v0.24.1

The Stem v0.24.1 — Network Performance Testing Tool by Mustard Seed Networks.

Changelog

• f89f1f7 chore(main): release 0.24.1 (#549)
• 94476dd fix(reflector): harden NetAlly compatibility and packet path (#547)
• 49b93e6 chore: delete dead internal/oauth package (#523)
• ca2c129 ci: pin fleet-shared reusable workflows to a tagged SHA (#522)
• 4daf064 ci(semgrep): consume the fleet-shared reusable Semgrep workflow (#521)
• 19bf887 ci(license-check): consume the fleet-shared reusable workflow (#520)
• f4cb1d5 refactor(csrf): back CSRF with foundation module; converge keying to sha256(bearer) (#519)
• bd1f928 refactor(license): consume shared foundation module for license core (#518)
• 8291e21 chore(release): reset release-please to 0.24.0, purge 2.0.0 (#515)

v0.24.0

The Stem v0.24.0 — Network Performance Testing Tool by Mustard Seed Networks.

Changelog

• bdd2286 chore(main): release 2.0.0 (#513)
• 0c315c5 fix(release): correct release-please config nesting (kill the 2.0.0) (#512)
• 7a65932 chore: onboard Renovate via shared org preset (#510)
• 5a52387 fix(docs): correct stale v1.0.0 examples to 0.x (#506)
• e3dfd63 fix(release): force bash on container Syft step (pipefail) (#507)
• 365ab5b fix(release): force next Stem release back to 0.x (#504)
• 1f5ff94 fix(release): use root release-please manifest (#502)
• 7741954 fix(release): align stem release manifest with latest 0.x tag (#500)
• bc2d53b fix(release): revert invalid 1.0.0 changelog (#498)
• bfe300c chore(main): release 1.0.0 (#497)
• 98ef652 ci(release): use msn-ci-bot App token for release-please (#494)
• a7aa351 fix(security): bump Go 1.26.5 and gate Trivy SARIF (#496)
• fa5fd33 chore: update stem toolchain dependencies (#492)
• 4222748 ci(governance): exempt release-please PRs from human PR-body template (#489)
• ef849b2 ci(security): add Semgrep SAST gate (#485)
• 9c18fcb chore(license): add license-key-circumvention clause to BUSL Additional Use Grant (#483)
• ac7df3f ci(perf): stop macOS-on-PR, enable Go cache, least-privilege (#481)
• 5dbe869 chore(build): remove Docker/GHCR publishing (#478)
• 9746bb3 docs(security): document CodeQL alerts #99/#100 as false positives (#477)
• 0993c8d fix(quality-gates): honest exit codes, fmt-check, npm audit fix, CI/make parity (#468)
• fb37e61 chore(deps)(deps): bump github/codeql-action from 4.36.0 to 4.36.2 (#395)
• a5e2518 ci(gates): add filename-policy gate (no monolith naming outside internal/api) (#455)
• da2bd38 refactor(api): extract CORS origin classification into internal/api/cors leaf (ADR-0011) (#454)
• 51dda73 refactor(api): extract TLS provisioning into internal/api/tlsutil leaf (ADR-0011) (#453)
• 21d0d27 refactor(api): extract SSE broadcaster into internal/api/sse leaf (ADR-0011) (#452)
• 37c9b7e refactor(api): extract rate limiter into internal/api/ratelimit leaf (ADR-0011) (#451)
• 5d0df15 refactor: purge pre-v1 compat aliases (Database/Save*/auth-csrf legacy route) (#447)
• dab673d refactor(license): retire TierEnterprise + TierTestSuite alias entirely (#448)
• f7caee7 docs(adr): add ADR-0011 (internal/api sub-package decomposition) (#449)
• 4514635 ci(gates): flip file-size gate to STRICT + restore json-casing gate (#444)
• f1e37c7 chore(release): expose release train metadata (#446)
• 021fe65 refactor(dataplane): split dataplane.go into cohesive files (under size gate) (#440)
• 8d8fec0 chore(deps)(deps): bump actions/checkout from 6.0.2 to 6.0.3 (#394)
• 42744b7 chore(github): standardize repo governance (#442)
• 1de39d9 refactor(ui): split help-content.ts into data/help/* (under size gate) (#438)
• ec976ea refactor(cmd): split main.go into cohesive files (under size gate) (#437)
• dac92bd refactor(help): split tests.go into cohesive files (under size gate) (#439)
• b69fbb1 chore(deps)(deps): bump golang.org/x/crypto in the go-dependencies group (#426)
• 217a205 refactor(ui): decompose App.tsx to providers + routing (W5.5) (#436)
• 510fe8b chore(deps)(deps): bump the npm-dependencies group across 1 directory with 16 updates (#435)
• 7075ea6 feat(ui): extract auth to auth-store + harden authFetch (W5.3) (#434)
• c851848 refactor(ui): extract test-execution config to test-store (W5.4) (#433)
