chore(release): bump version to v0.4.8

Version bump for v0.4.8 release including:
- P0 critical security hardening complete
- All unsafe code documented with SAFETY comments
- Gitleaks integration for secret scanning
- Pre-Phase 5 technical debt remediation complete

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>

Author: doublegate

CHANGELOG.md

@@ -7,6 +7,10 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+---
+
+## [0.4.8] - 2025-11-30
+
 ### Added
 
 **P0 Critical Security Hardening (2025-11-30):**
@@ -1618,7 +1622,8 @@ Fixes applied:
 
 ---
 
-[Unreleased]: https://github.com/doublegate/WRAITH-Protocol/compare/v0.4.5...HEAD
+[Unreleased]: https://github.com/doublegate/WRAITH-Protocol/compare/v0.4.8...HEAD
+[0.4.8]: https://github.com/doublegate/WRAITH-Protocol/compare/v0.4.5...v0.4.8
 [0.4.5]: https://github.com/doublegate/WRAITH-Protocol/compare/v0.4.0...v0.4.5
 [0.4.0]: https://github.com/doublegate/WRAITH-Protocol/compare/v0.3.2...v0.4.0
 [0.3.2]: https://github.com/doublegate/WRAITH-Protocol/compare/v0.3.1...v0.3.2

Cargo.toml

@@ -22,7 +22,7 @@ members = [
 exclude = ["crates/wraith-xdp"]
 
 [workspace.package]
-version = "0.4.5"
+version = "0.4.8"
 edition = "2024"
 rust-version = "1.85"
 license = "MIT"

README.md

@@ -9,14 +9,14 @@ A decentralized secure file transfer protocol optimized for high-throughput, low
 [![CI Status](https://github.com/doublegate/WRAITH-Protocol/actions/workflows/ci.yml/badge.svg)](https://github.com/doublegate/WRAITH-Protocol/actions/workflows/ci.yml)
 [![CodeQL](https://github.com/doublegate/WRAITH-Protocol/actions/workflows/codeql.yml/badge.svg)](https://github.com/doublegate/WRAITH-Protocol/actions/workflows/codeql.yml)
 [![Release](https://github.com/doublegate/WRAITH-Protocol/actions/workflows/release.yml/badge.svg)](https://github.com/doublegate/WRAITH-Protocol/actions/workflows/release.yml)
-[![Version](https://img.shields.io/badge/version-0.4.5-blue.svg)](https://github.com/doublegate/WRAITH-Protocol/releases)
+[![Version](https://img.shields.io/badge/version-0.4.8-blue.svg)](https://github.com/doublegate/WRAITH-Protocol/releases)
 [![Rust](https://img.shields.io/badge/rust-1.85%2B-orange.svg)](https://www.rust-lang.org/)
 [![Edition](https://img.shields.io/badge/edition-2024-orange.svg)](https://doc.rust-lang.org/edition-guide/rust-2024/index.html)
 [![License](https://img.shields.io/badge/license-MIT-green.svg)](LICENSE)
 
 ## Current Status
 
-**Version:** 0.4.5 (Phase 4 Complete - Optimization, Hardening & Obfuscation) | **Phase 5 Ready ✅**
+**Version:** 0.4.8 (Phase 4 Complete - Optimization, Hardening & Obfuscation) | **Phase 5 Ready ✅**
 
 WRAITH Protocol has completed Phases 1-4, delivering a fully functional core protocol, cryptographic layer, high-performance transport implementation, optimization and hardening, and comprehensive traffic obfuscation. The latest release includes AF_XDP kernel bypass with zero-copy I/O, BBR pacing enforcement, io_uring async file I/O, frame validation hardening, and complete traffic obfuscation with TLS/WebSocket/DoH mimicry.