Immutable
release. Only release title and notes can be modified.
Added
- A release-bound benchmark report with sanitized per-sample data and exact
release, commit, archive, binary, harness, environment, and methodology
provenance.
Changed
- The README now explains the removed Codex agent layer and the retained
ChatGPT/Codex account controls near the top of the page. - Future release archives include
BENCHMARKS.md. - Draft release verification now resolves the draft's numeric GitHub release
ID before using the REST API, whose tag endpoint does not expose drafts.
Security
- Updated the shipped dependency closure to patched releases of
gix,
gix-fs,gix-pack,jsonwebtoken,opentelemetry_sdk,serde_with,
tar, and, on Linux, OpenSSL. - Moved the OpenTelemetry HTTP exporter to its matching
reqwest0.13 client
while preserving custom-CA-only TLS behavior. - The inherited Hickory 0.25 resolver remains pinned by Rama
0.3.0-alpha.4. The high-severity NSEC3 issue requires DNSSEC features that
Codex Raw does not enable; this release does not claim to fix the remaining
Hickory advisories. Moving to stable Rama is a separate breaking API and
Rust-toolchain migration.