• 4f17830 feat(ui): migrate the stats poll to React Query (W5.2b) (#432)
• 12e073c feat(ui): add React Query + migrate the interfaces read (W5.2a) (#431)
• 5ab0891 fix(ui): give module-certify a distinct violet hue (S7) (#430)
• 45f05d9 refactor(ui): extract shell drawer/palette state to shell-store (W5.1) (#429)
• ccde3f4 refactor(ui): unify HeaderBar icons to lucide-react (S4/S8) (#428)
• 483b7b6 fix(ui): close token-gate escapes in themeComponents + narrow the gate (S5) (#425)
• 9602825 chore(ci): add file-size gate (warn mode) (W0c) (#424)
• 1c36e07 ci(stem): add JSON wire-casing gate — camelCase ratchet (enforcement parity with seed) (#421)
• 1eec09e test(ui): add nav↔route parity guard (enforcement parity with seed) (#420)
• 4922212 fix(ui): i18n the Account nav group label (S3) (#419)
• c2dc50c docs(adr): adopt fleet JSON wire-casing convention — camelCase API, no exceptions (#422)
• 22d9afa chore(deps): override esbuild to 0.28.1 (GHSA-gv7w-rqvm-qjhr) (#423)
• a8d629a docs(security): record accepted CSRF defense-in-depth edges (ADR-0009) (#418)
• 59a7ebd chore(deps)(deps): bump the npm-dependencies group across 1 directory with 19 updates (#396)
• cd30725 perf(ui): split vendor chunks, add bundle analyzer (#417)
• 1aa020e feat(api): make request body-size limit declarative in the route registry (#415)
• 65421cd fix(ui): stop emitted vite.config.js shadowing vite.config.ts (#416)
• 505f6e3 test(auth): pin the CSRF exempt-list with a coverage gate (#341) (#414)
• 2ffcaf8 fix(ui): suppress node dep0205 build warning
• a42dc08 chore(deps)(deps): bump securego/gosec from 2.26.1 to 2.27.1 (#391)
• b6be3c6 chore(deps)(deps): bump the go-dependencies group across 1 directory with 2 updates (#392)
• 39990a3 chore(deps)(deps): bump codecov/codecov-action from 6.0.1 to 7.0.0 (#408)
• d0707f4 chore(main): release 0.23.1 (#382)
• 4b36291 ci(release): drop macOS amd64 (Intel) build target (#413)
• 15ab94e ci(release): bump goreleaser-cross to v1.26.3-v2.16.0 (#412)
• 06392db docs: align makefile local build scope
• 9eb862b chore: simplify local make system
• 60678a4 chore: rename Go module path to github.com/MustardSeedNetworks/stem (#411)
• 1a2239c fix(dataplane): require full payload length in RFC2544/Y.1564 frame validators (#410)
• b78e407 feat(license): replace forgeable rotor cipher with Ed25519-signed tokens (#409)
• da57391 refactor(api): extract Run-scoped background goroutine lifecycle into BackgroundComponents (#407)
• a6b99ef refactor(services): collapse dual module->executor map into the registry (#404)
• 55ae19a feat(api): capability registry for declarative route policy (register) (#401)
• 13ee83c refactor(docs): rewrite ARCHITECTURE.md to reality + drop dead error shim (#406)
• 2b431b6 docs(adr): establish docs/adr and record 4 architecture decisions (#405)
• edfc32f refactor(services): rename package modules -> services to match its directory (#403)
• 2862e65 docs: fix stale 'Seed Test Suite' product name -> 'The Stem' (#402)
• aa62493 chore(lint): enforce inward dependency direction for internal/services (#400)
• 554fc76 fix(api): make RFC1918 CORS reflection opt-in (STEM_CORS_ALLOW_PRIVATE) (#399)
• 7d9a4e3 fix(api): authenticate reflector config/stats + pin govulncheck (#398)
• 56117e8 chore: bump Go 1.26.4 (GO-2026-5037/5039) + gitleaks/e2e CI cleanup (#397)
• 579774e fix(smoke): annotate STEM_AUTH_PASSWORD assignment as gitleaks:allow (#389)
• 8a3e683 fix(e2e): role-chip-test_master uses underscore not hyphen (#388)
• 438b35d test(e2e): action-button testids - confirm modal, help tabs, role-switch (#387)
• ede9f70 test(e2e): migrate 10 stem heading-name regex sites to page-header-title (#386)
• d4a76a7...

v0.23.0

The Stem v0.23.0 — Network Performance Testing Tool by Mustard Seed Networks.

Changelog

• 2b64395 chore(main): release 0.23.0 (#375)
• 85d56a1 feat(cli): help entries for tui/list-tests/install-ca + completeness test (#371)
• 86b76b5 feat(help): surface version in HelpDrawer header (in-app About) (#372)
• 991c92f feat(a11y): axe-core test harness for the Button primitives (#370)

v0.22.0

The Stem v0.22.0 — Network Performance Testing Tool by Mustard Seed Networks.

