chore(release): v0.1.0 #17

Merged
alex merged 1 commit from release-prep/rolling into main 2026-08-05 22:10:39 +02:00

Added

  • version: running version shown at startup, on the login page, and in the dashboard footer (#7)

    Read from internal/version.Tag (set via -ldflags "-X .../version.Tag=vX.Y.Z" at build time) with a fallback to the short VCS commit hash or "dev" for scratch builds. Binary release wiring (auto-injection at release cut) is a follow-up. Visible pre-authentication on the login page so the running version is readable during an incident without logging in.

  • bundle: SHA-1 MAC substitution + the encoding wiring it depends on

Changed

None.

Fixed

  • web: delete the stale comment asserting /d/{token} is session-protected
  • web: serve /d/{token} on the token alone — Secure Client was parsing the login page
  • purser: delete Service.P12Encoding — read Cfg directly, no wire to cut
  • purser: embed a VALIDATED bundle root, not the CA's TLS trust file
  • purser: route both leaking post-sign exits through abandon(), assign CARoot
  • profile: annotate the deferred criticality instruments so go-ci passes
  • binary-size-check: make arm 19 discriminate the jq selector it claims to pin

Removed

None.

Deprecated

None.

Upgrade

None.

Internal

  • release: adopt release-toolkit v0.35.0 — fragment-check, manifest-check, and release workflows wired (#7)

    Pins the three reusable workflows from frankenbit/release-toolkit@v0.35.0. First release-decide run on push to main will seed .release-toolkit-manifest.json and open the initial release prep PR.

### Added - **version**: running version shown at startup, on the login page, and in the dashboard footer (#7) Read from `internal/version.Tag` (set via `-ldflags "-X .../version.Tag=vX.Y.Z"` at build time) with a fallback to the short VCS commit hash or `"dev"` for scratch builds. Binary release wiring (auto-injection at release cut) is a follow-up. Visible pre-authentication on the login page so the running version is readable during an incident without logging in. - **bundle**: SHA-1 MAC substitution + the encoding wiring it depends on ### Changed None. ### Fixed - **web**: delete the stale comment asserting /d/{token} is session-protected - **web**: serve /d/{token} on the token alone — Secure Client was parsing the login page - **purser**: delete Service.P12Encoding — read Cfg directly, no wire to cut - **purser**: embed a VALIDATED bundle root, not the CA's TLS trust file - **purser**: route both leaking post-sign exits through abandon(), assign CARoot - **profile**: annotate the deferred criticality instruments so go-ci passes - **binary-size-check**: make arm 19 discriminate the jq selector it claims to pin ### Removed None. ### Deprecated None. ### Upgrade None. ### Internal - **release**: adopt `release-toolkit` v0.35.0 — fragment-check, manifest-check, and release workflows wired (#7) Pins the three reusable workflows from `frankenbit/release-toolkit@v0.35.0`. First `release-decide` run on push to main will seed `.release-toolkit-manifest.json` and open the initial release prep PR.
chore(release): prepare v0.1.0
Some checks failed
go-ci / lint + build + test (push) Successful in 45s
release / decide + act (push) Failing after 5s
release / release (push) Failing after 0s
dc48f7a6d9
Generated by release-toolkit rt prep.

Tracker: frankenbit/release-toolkit#1
alex merged commit dc48f7a6d9 into main 2026-08-05 22:10:39 +02:00
alex deleted branch release-prep/rolling 2026-08-05 22:10:39 +02:00
Sign in to join this conversation.
No description provided.