Skip to content

v0.4.0

Choose a tag to compare

@osanderson osanderson released this 15 Oct 14:14
Immutable release. Only release title and notes can be modified.
8cefcd5

0.4.0 (2026-10-15)

⚠ BREAKING CHANGES

  • receiver: receiver.New refuses a Limits.MaxClockSkew above receiver.MaxClockSkewBound (an hour). See UPGRADING.md.

Features

  • storage: add ClaimOutcome.String, say clocks must agree, and name the store HorizontallyScaled needs (31d4bd3)

Bug Fixes

  • receiver: bound Limits.MaxClockSkew at an hour, so replay records stay representable (c89ae4b)
  • receiver: keep a verification's state until it is handled, tell handlers when their claim is lost, and recover store and token-source panics (6dcc059)
  • receiver: make EnsureStream safe for instances starting together, and delete a stream it creates and refuses (8e9d9b7)
  • receiver: return Verify's rejection as a typed RejectionError, and reject U+0000 in a SET's string claims and subject (97d0ee9)
  • ssf: escape terminal controls in output, trust a CA file, and accept per-stream audiences and flags after the token (a15dc47)