v0.3.2

Changes in 0.3.2

Changed

• Validate each public release candidate with bounded, network-isolated fuzz campaigns against its exact source revision.
• Require positive engine execution counts, instrumented production code and validated seed corpora; retain source-bound reports and diagnostic evidence.
• Run deterministic seed and configuration checks in ordinary CI without starting mutation campaigns on betas.

Upgrade

Use the existing installation procedure, preserve local configuration and keep the previous accepted package for rollback. This maintenance release updates release validation and does not change the application configuration format. Deployment and applicable device or integration acceptance remain separate from publication.

Security

RC publication rejects absent or invalid source-bound fuzz reports. The fuzz runner bounds corpus paths, file types and size. No application vulnerability or new target-device acceptance is claimed by these tooling changes.

Build provenance

Promoted unchanged from v0.3.2-rc.2.

Source: f4c039d88ca57d89e51a8ca145c117b856cc2af1

Validation: https://github.com/4alvit/google-home-voice-stats/actions/runs/38843090794

Promotion: https://github.com/4alvit/google-home-voice-stats/actions/runs/38844491674

Assets and release-manifest.json are byte-for-byte copies of the verified release candidate.

v0.3.2-rc.2

Changes in 0.3.2

Changed

• Validate each public release candidate with bounded, network-isolated fuzz campaigns against its exact source revision.
• Require positive engine execution counts, instrumented production code and validated seed corpora; retain source-bound reports and diagnostic evidence.
• Run deterministic seed and configuration checks in ordinary CI without starting mutation campaigns on betas.

Upgrade

Use the existing installation procedure, preserve local configuration and keep the previous accepted package for rollback. This maintenance release updates release validation and does not change the application configuration format. Deployment and applicable device or integration acceptance remain separate from publication.

Security

The release gate rejects absent or invalid fuzz evidence and unsafe seed inputs. No application vulnerability or new target-device acceptance is claimed by these tooling changes.

Build provenance

rc candidate with a version fixed before compilation.

Source: f4c039d88ca57d89e51a8ca145c117b856cc2af1

Validation: https://github.com/4alvit/google-home-voice-stats/actions/runs/38843090794

See release-manifest.json for package hashes and version input evidence.

v0.3.2-nightly.20261016090514.38877970414.1

Changes in 0.3.2

Changed

• Validate each public release candidate with bounded, network-isolated fuzz campaigns against its exact source revision.
• Require positive engine execution counts, instrumented production code and validated seed corpora; retain source-bound reports and diagnostic evidence.
• Run deterministic seed and configuration checks in ordinary CI without starting mutation campaigns on betas.

Upgrade

Use the existing installation procedure, preserve local configuration and keep the previous accepted package for rollback. This maintenance release updates release validation and does not change the application configuration format. Deployment and applicable device or integration acceptance remain separate from publication.

Security

RC publication rejects absent or invalid source-bound fuzz reports. The fuzz runner bounds corpus paths, file types and size. No application vulnerability or new target-device acceptance is claimed by these tooling changes.

Build provenance

nightly candidate with a version fixed before compilation.

Source: aad4d7006736e815551cd505a4f787ff069cddad

Validation: https://github.com/4alvit/google-home-voice-stats/actions/runs/38877970414

See release-manifest.json for package hashes and version input evidence.

v0.3.2-beta.3

Changes in 0.3.2

Changed

• Validate each public release candidate with bounded, network-isolated fuzz campaigns against its exact source revision.
• Require positive engine execution counts, instrumented production code and validated seed corpora; retain source-bound reports and diagnostic evidence.
• Run deterministic seed and configuration checks in ordinary CI without starting mutation campaigns on betas.

Upgrade

Use the existing installation procedure, preserve local configuration and keep the previous accepted package for rollback. This maintenance release updates release validation and does not change the application configuration format. Deployment and applicable device or integration acceptance remain separate from publication.

Security

The release gate rejects absent or invalid fuzz evidence and unsafe seed inputs. No application vulnerability or new target-device acceptance is claimed by these tooling changes.

Build provenance

beta candidate with a version fixed before compilation.

Source: f4c039d88ca57d89e51a8ca145c117b856cc2af1

Validation: https://github.com/4alvit/google-home-voice-stats/actions/runs/38842212162

See release-manifest.json for package hashes and version input evidence.

v0.3.2-rc.1

Changes in 0.3.2

Changed

• Validate each public release candidate with bounded, network-isolated fuzz campaigns against its exact source revision.
• Require positive engine execution counts, instrumented production code and validated seed corpora; retain source-bound reports and diagnostic evidence.
• Run deterministic seed and configuration checks in ordinary CI without starting mutation campaigns on betas.

Upgrade

Use the existing installation procedure, preserve local configuration and keep the previous accepted package for rollback. This maintenance release updates release validation and does not change the application configuration format. Deployment and applicable device or integration acceptance remain separate from publication.

Security

The release gate rejects absent or invalid fuzz evidence and unsafe seed inputs. No application vulnerability or new target-device acceptance is claimed by these tooling changes.

