Sheaft v0.2.2 technical preview

Sheaft v0.2.2

v0.2.2 is a technical-preview patch release for the v0.2.x line.

What changed

• roadmap and limitation docs now align with the tracker-backed product backlog
• serve now applies explicit HTTP read-header, read, write, and idle timeouts
• watch-loop startup reports filesystem watcher setup/add errors instead of silently ignoring them
• closed filesystem watcher channels no longer cause a tight zero-value receive loop
• release workflow, Docker builder, and module toolchain pins now use Go 1.26.2
• contract policy errors are compatible with Go 1.26 vet checks
• the default Helm chart security context now runs Sheaft as non-root, drops Linux capabilities, and uses a read-only root filesystem

Stable within 0.2.2

• strict support for Bering io.mb3r.bering.model@1.0.0 / @1.1.0
• strict support for Bering io.mb3r.bering.snapshot@1.0.0 / @1.1.0
• deterministic batch analysis, baseline comparison, and CI gate behavior from the v0.2.0 line
• release validation is clean under go test, go vet, govulncheck, and chart validation

Experimental within 0.2.2

• long-running serve / watch service mode remains technical-preview surface
• local discover helper remains experimental
• image/chart operational conventions are hardened but not promoted to a stable GA contract

Compatibility

Sheaft v0.2.2 remains compatible with these upstream contracts:

• io.mb3r.bering.model@1.0.0
• io.mb3r.bering.snapshot@1.0.0
• io.mb3r.bering.model@1.1.0
• io.mb3r.bering.snapshot@1.1.0