chore(release): cut v0.25.0-beta.1 (#830)

Rehearsal for v0.25.0: every mechanism this release runs for the first
time (CodeLLDB staging and the five platform packages' first publish,
the Docker image attestation, PyPI trusted publishing, provenance over
14 tarballs, Highlights-mode release notes) runs here first, under the
npm beta dist-tag with Docker's latest and the PyPI default untouched.

- Collate the 117 changelog.d fragments into the release section.
- Reconcile against git log v0.24.2..HEAD: add the four fixes merged
  before the fragment gate and never written down (#501, #502, #529,
  #530) and the dev_server_status description fix (#539/#540); append
  the issue number to 26 entries that cited none.
- Credit @pikujs (#714), @Finomosec (#395) and @Newer1107 (#540).
- Add a Highlights block; the section is 126 K characters, so the
  release page posts the Highlights and a link (release-notes.mjs).
- Versions: root + 13 workspace packages to 0.25.0-beta.1 (the five
  codelldb platform packages stay on the CodeLLDB pin, 1.11.8); the
  launcher's pyproject to the same string.
- SECURITY.md supports 0.25.x; README banner, ROADMAP date and the
  architecture version history name v0.25.0.

Co-authored-by: JF <john.franklin@gmail.com>
Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

Author: 3 people

CHANGELOG.md

@@ -45,7 +45,7 @@ Microsoft's [DebugMCP](https://github.com/microsoft/DebugMCP) exposes VS Code's
 
 If your agent runs in a terminal, a pipeline, or a cloud sandbox — or needs to attach to a process on another machine — you want mcp-debugger.
 
-> 🆕 **v0.24.0** — **C/C++ debugging** lands (CodeLLDB: prebuilt binaries, auto-compiled single sources, attach by PID), alongside statement/function-addressed breakpoints, logpoints, `restart_debugging`, breakpoint management tools, buffered `get_output`, break-on-uncaught-exceptions by default, a read-only IDE mirror (`expose_session`), default-on secret redaction, and a multi-language Docker image (Python, JS, Java, Rust, C/C++ native; Ruby attach). See the [CHANGELOG](./CHANGELOG.md) for the full release history.
+> 🆕 **v0.25.0** — **COBOL debugging** lands (GnuCOBOL + CodeLLDB, with COBOL-shaped variables, PERFORM-aware stepping and paragraph breakpoints), and **Rust and C/C++ work out of the box on every platform npm installs** now that CodeLLDB ships as per-platform packages. Also new: `mcp-debugger doctor`, a Kubernetes debugging recipe, an HTTP transport locked to `127.0.0.1` with Host/Origin checks, launch responses that say how a run ended, exit codes for Go and Docker JavaScript, and a lighter startup. See the [CHANGELOG](./CHANGELOG.md) for the full release history.
 
 ## ✨ Key Features
 

README.md

@@ -1,6 +1,6 @@
 # Roadmap
 
-_Last updated: 2026-08-22 (v0.24.2). This file is refreshed at each release._
+_Last updated: 2026-09-29 (v0.25.0). This file is refreshed at each release._
 
 mcp-debugger gives AI agents step-through debugging over the Model Context Protocol: 28 tools across nine language adapters (Python, JavaScript/TypeScript, Ruby, Rust, Go, Java, .NET, C/C++, COBOL), plus a mock adapter for testing. This roadmap answers two questions we hear from people evaluating the project: **is the tool surface stable enough to build on?** and **what's left before 1.0?**
 

ROADMAP.md

@@ -4,8 +4,8 @@
 
 | Version | Supported          |
 | ------- | ------------------ |
-| 0.24.x  | :white_check_mark: |
-| < 0.24  | :x:                |
+| 0.25.x  | :white_check_mark: |
+| < 0.25  | :x:                |
 
 ## Reporting a Vulnerability