v4.2.0

v4.2.0 (2026-09-27)

This release is published under the MIT License.

Features

• models: Accept memoryPerMegapixel on the resources block (44ddd68)

Testing

• resources: Pin the per-megapixel contract the runtime relies on (2a0f93d)

---

Detailed Changes: v4.1.2...v4.2.0

v4.1.2

v4.1.2 (2026-09-26)

This release is published under the MIT License.

Bug Fixes

• freeze: Build on bookworm and run on distroless python3-debian12 (9ad5802)

• freeze: Put the frozen binary at /opt/sdk/bin/cytario-app-sdk (ba56c41)

• freeze: Stop force-including click; build the runtime container on PRs (ec0b41e)

---

Detailed Changes: v4.1.1...v4.1.2

v4.1.1

v4.1.1 (2026-09-26)

This release is published under the MIT License.

Bug Fixes

• ci: Build the runtime image from the Release workflow, not the tag push (35c0cab)

• ci: Declare the Harbor secrets on the runtime-image workflow_call (b2d7f30)

---

Detailed Changes: v4.1.0...v4.1.1

v4.1.0

v4.1.0 (2026-09-26)

This release is published under the MIT License.

Bug Fixes

• freeze: Distroless final base and oss registry project (a44bc48)

• freeze: Resolve dist-info via sys.path and self-host the CI broker stand-in (f620df0)

Chores

• ci: Bump all workflow actions to their latest versions (796172a)

Documentation

• freeze: Use a neutral algorithm-image example (ba770b7)

Features

• freeze: Publish the wrapper as a frozen binary runtime image (2de3685)

---

Detailed Changes: v4.0.1...v4.1.0

v4.0.1

v4.0.1 (2026-09-24)

This release is published under the MIT License.

Bug Fixes

• runtime: Download a source without a trailing slash as one object [C-622] (924d988)

• runtime: Resolve a file parameter by its own URI, not by list alignment [C-622] (45fa7cf)

Documentation

• runtime: Document the folder/object input contract and by-source helper [C-622] (237424a)

---

Detailed Changes: v4.0.0...v4.0.1

v4.0.0

v4.0.0 (2026-09-23)

This release is published under the MIT License.

Features

• broker: Present a per-job opaque session token to the credential broker [C-604] (7eeb4af)

Refactoring

• broker: Name the job-id variable as a constant rather than a provider seam [C-604] (4c6c9fa)

Breaking Changes

• broker: The broker wire contract changed. The request body is now {"token": } — jobId is no longer sent — and a refreshToken in the response is ignored rather than applied, so a client and a host must be paired across C-604: against a pre-C-604 broker the job session token does not resolve to a ledger row, and against this client a batch grant token is presented as a session token, so the two do not interleave. AWS_BATCH_JOB_ID is no longer required, and a deployment relying on the previous short-lived, rotating grant semantics must re-pair with the C-604 host.

---

Detailed Changes: v3.3.1...v4.0.0

v3.3.1

v3.3.1 (2026-09-20)

This release is published under the MIT License.

Bug Fixes

• broker: Distinguish revoked from expired grant failures (b0d5cbd)

---

Detailed Changes: v3.3.0...v3.3.1

v3.3.0

v3.3.0 (2026-09-08)

This release is published under the MIT License.

Features

• App definition parameter type file [C-478] (a2ae271)

---

Detailed Changes: v3.2.0...v3.3.0

v3.2.0

v3.2.0 (2026-08-17)

This release is published under the MIT License.

Features

• Add app-declared compute resource block (C-416) (2c3d3ae)

---

Detailed Changes: v3.1.0...v3.2.0

v3.1.0

v3.1.0 (2026-08-14)

This release is published under the MIT License.

Bug Fixes

• C-405 inject CYTARIO_PARAMETERS as -- flags in run (7ce0951)

• ci: Add missing workflow to enforce semi-linear history (0f64282)

Chores

• Remove ticket IDs from code comments (9822461)

Features

• broker: Store rotated refresh token in-memory for next mint (C-391.2) (d4cafbe)

---

Detailed Changes: v3.0.0...v3.1.0