chore(master): release 3.2.1

[github-actions]

🤖 I have created a release beep boop

3.2.1 (2026-09-02)

Bug Fixes

• ci,build: Unbreak every c23 configure failure across CI (#1161) (195f88a)
• ci: Close CPU/CI gap bucket and align dispatch registry (#1202) (749a1f4)
• ci: Execute truthful Kubernetes scoring smoke (#1181) (0b58cb5)
• ci: Fuzz harnesses name dict.cpp; setup script gets meson from PyPI (#1186) (ead8db5)
• ci: Repair pip graph and harden ORT download (#1172) (cdef422)
• containers: Repair GPU builds and model layout (#1180) (16b9f99)
• metal: Close Metal gap bucket and align runtime dispatch (#1210) (2d4e9cb)
• vmafx-tune-go: Align sidecar exit codes and batch reader with Python, pin parity fixtures (#1187) (0a4192a)

Refactors

• core: Rework library-core plumbing to the fork lint profile (#1193) (c60f671)
• feature: Rework scalar VIF and float-motion TUs to the fork lint profile (#1199) (d6e02dc)
• go: Consolidate the vmafx-tune shadow packages (ADR-1137) (#1194) (fec70d9)

CI / Infrastructure

• impact: Route required checks by measured impact (ADR-1140) (#1196) (02e7d83)
• lint: Apply every standard to the whole tree with a clang-tidy ratchet (ADR-1142) (#1200) (f7e56b3)
• twin-drift: Gate dead .c/.cpp twins and stale build-file refs (#1189) (1f30ebb)

Miscellaneous

• changelog: Regenerate the Unreleased block from changelog.d/ (#1160) (0a13a6b)
• deps: Require aiohttp 3.14.3 security floor (#1179) (bed6bc1)
• deps: Update dependency anthropic to >=1.3.0 (#1118) (52af983)
• deps: Update dependency openai to >=3.7.0 (#1185) (0ec9807)
• deps: Update dependency prometheus-client to >=0.26.0 (#1182) (24e35ae)
• deps: Update dependency torch to v2.14.0 (#1206) (97285f2)
• deps: Update dependency torchvision to >=0.29.0,<0.29.1 (#1197) (c40f877)
• deps: Update Docker digests (#1137) (9cde3fb)
• deps: Update docker/dockerfile Docker tag to v1.27 (#1207) (d272b7c)
• deps: Update GitHub Actions (minor + patch) (#1138) (25a4545)
• deps: Update go module directive to v1.27.1 (#1139) (a17bb31)
• deps: Update golang:1.27-trixie Docker digest to 9baa6b4 (#1204) (9b0b51e)
• deps: Update module modernc.org/sqlite to v1.58.0 (#1208) (2eb1e07)
• deps: Update pre-commit hook semgrep to >=1.176.0,<2.0 (#1198) (19a8622)
• dev-image: Bump Intel NEO/IGC/gmmlib as a matched set (#1191) (67869b0)
• release: Prepare single v3.2.1 patch stream (#1174) (30a2324)
• renovate: Never digest-pin the SLSA generator; bump the Intel NEO stack as a set (#1188) (6280fd2)

---

This PR was generated with Release Please. See documentation.

[lusoris]

Closing per maintainer decision (2026-09-02): the fork's first release will be 1.0.0 on a fresh VMAFx number line, not 3.2.1 on the inherited upstream line, and it will be cut only after the fork's trained models are retrained for the Netflix VMAF v1.0.16 default (ADR-1122 models; default switch in flight).

Context that drove the change: every tag in this repository (v2.3.1, v3.0.0, v3.1.0, v3.2.0) comes from Netflix upstream history and is not an ancestor of master; the fork has never tagged a release and GitHub shows zero releases. Meanwhile master carries 2,387 fork-only commits including 496 feat and 4 breaking ones, so a 3.2.1 patch label would have been semantically wrong.

Follow-ups: an ADR superseding ADR-1127 (single SemVer stream starting at 3.2.1) with the 1.0.0 decision, the release-pipeline repair PR now in preparation, and the model retraining programme. release-please will open a fresh release PR once those land.