Skip to content

v0.7.0

Latest
Latest

Choose a tag to compare

View all tags
@github-actions github-actions released this 23 Oct 17:15
· 1 commit to main since this release
v0.7.0
1dfb899

[0.7.0] - 2026-10-23

Upgrade notes

  • Two new database migrations run automatically on first start. 000034 adds an index on access_log(created_at, outcome), so the first start after upgrading may be slow on a very large access log. 000035 adds address_events.trigger_type, backfills it, and renames source manual to web_ui.

Features

  • Address history: TTL-risk histogram with an at-risk device ranking and a risk chart (9f0b40a, d4003ca)
  • Address history: tuning readout listing the devices most worth re-tuning their lease TTL for the selected time window, with a deep link to stage a suggested TTL (new GET /address-history/tuning) (c39aea9, 5bee09e, 6066ac6, f33015f)
  • Access log: histogram chart that follows the active filters, and a detail endpoint that the drawer fetches on open (new GET /access-log/histogram and GET /access-log/{id}) (57b024f, f9f25b7)
  • Address events record what triggered them (user, system or schedule); the history table has a Trigger column and badges only the exception rows (854cabb, b23d29e, 85b62b8)
  • Copy the pairing QR to the clipboard; the QR is also larger for easier scanning (f0310db)

Bug Fixes

  • Superadmin-only role endpoints return 403 instead of 500 when called with an admin role (bc800c4)
  • Pairing tab dot stays in step with codes claimed or expired elsewhere (bcd0170)
  • Access-log panels dim only on user-triggered refreshes, not background ones (5a22c19)
  • Filters time window is pinned, suggested-TTL restaging fixed, and the tuning 400 response declared in the API contract (16d0af6, 61bdac8, 9f62fb9)
  • Login returnTo is restricted to in-app paths (db3d22a)
  • Security headers are set from a single place and the Content-Security-Policy is hardened (b9fa173)

Documentation

  • Rewrite the histogram endpoint description for API clients (1f95922)

Under the Hood

  • Security: upgrade Go to 1.27.3 and update Go modules, upgrade react-router to v8, update frontend dependencies and clear dev audit findings; add a weekly security scan workflow with a govulncheck gate (01f2190, ca8c067, 5c588e2, 77edee4)
  • Bump Node to 26.12.1, upgrade vitest to 5 and happy-dom to 21, golangci-lint for Go 1.27 (580e390, b73431e, 24f09d4)
  • Move build-time UI packages to devDependencies (37b0a8f)
  • Performance: the tuning ranking is answered in one query; access-log histogram benchmark and scan coverage (ff77440, 6a5ecd4)
  • The histogram always scans raw data and the rollup delegation was dropped; the tuning read model has its own file; new filterx package (d27eb7e, ac238bf)
  • Rename password length bound constants to clear a CodeQL taint alert, no behaviour change (7756ca8)
  • The Vite dev server now fails instead of falling back to another port (dev only) (8c823f6)
  • Size the pairing code payload up front, extra test coverage, Dependabot bumps (eb2bc66)

Docker image: ghcr.io/diegoguidaf/pulseweaver:v0.7.0

docker pull ghcr.io/diegoguidaf/pulseweaver:v0.7.0
Assets 2
Loading