chore(main): release 1.7.0

[devsecninja-release-please]

🤖 I have created a release beep boop

1.7.0 (2026-06-16)

Features

• deps: update dependency wrangler ( 4.95.0 ➔ 4.97.0 ) [automerge] (#158) (3d14dd6)
• deps: update dependency wrangler ( 4.97.0 ➔ 4.98.0 ) [automerge] (#162) (c04ee2c)
• deps: update dependency wrangler ( 4.98.0 ➔ 4.100.0 ) [automerge] (#174) (416eecb)
• renovate: add digest-pinned container image custom manager (#172) (aa43930)
• renovate: branch-automerge dotfiles devcontainer digest updates without tests (#161) (5657813)
• renovate: merge dotfiles devcontainer digests anytime and fix dprint failure (#164) (a0618e2)

Bug Fixes

• github-release: update mise ( v2026.5.11 ➔ v2026.5.14 ) [automerge] (#153) (56550d3)
• github-release: update mise ( v2026.5.14 ➔ v2026.5.15 ) [automerge] (#159) (334758a)
• github-release: update mise ( v2026.5.15 ➔ v2026.5.16 ) [automerge] (#167) (7b793ad)
• make go-lint version optional since we don't always lint go (61a23c2)
• mise: update tool lefthook ( 2.1.6 ➔ 2.1.8 ) [automerge] (#154) (947b145)
• mise: update tool lefthook ( 2.1.8 ➔ 2.1.9 ) [automerge] (#169) (566ce48)
• mise: update tool pipx:checkov ( 3.2.529 ➔ 3.2.530 ) [automerge] (#168) (11841c5)
• renovate: add minimumReleaseAge 0 to autoMerge configuration (40ac871)
• renovate: expand CODEOWNERS bot-bump exceptions to cover manifests (df89220)
• temp update base.json5 to allow unsafe executions (652fcb3)

---

This PR was generated with Release Please. See documentation.