Skip to content

DKIM2 v0.1.49

Choose a tag to compare

@github-actions github-actions released this 28 Oct 19:52
· 16 commits to main since this release

Commit Summary

Added

  • Add: Store and sign with ML-DSA-44 credentials in dkim2d (3725fcc)
  • Add: Verify and sign pure ML-DSA-44 in the library (cd9e09f)

Changed

  • Change: Review the root library API after removing the ignored status (bb34697)
  • Change: Review the root library API against the Draft-08 surface (6655c4e)
  • Change: Prepend library trace fields at the top of the header block (e45506f)
  • Change: Place this hop's trace fields at the top of the header block (a73b262)
  • Change: Bind DSN signing identity to Draft-08 Section 16.2 recipients (e5c0d5a)
  • Change: Require 2048-bit RSA keys for signing (bac34cc)
  • Change: Name the selector of every non-passing signature set (f6dc489)
  • Change: Map verification states and reasons to Draft-08 Fully Verified (760e7b0)
  • Change: Evaluate Draft-08 AND/OR signature and hash groups (b1c2dbd)
  • Change: Parse Draft-08 hash and signature groups (d4fc7a4)
  • Change: Sign Auto-Submitted and VBR-Info per Draft-08 Section 4 (98a31c4)
  • Change: Advance the baseline identifiers to Draft-08 and DNS-02 (f02b9e7)

Fixed

  • Fix: Resolve one module cache and gate private proxy reconstruction (5aa5f33)
  • Fix: Install scanner views by verified descriptor copy without reflinks (e3aceb0)
  • Fix: Require a real source for an aggregate unsupported_algorithm reason (7e418b9)
  • Fix: Pick decisive sets by group and report unknown algorithms as permerror (38edd52)
  • Fix: Evaluate historical hash tuples through the single Section 14.7 owner (54775d2)
  • Fix: Complete the live datasource integration allowlists and report binding (64ab12f)
  • Fix: Restrict verifier projection algorithms to the Draft-08 vocabulary (19aad3c)
  • Fix: Derive the datasource hard limits from three credentials per profile (9784c78)
  • Fix: Recompute the Rspamd Policy E2E projection bindings for Draft-08 (b9a54dc)
  • Fix: Count the ML-DSA-44 conformance cases in the portable evidence freeze (952ff93)
  • Fix: Address the Postfix not_local notification under the foreign domain (2684d51)
  • Fix: Derive datasource handle bounds from three credentials per profile (a3938ae)
  • Fix: Restore the Postfix qualification run on the Go 1.27.3 image (209591d)
  • Fix: Bind the header-boundary conformance case to its renamed test (361ce4b)

Tests

  • Test: Freeze the Postfix helper guardrail through Makefile prerequisites (3627e9c)
  • Test: Cover all-known values in the hash precondition table (e449bcb)
  • Test: Extend the dkim2ctl oracle socket deadlines for oversized bodies (66e5e32)

Documentation

  • Docs: Attribute the ignored-status rejection to the adapter validation (5e03d6a)
  • Docs: Correct the algorithm vocabulary and test command references (2ac9c7b)
  • Docs: Complete the Draft-08 migration documentation (18a3f7b)

Build And CI

  • Build: Run gate tests without the go test result cache (7ffc31a)
  • Build: Gate tools-module tests and Rspamd projection bindings in guardrails (3df0b86)

Full Changelog: v0.1.48...v0.1.49