Build provenance

rc candidate with a version fixed before compilation.

Source: 29042732568fd09d2323a0edc1405be8cecc84b0

Validation: https://github.com/4alvit/google-home-voice-stats/actions/runs/38625214248

See release-manifest.json for package hashes and version input evidence.

v0.3.2-beta.1

Changes in 0.3.2

Changed

• Validate each public release candidate with bounded, network-isolated fuzz campaigns against its exact source revision.
• Require positive engine execution counts, instrumented production code and validated seed corpora; retain source-bound reports and diagnostic evidence.
• Run deterministic seed and configuration checks in ordinary CI without starting mutation campaigns on betas.

Upgrade

Use the existing installation procedure, preserve local configuration and keep the previous accepted package for rollback. This maintenance release updates release validation and does not change the application configuration format. Deployment and applicable device or integration acceptance remain separate from publication.

Security

The release gate rejects absent or invalid fuzz evidence and unsafe seed inputs. No application vulnerability or new target-device acceptance is claimed by these tooling changes.

Build provenance

beta candidate with a version fixed before compilation.

Source: 29042732568fd09d2323a0edc1405be8cecc84b0

Validation: https://github.com/4alvit/google-home-voice-stats/actions/runs/38623393554

See release-manifest.json for package hashes and version input evidence.

v0.3.1

Changes in 0.3.1

Added

• Installable source release archives containing the Python application, integration templates, dependency locks and operator documentation.
• Frozen beta, nightly and RC version plans, package metadata verification and exact-asset build receipts.

Upgrade

Install the source archive in a fresh environment using the documented locked dependencies. Compare and merge configuration templates; preserve installation-specific credentials and existing service configuration outside the checkout. This release does not deploy services, create cloud resources or configure physical speakers. Keep the previously accepted package and configuration for rollback.

Security

The release process preserves the existing required validation workflows and publishes only tracked inputs. Local secrets, environment files, deployment state and generated media are excluded by the repository's existing tracking policy. Release receipts verify artifact identity; physical voice behavior and installation-specific access must still be accepted separately.

Build provenance

Promoted unchanged from v0.3.1-rc.1.

Source: a85689ab88e5194773054b76c055b2588df3a555

Validation: https://github.com/4alvit/google-home-voice-stats/actions/runs/38487630927

Promotion: https://github.com/4alvit/google-home-voice-stats/actions/runs/38510735944

Assets and release-manifest.json are byte-for-byte copies of the verified release candidate.

Complete changes since v0.3.0

Released source: a85689ab88e5.
Previous stable source: 02c6fc87615b.

Full source history. The list includes application, dependency, CI, documentation and release changes.

All 19 merged pull requests

• #11 — chore(ci): enable quiet CodeRabbit reviews
• #12 — test: cover Cast configuration and playback recovery boundaries
• #13 — ci: prepare optional runner reserve without enabling it
• #14 — docs: link the shared gateway and related voice projects
• #15 — [StepSecurity] Apply security best practices
• #21 — ci: request CodeRabbit autofix after completed reviews
• #22 — fix: default local playback to loopback and add security checks
• #17 — Group coherent GitHub Actions updates
• #24 — ci: analyze GitHub Actions with CodeQL
• #25 — ci: minimize declared reusable workflow permissions
• #26 — build: lock Python dependencies and verify Cast image variants
• #27 — docs: use patched uv 0.12.18 for lock regeneration
• #23 — chore(deps): bump the github-actions group across 1 directory with 4 updates
• #29 — chore(deps): bump the github-actions group with 4 updates
• #28 — chore(deps): bump python from 3.12-slim-bookworm to 3.14-slim-bookworm
• #30 — chore(deps): bump the github-actions group with 10 updates
• #31 — Add KittenTTS Nano with primary and secondary speech servers
• #32 — Add installable source candidates and RC fuzz qualification
• #33 — Use durable release workflows and verified publication guards

All 19 commits

• c85dfa76c2b3 — chore(ci): enable quiet CodeRabbit reviews (#11)
• 9ae129a68ab3 — test: cover Cast configuration and playback recovery boundaries
• cd96f2ebecb3 — ci: prepare opt-in runner reserve while keeping GitHub defaults (#13)
• 8c080412f2ef — docs: link the shared gateway and related voice projects (#14)
• f06870423454 — [StepSecurity] Apply security best practices (#15)
• 544a5182f9ab — ci: request CodeRabbit autofix after completed reviews (#21)
• ac49ce1a86ac — fix: default local playback to loopback and add security checks (#22)
• 8944bd9143fb — chore(deps): bump actions/checkout from 4.4.0 to 7.0.1 (#17)
• 8bad162e161c — ci: analyze GitHub Actions with CodeQL (#24)
• c345db0eb4b7 — ci: minimize declared reusable workflow permissions (#25)
• 29eed5def83d — build: hash-lock voice adapter dependencies and Cast images (#26)
• ace21016e4e6 — docs: use patched uv for lock regeneration (#27)
• 399ff1469da8 — chore(deps): bump the github-actions group across 1 directory with 4 updates (#23)
• f4c93109b5b4 — chore(deps): bump the github-actions group with 4 updates (#29)
• 4d43797d4264 — chore(deps): bump python from 3.12-slim-bookworm to 3.14-slim-bookworm (#28)
• c02791658b5f — chore(deps): bump the github-actions group with 10 updates (#30)
• 4cd7d0c4b8cc — Add KittenTTS Nano with primary and secondary speech servers (#31)
• 896a4e92e8dc — Add installable source candidates and RC fuzz qualification (#32)
• a85689ab88e5 — Pin durable release workflow and verified publication guards (#33)

