• v0.1.0 828d97f305

    Release v0.1.0
    All checks were successful
    go-ci / lint + build + test (pull_request) Successful in 49s
    manifest-check / manifest-vs-tag consistency (pull_request) Successful in 4s
    manifest-check / check (pull_request) Successful in 0s
    go-ci / lint + build + test (push) Successful in 48s
    release / decide + act (push) Successful in 5s
    release / release (push) Successful in 0s
    Stable

    alex released this 2026-08-05 22:38:07 +02:00 | 42 commits to main since this release

    Added

    • version: running version shown at startup, on the login page, and in the dashboard footer (#7)

      Read from internal/version.Tag (set via -ldflags "-X .../version.Tag=vX.Y.Z" at build time) with a fallback to the short VCS commit hash or "dev" for scratch builds. Binary release wiring (auto-injection at release cut) is a follow-up. Visible pre-authentication on the login page so the running version is readable during an incident without logging in.

    • bundle: SHA-1 MAC substitution + the encoding wiring it depends on

    Changed

    None.

    Fixed

    • changelog: drop @ prefix on release-toolkit pin to unblock v0.1.0 cut
    • version: correct false release-workflow injection claims (#7)
    • release: remove false build_command/asset_paths claim; correct fragment (#7)
    • web: delete the stale comment asserting /d/{token} is session-protected
    • web: serve /d/{token} on the token alone — Secure Client was parsing the login page
    • purser: delete Service.P12Encoding — read Cfg directly, no wire to cut
    • purser: embed a VALIDATED bundle root, not the CA's TLS trust file
    • purser: route both leaking post-sign exits through abandon(), assign CARoot
    • profile: annotate the deferred criticality instruments so go-ci passes
    • binary-size-check: make arm 19 discriminate the jq selector it claims to pin

    Removed

    None.

    Deprecated

    None.

    Upgrade

    None.

    Internal

    • release: adopt release-toolkit v0.35.0 — fragment-check, manifest-check, and release workflows wired (#7)

      Pins the three reusable workflows from frankenbit/release-toolkit v0.35.0. First release-decide run on push to main will seed .release-toolkit-manifest.json and open the initial release prep PR.

    Downloads