v0.12.0

What's Changed

• license: relicense under Apache License 2.0 by @tas50 in #150
• ci: add a blocking golangci-lint job by @tas50 in #151

Full Changelog: v0.11.0...v0.12.0

v0.11.0

What's Changed

• bench: run the load generator against a real Chef Infra Server by @tas50 in #120
• ci: bump github/codeql-action/upload-sarif from 4.37.3 to 4.37.6 in the github-actions group by @dependabot[bot] in #124
• deps(deps): bump modernc.org/sqlite from 1.55.0 to 1.56.0 in the go-dependencies group by @dependabot[bot] in #123
• fix: correct the .claude worktrees gitignore typo by @tas50 in #125
• bench: measure cinc-zero on SQLite too, for a durable comparison by @tas50 in #121
• rename: cinc-zero -> cinc-server-ng by @tas50 in #126
• docs: position as a replacement for both Chef Infra Server and chef-zero by @tas50 in #127
• ci: bump the github-actions group across 1 directory with 3 updates by @dependabot[bot] in #129
• deps(deps): bump modernc.org/sqlite from 1.56.0 to 1.57.0 in the go-dependencies group by @dependabot[bot] in #130
• refactor!: move module path to github.com/cinc-project/cinc-server-ng by @tas50 in #132
• docs: record the non-obvious invariants of this repo in CLAUDE.md by @tas50 in #149
• fix(security): stop a user from promoting itself to superuser by @tas50 in #135
• fix(security): gate the invitation listings on standing by @tas50 in #141
• fix(security): require the superuser to update or delete an organization by @tas50 in #136
• fix(security): keep an org client from shadowing a global user by @tas50 in #138
• fix(security): revoke group membership when an actor leaves an org by @tas50 in #137
• deps(deps): bump modernc.org/sqlite from 1.57.0 to 1.58.0 in the go-dependencies group by @dependabot[bot] in #133
• ci: bump the github-actions group across 1 directory with 2 updates by @dependabot[bot] in #134
• fix: synchronize the group membership index against concurrent access by @tas50 in #139
• fix(security): delete an object's ACL along with the object by @tas50 in #140

Full Changelog: v0.10.0...v0.11.0

v0.10.0

What's Changed

• Annotate protocol-mandated MD5 and bounded allocation as safe by @tas50 in #103
• ci: add xgrep security scan workflow by @tas50 in #104
• ci: bump the github-actions group across 1 directory with 10 updates by @dependabot[bot] in #108
• deps(deps): bump modernc.org/sqlite from 1.53.0 to 1.54.0 in the go-dependencies group by @dependabot[bot] in #106
• fix(security): close authorization gaps and authorize cookbook file transfers by @tas50 in #109
• perf: flatten fleet-scale check-in cost by @tas50 in #110
• perf: index search and make fleet bootstrap linear by @tas50 in #111
• feat: report real metrics from /_stats by @tas50 in #112
• test: close conformance gaps and add differential testing against a real Chef server by @tas50 in #113
• fix: idempotent Close, fail-closed authorization, wider differential coverage by @tas50 in #114
• ci(differential): fix the workflow's setup, and record the reference-routing blocker by @tas50 in #115
• ci(differential): use Cinc Server's own paths, and get the comparison actually running by @tas50 in #116
• ci: bump the github-actions group with 2 updates by @dependabot[bot] in #119
• deps(deps): bump modernc.org/sqlite from 1.54.0 to 1.55.0 in the go-dependencies group by @dependabot[bot] in #118
• fix(api): return Chef's object envelopes on responses that carry them by @tas50 in #117