Changelog

• 9c7bcf8 chore(main): release 0.22.0 (#374)
• f36d954 feat(i18n): en/es key parity + DNT compliance test (stem) (#373)
• 28a870f refactor(license): switch internal tests to TierProfessional name (#369)

v0.21.4

The Stem v0.21.4 — Network Performance Testing Tool by Mustard Seed Networks.

Changelog

• 6cc3487 chore(main): release 0.21.4 (#367)
• 1e03d98 ci: block undefined design tokens in token-discipline guard (#368)
• 69e1e30 fix(ui): replace undefined status-danger token with status-error (#366)
• 373a772 refactor(ui): tighten token discipline (AA, rgb guard, shadow) (#364)

v0.21.3

The Stem v0.21.3 — Network Performance Testing Tool by Mustard Seed Networks.

Changelog

• 4a65ca7 chore(main): release 0.21.3 (#363)
• c5755ce test(ui): sync HeaderBar tests with the slimmed header (#342) (#362)
• e33fd7f fix(ui): repair token-discipline guard and close white/black color leaks (#361)
• 767c05e refactor(ui): migrate component color/heading leaks to design tokens (#360)

v0.21.2

The Stem v0.21.2 — Network Performance Testing Tool by Mustard Seed Networks.

Changelog

• cddb044 chore(main): release 0.21.2 (#358)
• fb5345e chore(security): add output-escaping/XSS regression gate (#343) (#359)
• 5cd6489 fix(security): auth-gate /mode /settings /interfaces /stats + first-run hardening (#340, #356) (#357)
• e55c8a2 docs(ui): retire canonical/sync framing — no master repo (#352)
• 0a8a31c refactor(ui): extract stem help drawer into components + i18n the chrome (#44) (#355)

v0.21.1

The Stem v0.21.1 — Network Performance Testing Tool by Mustard Seed Networks.

Changelog

• 9fe2020 chore(main): release 0.21.1 (#351)
• f2a1518 feat(ui): add canonical help-drawer testids (Phase 3b) (#354)
• 6138e4b feat(ui): converge settings drawer shell — a11y + testids (Phase 3c) (#353)
• 446b639 fix(ui): render sidebar product name from t('app.title'), not hardcoded (#350)

v0.21.0

The Stem v0.21.0 — Network Performance Testing Tool by Mustard Seed Networks.

Changelog

• 72606fc chore(main): release 0.21.0 (#346)
• e399942 test(e2e): scope role-gated content checks to visible matches (#349)
• 41815e0 ci(lighthouse): drop recommended preset, keep meaningful gates (#348)
• 6a5de95 fix(ci): unblock stem main — PageHeader testid, E2E selector, robots.txt (#347)
• cf72ebf refactor(ui): slim HeaderBar — kill sidebar duplicates, logout to profile menu (#342)
• 3983689 feat(ui): canonical shell — modernize Sidebar + PageHeader (Phase 1) (#339)
• 533f7f8 fix(ci): unblock main — race in sse, lighthouse cert, e2e selectors (#345)
• a7dab80 refactor(ui): tokenize all design primitives (Phase 0 harmonization) (#338)

v0.20.0

The Stem v0.20.0 — Network Performance Testing Tool by Mustard Seed Networks.

Changelog

• df479cf chore(main): release 0.20.0 (#323)
• a58d429 chore(i18n): promote check-keys.py unused-key check from warn to fail (#337)
• 4324036 test(i18n): add ES layout sanity e2e for overflow detection (#336)
• cd6a793 feat(i18n): add per-repo dynamic-prefixes allowlist for check-keys.py (#335)
• a016b26 test(i18n): port phase 6 language-switch e2e spec to stem (#334)
• 2afb218 feat(forms): finish react-hook-form rollout — App.tsx auth + Recovery + Setup (#332) (#333)
• 92cffef feat(forms): adopt react-hook-form for MFA setup + disable (#325) (#331)
• 224b39d feat(forms): sweep 6 remaining ConfigForms onto react-hook-form (#325) (#330)
• b0232aa fix(i18n): resolve 48 t() calls referencing missing EN locale keys (#329)
• bf7937a feat(forms): adopt react-hook-form + valibot resolver, Y.1564 pilot (#325) (#328)
• 85a3382 feat(i18n): port check-keys.py + add phase 6 unit tests (#327)
• b34dfbb chore(deps): bump @biomejs/biome 2.4.15 -> 2.4.16 (#326)
• 771a07c feat(i18n): add useLocale hook + migrate HelpDrawer plurals (#324)
• c4e5870 fix(i18n-es): normalize accents and add missing diacritics (107 fixes) (#321)
• 9499f86 feat(api): port seed's strict JSON decode helpers (#320) (#322)
• 56eacd5 feat(i18n): extract ModuleCard a11y strings to locale keys (#319)
• 0e3f478 ci(i18n): replace stub i18n job with shared validation script (#318)
• 963bf12 fix(i18n): update document.lang on locale change for a11y (#316)
• 08ef121 fix(auth): remove t.Parallel from HIBP tests that mutate shared endpoint (#315)