QUALITY_DECL" ]; then
+        local qd_version
+        qd_version=$(grep -oP 'current version is \*\*\K[0-9]+\.[0-9]+\.[0-9]+' "$QUALITY_DECL" || echo "unknown")
+        if [ -n "$expected_version" ] && [ "$qd_version" != "$expected_version" ]; then
+            echo "  MISMATCH: QUALITY_DECLARATION.md current version is ${qd_version}, expected ${expected_version}"
+            all_ok=false
+        else
+            echo "  OK: QUALITY_DECLARATION.md current version = ${qd_version}"
+        fi
+        versions_seen+=("$qd_version")
+    fi
+
     # Check consistency if no expected version given
     if [ -z "$expected_version" ]; then
         local unique_versions

src/ros2_medkit_gateway/CHANGELOG.rst

@@ -51,9 +51,7 @@ Changelog for package ros2_medkit_gateway
   ``parameters`` / ``error`` (``GET .../scripts/{id}/executions/{eid}``) and
   the script ``parameters_schema`` field (``GET .../scripts/{id}``). Clients
   that tested ``field === null`` or relied on the key always being present must
-  treat an absent key the same as ``null``. The ``rtmaps_medkit`` variant is
-  explicitly NOT covered by this PR - its handlers continue to run on the
-  pre-typed HandlerContext surface and will be migrated separately
+  treat an absent key the same as ``null``
   (`#403 <https://github.com/selfpatch/ros2_medkit/issues/403>`_)
 * Synchronous operation-execution service-call failures
   (``POST /api/v1/{entity-path}/operations/{id}/executions`` when the underlying
@@ -102,6 +100,9 @@ Changelog for package ros2_medkit_gateway
 * All-or-nothing fragment semantics: a single malformed or forbidden fragment fails the entire load / reload and keeps the previously-loaded manifest active (`#376 <https://github.com/selfpatch/ros2_medkit/issues/376>`_)
 * ``ManifestParser::parse_fragment_file`` convenience entrypoint that injects a synthetic ``manifest_version`` header when the fragment omits one
 * See ``design/plugin_entity_notifications.rst`` for the lifecycle, merge-rule, and plugin-side write-contract walkthrough
+* New ``GET /api/v1/apps/{app_id}/belongs-to`` discovery endpoint returning the areas and components an app belongs to; the ``belongs-to`` URI is advertised on ``GET /apps/{app_id}`` (`#196 <https://github.com/selfpatch/ros2_medkit/issues/196>`_)
+* Pool-backed ``TopicDataProvider`` for live topic data: a shared subscription pool owned by a single-writer executor node, with LRU and idle eviction and publisher-QoS matching, replacing per-request subscriptions. Pool and executor health are surfaced as the ``x-medkit-subscription-executor`` vendor-extension stats on ``GET /api/v1/health``, read atomically so ``/health`` never blocks under load (`#384 <https://github.com/selfpatch/ros2_medkit/issues/384>`_)
+* ``GET /api/v1/updates/{id}/status`` exposes the update lifecycle ``phase`` under the response ``x-medkit`` object
 * Contributors: @bburda, @mfaferek93, @eclipse0922
 
 0.4.0 (2026-03-20)