Full Changelog: v0.9.0...v0.10.0

v0.9.0

What's Changed

• feat(state): load org membership from members.json; seed anna/ben in acme by @tas50 in #70
• fix(api): correct five confirmed bugs with regression tests by @tas50 in #72
• fix(api): preserve actor key on update; constant-time password check; name-robustness tests by @tas50 in #73
• ci: bump the github-actions group with 6 updates by @dependabot[bot] in #71
• fix(search): stop a stray ]/} hanging the query lexer; add fuzzing, body cap, and coverage by @tas50 in #74
• test(auth): fuzz the signature/header verification path by @tas50 in #75
• docs: note the build artifact path in CLAUDE.md by @tas50 in #76
• test(state): expand dev/test-repo to 99 nodes by @tas50 in #77
• test(state): client version drift, bare nodes, and recent check-ins by @tas50 in #78
• Back test nodes with fauxhai ohai data + uptime by @tas50 in #79
• Pluggable storage backend: memory + SQLite (the persistence foundation) by @tas50 in #80
• Wire Store/Org onto the pluggable Backend + --storage/--db flags by @tas50 in #81
• Idempotent restart on a durable store (stable keys) + persistence docs by @tas50 in #82
• Atomic Tx for the storage backend; provision orgs transactionally by @tas50 in #83
• docs: rewrite intro — in-memory or SQLite, drop-in for testing and production by @tas50 in #84
• Loadable SQLite dev database + dedicated developer docs (cinc-console wiring) by @tas50 in #85
• ci: hardened container release workflow (mirrors cinc-console) by @tas50 in #86
• docs: move docs/superpowers/specs to docs/specs by @tas50 in #87
• docs: correct cinc-console description and repo link by @tas50 in #89
• feat(sqlite): forward-only schema migration engine by @tas50 in #88
• docs: add a security/footprint section to 'Why cinc-zero' by @tas50 in #90
• feat(authz): enforce ACLs by default in the binary + faithful client bootstrap by @tas50 in #91
• feat(dev): faithful authz for seeded console users; rename anna/ben to tim/jack by @tas50 in #92
• feat(dev): ship a committed ~1100-node ACME business fixture via seedgen by @tas50 in #93
• feat(fleetsim): steady-state fleet check-in traffic simulator by @tas50 in #94
• Update the loadtest CLI options + remove the binary by @tas50 in #95
• Add more files to the gitignore by @tas50 in #96
• perf(sqlite): cap pool to one connection to end write busy-wait under fleet load by @tas50 in #97
• perf(sqlite): give reads a dedicated WAL pool so dashboards don't starve under fleet load by @tas50 in #98
• perf(sqlite): reuse prepared statements on the objects-table hot path by @tas50 in #99
• perf(sqlite): prepare the org-probe and blob single-row statements by @tas50 in #100
• perf(sqlite): optional group commit to coalesce writes under fleet load by @tas50 in #101
• docs: tighten "Why cinc-zero" and drop em-dashes from the README by @tas50 in #102

Full Changelog: v0.8.0...v0.9.0

v0.8.0

What's Changed

• feat(state): stash user passwords on load; seed anna with a web login by @tas50 in #69

Full Changelog: v0.7.0...v0.8.0

v0.7.0

What's Changed

• test: source/issues URLs and complex version deps on some test cookbooks by @tas50 in #66
• feat(test-repo): add demo data bags (users, secrets, apps) by @tas50 in #67
• feat(auth): webui-key impersonation (X-Ops-Request-Source: web) by @tas50 in #68

Full Changelog: v0.6.3...v0.7.0

v0.6.3

What's Changed

• fix(repo): carry maintainer and project URLs on loaded cookbooks by @tas50 in #65

Full Changelog: v0.6.2...v0.6.3

v0.6.2

What's Changed

• Revert immutable-release workflow change by @tas50 in #64

Full Changelog: v0.6.1...v0.6.2

v0.6.1

What's Changed

• fix(ci): attach release assets before publishing for immutable releases by @tas50 in #63

Full Changelog: v0.6.0...v0.6.1

v0.6.0

What's Changed

• Enrich test-repo environments with attributes/pins and ship matching cookbooks by @tas50 in #61
• feat: surface cookbook license and description from metadata by @tas50 in #62

Full Changelog: v0.5.0...v0.6.0