Skip to content

Flowmark v0.6.2

Choose a tag to compare

View all tags
@Mumma6 Mumma6 released this 02 Nov 08:48
v0.6.2
bfd65c8
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Flowmark v0.6.2 improves credential safety and completes Pulumi management of the reference deployment.

Safer key management

  • Emergency write-key rotation now replaces the selected key and revokes the old key in one database transaction. Failed or concurrent attempts cannot leave hidden active replacements.
  • Rotation rejects revoked, missing, wrong-kind and other-project keys without creating a new credential.
  • Dashboard confirmations identify the project and key before rotation or revocation. Key lists distinguish loading, errors and empty states; clipboard failures are reported.
  • New projects receive one write key with the correct key ID. Existing read keys remain valid.
  • Documentation explains immediate emergency rotation, planned create → update application → revoke replacement, and recovery if the replacement secret is lost. Project names and reported environments are labels, not authorization boundaries.

Infrastructure management

  • Complete protected Pulumi adoption of persistent Neon resources, Vercel projects, seven custom-domain assignments and all 21 application environment bindings.
  • Keep sensitive values encrypted, environment scopes explicit and all 45 adopted cloud resources protected against deletion. Application deployment, database migration and CI secrets retain their existing owners.
  • Feature Preview deployments remain paused; Staging remains the active nonproduction rollout.

Upgrade notes

No database schema migration, SDK version change or npm publication is included. Existing credentials continue working unless explicitly rotated or revoked. Emergency rotation invalidates the selected old key immediately; a request already authorized may still finish. Use create → update application → revoke when an overlap is needed.

Verification

The Production rollout passed format/lint/type/unit checks, PostgreSQL integration tests, database-history verification and deployment checks. API, dashboard, docs and web are READY at bfd65c85e28803129609244bce6655fe7d08b165, with their canonical domains verified. Health, signed-out sessions and public pages passed; unauthenticated ingestion is rejected. All 21 app environment bindings are unchanged. Hosted customer credentials were not rotated as a release test.

Changes: #58, #59. Release PR: #60. Full comparison: v0.6.1...v0.6.2

Assets 2
Loading