Repository navigation
Releases: Cyxno/DUMBscope
Release list
v1.0.0
DUMBscope v1.0.0
DUMBscope 1.0 marks the first stable release of the project.
The observation surface, Safe Actions guarantees, configuration model and /config layout are now considered stable for the 1.x line. Future breaking changes will follow semantic versioning and include explicit migration notes.
Highlights
Security hardening
A new HTTP-level security regression suite now exercises the real production server in CI, including:
- authentication boundaries across the API
- same-origin / CSRF enforcement
- malformed request handling
- rate-limit lockout behavior
- secure session-cookie flags
- clean error responses without stack traces or internal paths
Safer Safe Actions
Safe Actions now expose stable machine-readable rejection reasons.
Cooldown and simultaneous duplicate attempts return 409 Conflict consistently instead of relying on display-text matching.
The broader Safe Actions guarantees introduced in the 0.9.8 hardening remain part of the stable 1.x contract:
- atomic duplicate suppression
- audit-before-upstream execution
- crash reconciliation
- honest
unconfirmedstate for interrupted actions
Runtime reliability
The library snapshot interval no longer pins the Node.js event loop, bringing it in line with the other background workers and improving graceful shutdown behavior.
Migration confidence
Fresh installs are now explicitly tested from an empty database through the complete migration chain, including the current Safe Actions claim index.
Repository & release readiness
The public repository has been prepared for the 1.x line with:
- contribution guidelines
- issue templates
- categorized release notes
- refreshed screenshots
- multi-viewport UI regression tooling
- audited documentation and configuration references
Compatibility
- No breaking schema changes
- Existing configuration remains compatible
- Database migrations remain additive, versioned and transactional
- Environment variables and
/configlayout are considered stable for 1.x
Release integrity
The release is built and published through the multi-architecture release pipeline and includes a release-manifest.json asset for release metadata and provenance verification.
Full Changelog: v0.9.8...v1.0.0