Skip to content

v0.6.0

Choose a tag to compare

@devarismeroxa devarismeroxa released this 07 Oct 01:19
5d6aa61

Standalone (WASM) processors can now make outbound HTTP requests through the host, with the operator in control.

WASM host egress. The new egress package gives processors egress.Do(ctx, egress.Request), backed by a new conduit.http_request host function. Egress is off by default. When an operator enables it, requests are limited to an allowlist, credentials are injected by the host from secret references (the guest never sees them), redirects are not followed, and responses are size-capped. Outside a WASM guest, egress.Do denies everything. Hosting it requires a Conduit build with the host side of this ABI (Conduit v0.20.0 and later).

The change is additive. New pprocutils.HTTPService, HTTPRequest/HTTPResponse and seven ErrorCodeHTTP* codes are appended after the existing error codes without renumbering them. Processors built against v0.5.x keep working unchanged.

Also in this release:

  • godoc and package-doc pass across the SDK
  • processor hot-path benchmarks
  • dependency bump: google.golang.org/protobuf v1.36.12

Full changelog: v0.5.1...v0.6.0