1.0.0

What's Changed

• feat(gateway): WaaV Infer integration — session language, endpoint, truncated replies by @dittops in #20
• fix(gateway): Gaia's 16 Oct issues, DAG barge-in and streaming TTS, realtime close, build and test fixes by @dittops in #19
• feat(segmented-stt): send WaaV Infer the session's candidate languages as languages[] by @dittops in #21
• fix(deps): RUSTSEC-2026-0386/-0387 (tokio 1.54.1, jsonwebtoken on aws-lc-rs); SEC1 EC signing keys by @dittops in #24
• fix(gateway): operator credentials only reach approved hosts; one egress rule everywhere by @dittops in #23
• ci(release): multi-arch image, binary archives with checksums, tag must equal crate version by @dittops in #22
• fix(gateway): /readyz probes what is used and is cached; operator listener; no warm-up to local targets; Google voices only when configured; check and unknown YAML keys by @dittops in #25
• feat(gateway): standalone /v1/audio/* through server aliases; alias legs with their own server, credential and TTS timeout by @dittops in #26
• fix(gateway): DAG retries and per-kind timeouts; pooled turn models off the async workers; growing denoiser pool; WAAV_UNIX_SOCKET by @dittops in #27
• fix(gateway,sdk): browser WebSocket auth without the URL; AUTH_QUERY_TOKEN=deny; no unauthenticated /ws on a bad credential by @dittops in #28
• fix(gateway): a /ws conversation session sends the reply's words by @dittops in #29
• feat(gateway): standalone /v1/realtime through server aliases by @dittops in #30
• fix(gateway): keep the LiveKit participant's media sockets on chosen networks by @dittops in #31
• ci: real-provider e2e skips providers without secrets instead of failing main by @dittops in #32
• fix(gateway): client values in a vendor URL's path must be one plain segment by @dittops in #33
• test: every destination-like key a provider reads must be reviewed; empty vendor keys count as unset by @dittops in #34
• fix: /speak answers vendor failures with their real status; real-provider tests fail on refusals by @dittops in #35
• release: 1.0.0-rc.1 by @dittops in #36
• release: 1.0.0 by @dittops in #37

Full Changelog: 0.1.8...1.0.0

Image

registry.bud.studio/runtime/waav:1.0.0
sha256:1859f252553126d4970b98b3b09965090eefeb43ae6f94571afb35fa383a114d

Platforms: linux/amd64, linux/arm64. The digest is the multi-arch index;
docker pull picks the platform's image from it.

Pull by digest to pin exactly what was tested:

docker pull registry.bud.studio/runtime/waav@sha256:1859f252553126d4970b98b3b09965090eefeb43ae6f94571afb35fa383a114d

Binaries

waav-gateway-1.0.0-linux-x86_64.tar.gz and waav-gateway-1.0.0-linux-aarch64.tar.gz,
each with the stripped binary, LICENSE and BUILD-INFO (commit, features, glibc floor,
ONNX Runtime requirement). Verify with sha256sum -c SHA256SUMS.