Skip to content

v0.2.3

Latest
Latest

Choose a tag to compare

View all tags
@github-actions github-actions released this 15 Sep 01:21
· 6 commits to main since this release
v0.2.3
f561123
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Kranz v0.2.3 rebuilds the CLI and all four Cargo packages with rustls 0.23.45, fixing RUSTSEC-2026-0285 / GHSA-2mjx-qc3c-rqvc. The fix corrects acceptance of TLS 1.3 handshake messages across encryption level boundaries. Existing v0.2.2 installations need the rebuilt release.

  • Both dependency lockfiles and bundled license inventories contain the corrected rustls version.
  • A reusable archive check verifies provenance and runs the downloaded binary on all five supported native platforms: Linux x86_64, macOS ARM64/x86_64, and Windows ARM64/x86_64.
  • The website now includes reviewed guides for first missions, reviewing changes, validation evidence, and optional Slack setup.

This patch changes no mission schema, authorization policy, backend default, or configuration contract. ACP and external gate integration remain roadmap work.

Install from the platform archives below, or with Cargo:

cargo install kranz --version 0.2.3 --locked

The four packages are published at v0.2.3: kranz, kranz-engine, kranz-server, and kranz-slack. Each downloaded registry archive matched the local upload and recorded the tagged source commit. A fresh, isolated, locked crates.io install passed version, server authentication, embedded dashboard, license and graceful token-cleanup checks with its source cache hidden.

Verification: main CI, release rehearsal, native rehearsal archive checks, tag source verification and release build, and native execution of all five tag-built archives passed. Published downloads matched the tested tag archives. All seven assets passed build-provenance verification; the checksum manifest covers all six payloads, and the SBOM records rustls 0.23.45. The published macOS ARM64 binary is byte-identical to the rehearsal binary that passed isolated runtime/server checks outside a source checkout.

Local full-workspace regression results were 2,940 passed, zero failed, and 10 existing ignored tests; dashboard tests were 238 passed. The release review records the scope and five-axis self-review. It is not an independent security audit.

Assets 9
Loading