Repository navigation
v0.4.0
Immutable
release. Only release title and notes can be modified.
0.4.0 (2026-10-15)
⚠ BREAKING CHANGES
- receiver: receiver.New refuses a Limits.MaxClockSkew above receiver.MaxClockSkewBound (an hour). See UPGRADING.md.
Features
- storage: add ClaimOutcome.String, say clocks must agree, and name the store HorizontallyScaled needs (31d4bd3)
Bug Fixes
- receiver: bound Limits.MaxClockSkew at an hour, so replay records stay representable (c89ae4b)
- receiver: keep a verification's state until it is handled, tell handlers when their claim is lost, and recover store and token-source panics (6dcc059)
- receiver: make EnsureStream safe for instances starting together, and delete a stream it creates and refuses (8e9d9b7)
- receiver: return Verify's rejection as a typed RejectionError, and reject U+0000 in a SET's string claims and subject (97d0ee9)
- ssf: escape terminal controls in output, trust a CA file, and accept per-stream audiences and flags after the token (a15dc47)