Skip to content

v1.7.2-safe: The Clean Slate

Choose a tag to compare

View all tags
@FabioLeitao FabioLeitao released this 22 Apr 17:48
v1.7.2-safe
b80785b

Changelog

Human-readable summary of user-facing changes. Detailed release notes: docs/releases/ (full checklists, Docker publish commands, GitHub Release text).

Unreleased (main)

  • Next working line: 1.7.3-beta (or next planned pre-release) on main per VERSIONING.md after publish choreography (maintainers: release-publish-sequencing rule in-repo).

1.7.2+safe (2026-04-22) — Security & Sanitization (Golden / Clean Slate)

Distribution milestone. Package version 1.7.2+safe is PEP 440 (local segment safe); Git and Docker Hub use tag v1.7.2-safe for parity with the validated slim image.

  • Sanitized publish surface: Docker Hub now standardises on fabioleitao/data_boar:v1.7.2-safe and latest (single digest); all prior Hub tags for this repository were removed — do not pin deprecated tags in runbooks.
  • Git / history narrative: Positions the repo after PII-sensitive history remediation; external consumers should clone from v1.7.2-safe onward for the clean baseline story.
  • Feature baseline: Same application line as 1.7.1 plus subsequent main development (WebAuthn phases, RBAC #86 Phase 2, data-soup Tier 1 + stego hints, etc.); see 1.7.1 below for feature notes. Full operator checklist: docs/releases/1.7.2-safe.md.

Carryover (was 1.7.2-beta on main before this tag)

  • Dashboard auth (Phase 1a — WebAuthn JSON core): Optional api.webauthn + DATA_BOAR_WEBAUTHN_TOKEN_SECRET — ADR 0033, tests/test_webauthn_rp.py, scripts/smoke-webauthn-json.ps1 + SMOKE_WEBAUTHN_JSON.md. Default disabled.
  • Dashboard auth (Phase 1b — HTML session + CSRF minimal): WebAuthn session + CSRF on gated routes — tests/test_webauthn_html_gate.py, tests/test_html_csrf.py.
  • Dashboard RBAC (Phase 2 — GitHub #86): Optional api.rbac.enabled — tests/test_rbac.py. Phase 3 (enterprise SSO/OIDC) remains future work.
  • Filesystem “data soup” Tier 1 + stego hints: SUPPORTED_EXTENSIONS + file_scan.scan_for_stego / CLI --scan-stego; import fix in connectors/filesystem_connector._read_text_sample for RICH_MEDIA_SCAN_EXTENSIONS.

1.7.1 (2026-04-21)

  • Scope import (CSV): scripts/scope_import_csv.py + config/scope_import_csv.py emit a YAML targets fragment from a canonical CSV for operator review and merge; see USAGE.md, deploy/scope_import.example.csv, docs/ops/SCOPE_IMPORT_QUICKSTART.md, PLAN_SCOPE_IMPORT_FROM_EXPORTS.md.
  • Ops (maturity POC): docs/ops/SMOKE_MATURITY_ASSESSMENT_POC.md (+ pt-BR) documents autonomous pytest smoke (scripts/smoke-maturity-assessment-poc.ps1) and manual browser/integrity steps for the POC ready checklist; indexed from docs/ops/README.md.
  • Dashboard (maturity POC): GET /{locale}/assessment shows a recent submissions table (per batch, newest first) when the SQLite DB has stored answers; links reuse the post-submit summary URL and CSV export. Documented in ADR 0032. Per-tenant RBAC for this list remains #86 follow-up.
  • Licensing / maturity POC: API tests assert licensing.mode: enforced + JWT dbtier (community vs pro) gates /{locale}/assessment (and export) consistent with YAML effective_tier override — see tests/test_api_assessment_poc.py (test_assessment_enforced_jwt_dbtier_*).

1.7.0 (2026-04-17)

  • Minor release: detector format hints (REST JSON scalars, email/UUID VARCHAR hints), HEIC / Apple images when optional deps are present; reporting/security fixes (heatmap path guard, report import hygiene).
  • Compliance & docs: GLOSSARY and COMPLIANCE_AND_LEGAL expanded (US healthcare adjacency, Wabbix/WRB, VBA disambiguation, minors/criminal-record context — not legal conclusions); alignment with ADR 0025 evidence positioning.
  • Repository: PII guards, CI/deps, Semgrep/Bandit posture; operator Ansible/homelab scripts and runbooks (see docs/releases/1.7.0.md for full checklist).

1.6.8 (2026-04-02)

  • Ops automation: added reusable token-aware wrappers for session bootstrap, progress snapshots, and external review package generation (scripts/auto-mode-session-pack.ps1, scripts/progress-snapshot.ps1, scripts/external-review-pack.ps1).
  • Review reliability: hardened Gemini bundle verification logic to avoid false mismatches when marker-like text appears inside documentation examples (scripts/export_public_gemini_bundle.py).
  • Runbooks and governance: expanded today/next-day/carryover discipline, reinforced Wabbix/Gemini source-of-truth framing, and added Time Machine USB recovery and repurpose playbook for urgent storage/backup recovery.
  • Hardening and lab-op docs: integrated LMDE/T14 and Ansible hardening baselines, validation checklists, and CAPEX/OPEX planning outputs aligned to current roadmap.

1.6.7 (2026-03-25)

  • Removed legacy run.py. Use python main.py only, with the correct bind flags (--host, api.host, API_HOST) and dashboard transport (--https-cert-file / --https-key-file, or --allow-insecure-http / api.allow_insecure_http). See docs/releases/1.6.7.md and docs/USAGE.md.
  • Docs / tooling: docs/USAGE.md (+ pt-BR), sonar-project.properties, docs/plans/completed/NEXT_STEPS.md updated accordingly.

Earlier versions

See docs/releases/ (e.g. 1.6.6.md, 1.6.5.md, …).

Full Changelog: v1.7.1...v1.7.2-safe

Assets 4
Loading