v0.3.1-rc.1

Changes in 0.3.1

Added

• Installable source release archives containing the Python application, integration templates, dependency locks and operator documentation.
• Frozen beta, nightly and RC version plans, package metadata verification and exact-asset build receipts.

Upgrade

Install the source archive in a fresh environment using the documented locked dependencies. Compare and merge configuration templates; preserve installation-specific credentials and existing service configuration outside the checkout. This release does not deploy services, create cloud resources or configure physical speakers. Keep the previously accepted package and configuration for rollback.

Security

The release process preserves the existing required validation workflows and publishes only tracked inputs. Local secrets, environment files, deployment state and generated media are excluded by the repository's existing tracking policy. Release receipts verify artifact identity; physical voice behavior and installation-specific access must still be accepted separately.

Build provenance

rc candidate with a version fixed before compilation.

Source: a85689ab88e5194773054b76c055b2588df3a555

Validation: https://github.com/4alvit/google-home-voice-stats/actions/runs/38487630927

See release-manifest.json for package hashes and version input evidence.

v0.3.1-beta.1

Changes in 0.3.1

Added

• Installable source release archives containing the Python application, integration templates, dependency locks and operator documentation.
• Frozen beta, nightly and RC version plans, package metadata verification and exact-asset build receipts.

Upgrade

Install the source archive in a fresh environment using the documented locked dependencies. Compare and merge configuration templates; preserve installation-specific credentials and existing service configuration outside the checkout. This release does not deploy services, create cloud resources or configure physical speakers. Keep the previously accepted package and configuration for rollback.

Security

The release process preserves the existing required validation workflows and publishes only tracked inputs. Local secrets, environment files, deployment state and generated media are excluded by the repository's existing tracking policy. Release receipts verify artifact identity; physical voice behavior and installation-specific access must still be accepted separately.

Build provenance

beta candidate with a version fixed before compilation.

Source: a85689ab88e5194773054b76c055b2588df3a555

Validation: https://github.com/4alvit/google-home-voice-stats/actions/runs/38487050155

See release-manifest.json for package hashes and version input evidence.

Google Energy Reports v0.3.0

IGW reports now use shorter speech and numeric cards on Google Cast displays, with optional local Piper speech and configurable Home Assistant briefings. This is a source release for self-hosted installations, not a Google skill or store app.

Changes

• Use IGW's optional brief overview for default status speech while keeping full warnings on screen and preserving compatibility with older gateways.
• Show validated numeric battery, solar and daily-generation readings with units, freshness status and gateway receipt age. Receipt age describes arrival at IGW, not the physical sampling time.
• Add an optional power-flow report. Existing five-script installations, entity IDs and Matter exposure remain compatible; use --include-flow only after configuring gateway sources.
• Add optional local Piper speech with resource limits and eSpeak fallback. Piper remains disabled by default; check engine and model licenses and benchmark the installation before enabling it.
• Retry one classified transient gateway read failure within the existing total deadline; concurrent playback still returns busy.
• Provide opt-in Home Assistant blueprints for battery reserve/recovery notifications, freshness-qualified binary conditions and scheduled briefings. Explicit inputs, episode helpers and allowed hours control notification behavior.
• Document installation, architecture, verification and rollback. Python package and runtime version metadata are now 0.3.0.

Upgrade and verification

Upgrade IGW first for the additive brief, metric and flow fields, then update the Cast service or HA speech adapter. Retain the existing playback target and credentials. Regenerate HA configuration only when adopting an optional report or blueprint; rendering files does not enable an automation or select a notification recipient.

CI covers adapter behavior, real eSpeak/FFmpeg output, Piper failure fallback, the synthetic IGW contract and all four generated HA configurations, including the three new blueprints. An actual local Piper benchmark exceeded the default deadline, so it is an optional installation choice rather than the default voice.

The previously documented Google-to-Matter-to-HA-to-Cast path and operator-confirmed status playback are separate from acceptance of the new rendering, speech and automation features. Verify the target display and microphone, and explicitly validate notification recipients before enabling an automation. Google voice triggers still require a configured integration; standalone Cast output does not require HA.

The release contains source archives. It does not deploy services, pair a Matter bridge, enable notifications or change equipment settings.

See the README, standalone Cast guide, optional local speech and automation guide.