Skip to content

v1.32.5

Latest
Latest

Choose a tag to compare

View all tags
@ardan-bkennedy ardan-bkennedy released this 05 Sep 14:41
· 3 commits to main since this release
v1.32.5
dc924c0
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Release Notes - v1.32.5

Release Date: September 05, 2026

Overview

Version 1.32.5 hardens the way Kronk obtains and loads its native libraries. It introduces cryptographic integrity verification for the llama.cpp (Yzma) and whisper.cpp (Bucky) bundles, gives operators explicit control over startup library downloads, refreshes the development tooling and test probes, and upgrades the underlying llama.cpp, Bucky, and Malina libraries.

Detailed Changes

New Features

Library Integrity Verification (Yzma & Bucky)

  • Author: William Kennedy
  • Adds SHA-256 manifest verification for the active llama.cpp and whisper.cpp bundles so native code is hashed and checked before it is ever loaded.
  • Introduces two management endpoints, GET /v1/kronk/libs/integrity and GET /v1/bucky/libs/integrity, that hash installed files, compare them against the release-manifest digests, and report per-file states with changed/missing/unexpected counts.
  • Supports externally pinned versions in VERSION@sha256:<64-hex-digest> form so callers can authenticate the release manifest itself instead of trusting the manifest host, and library pulls now verify the selected archive before extraction; a failed post-install verification leaves only the affected backend in degraded mode.

Startup Library Download Control

  • Author: William Kennedy
  • Adds the --lib-download-enabled flag and KRONK_LIB_DOWNLOAD_ENABLED environment variable (default true) to let operators disable the automatic llama.cpp download at server startup.
  • Exposes the matching lib-download-enabled setting in the server configuration and model config, documented in the Browser UI and the manual.

Improvements

Verification Toggle and Default-On Verification

  • Author: William Kennedy
  • Adds the --lib-verify-enabled flag and KRONK_LIB_VERIFY_ENABLED environment variable (default true) to enable or disable bundle verification, with the new --lib-version / KRONK_LIB_VERSION flag accepting the digest-pinned syntax.
  • Kronk now verifies the selected llama.cpp bundle before its device probe and the selected whisper.cpp bundle before either backend loads native code, leaving only the affected backend degraded on failure.

Development Tooling and Media Smoke Probe

  • Author: William Kennedy
  • Extends the one-slot media smoke probe to also exercise incremental message cache (IMC) reuse, asserting deterministic repeat responses and a non-zero cached_tokens count.
  • Removes the obsolete install-latest-llamacpp, install-latest-libs, and kronk-server-upgrade make targets.

Bug Fixes

None.

Documentation

Library Integrity and Startup Documentation

  • Author: William Kennedy
  • Documents the new integrity endpoints, version-pinning syntax, and verification behavior in the API Endpoints and Model Server chapters.
  • Documents the --lib-download-enabled and --lib-verify-enabled flags and updates the Browser UI docs and examples.

Improved Asteroids Example Prompt

  • Author: William Kennedy
  • Refines the examples/talks asteroids build prompt with a clearer neon-vector visual spec, an explicit DOM game-over overlay contract, and rules that preserve the hidden attribute semantics.
  • Adds guidance for a pre-generated static star field and a centralized color palette.

Dependencies

Library Upgrades

  • Upgrades the default llama.cpp release from b10785 to b10809 and advances the pinned Yzma revision.
  • Upgrades Bucky from v1.1.1 to v1.1.2 and Malina from v1.0.6 to v1.0.8.
  • Refreshes direct and indirect dependencies including hashicorp/go-getter, open-policy-agent/opa, ebitengine/purego, and klauspost/compress.

Statistics

Category Count
Total Commits 7
New Features 2
Improvements 2
Bug Fixes 0
Documentation 2

Contributors:

  • William Kennedy

Upgrade Notes

Breaking Changes

NONE.

Migration

No migration required. Bundle verification is now enabled by default: if you previously relied on unverified startup downloads, set --lib-download-enabled=false (KRONK_LIB_DOWNLOAD_ENABLED=false) to opt out, or --lib-verify-enabled=false to disable verification entirely.

Recommended Actions

  • Upgrade to receive the llama.cpp b10809, Bucky v1.1.2, and Malina v1.0.8 updates.
  • Audit installed bundles with the new GET /v1/kronk/libs/integrity and GET /v1/bucky/libs/integrity endpoints.
  • Optionally pin a trusted manifest by setting --lib-version=VERSION@sha256:<64-hex-digest>.
Assets 15
Loading