Skip to content

Stoke v0.2.2

Latest

Choose a tag to compare

@github-actions github-actions released this 11 Oct 16:08
· 6 commits to main since this release

Stoke v0.2.2

Maintenance and trust-boundary fixes since v0.2.1.

Changes

  • Streamed OpenAI Responses disclose the selected node; subscription streams disclose billing mode without inventing a dollar cost before final usage.
  • Durable budget admission is atomic across concurrent requests while preserving the established budget-refusal response.
  • Built-in privacy filters handle nested content and multiline private keys; audit logging uses metadata-only defaults and owner-only files.
  • HTTP webhook credential and destination boundaries are hardened.
  • Optional JavaScript plugin chains compose their results correctly and have feature-gated regression coverage.
  • Installer replacement failures restore the previous binaries; rollback and uninstall commands are available.
  • Documentation, routing/federation proof harnesses, and Actions storage retention have been updated.

Distribution and limits

The release matrix is macOS ARM64/x64 and Linux ARM64/x64, with stoke and stoke-cli in each archive. Default prebuilt binaries do not include the optional V8/JavaScript feature; build with --features js-plugins to enable it. The optional Headroom companion is included only in the macOS ARM64 package and requires its separately pinned Python environment.

Platform compilation and deterministic CI are not a claim of real-provider or native runtime testing on every platform. macOS binaries are not Developer ID-signed or notarized. Provider credentials, local models, and subscription entitlements are not supplied by this release. No general savings or quality-equivalence claim is made.

Install and rollback

After publication, install the exact version:

curl -sSf https://stokegate.com/install | sh -s -- --version v0.2.2

The GitHub release contains SHA-256 sidecars and a manifest identifying the exact source commit. Verify the checksum before deploying. Existing configuration is retained. The installer preserves the previous binary pair; restore it with:

curl -sSf https://stokegate.com/install | sh -s -- --rollback

For a clean downgrade, pin --version v0.2.1. Do not delete or reconcile the durable ledger merely to downgrade.

Release gates

The current .github/workflows/ci.yml defines core build/unit/smoke checks, optional macOS ARM64 Headroom packaging checks, and cargo test --locked --features js-plugins. The release workflow builds all four archives. Stable publication requires all checks to pass and the exact archive inventory, manifest source identity, and checksums to be verified. Source preparation alone is not publication.

Webhook contract migration

Webhook JSON no longer includes the raw gateway api_key; it supplies a stable opaque key_id instead. Update consumers that relied on api_key. The identifier is not an authentication credential. See the updated webhook guide.

Verified release provenance