Skip to content

1.0.0 — the semver baseline

Choose a tag to compare

View all tags
@palermo-git palermo-git released this 22 Aug 17:43
· 70 commits to main since this release
v1.0.0
d991f00

The 1.0.0 release freezes the public API under semantic versioning (ADR-0010) — no removals or renames from 0.2.x, three safety corrections, and the first release whose version floors are actually CI-tested.

Fixed

  • Truncated chunked responses no longer classify as success (partial 2xx could mark a delivery succeeded).
  • The literal-IP https certificate check actually works now — the iPAddress-SAN matcher was dead-on-arrival; both IPv4 and IPv6 verify against fixture certificates.
  • A hostile chunked response can no longer balloon worker memory (8MB declaration held ~16.8MB against a 16-byte bound; now phase-bounded consumption, verified by probe).
  • AshHooks.Delivery.prune/2 returns the documented error tuple instead of raising.

Added

  • Semver + support policy (ADR-0010), SECURITY.md with a private disclosure channel, CONTRIBUTING.md, UPGRADING.md — all shipping in the tarball and on hexdocs.
  • Dialyzer gate on the public API (its first run caught the dead IP-SAN matcher).
  • CI: floor leg resolving dependencies at the declared minimums (it disproved the old Elixir 1.15 claim — floor is now ~> 1.17/OTP 27+), package leg checking the tarball and DSL cheat sheets, advisory coverage.

Migration notes: UPGRADING.md. Full changelog: CHANGELOG.md.

Assets 2
Loading