Skip to content

v0.12.0

Choose a tag to compare

View all tags
@danieljustus danieljustus released this 24 Aug 15:25
v0.12.0
acf15a3
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

What's Changed

Features

  • auditkit: shared tamper-evident audit log infrastructure (#152) — auditkit.Sink provides a tamper-evident audit log with SHA-256 chaining, ChainAnchor checkpoints for crash-safe flushes, and Verification for integrity checks. Shared across all Symaira tools.

Performance

  • mcpserver: concurrent tool dispatch (#141) — ServeIO now dispatches tools/call handlers in goroutines with a sync.WaitGroup, so one slow handler cannot block the transport. The responseWriter is mutex-protected to prevent interleaved writes. Includes TestConcurrentToolDispatch.

Fixes

  • cosign: correct double-escaped default certificate identity regexp (#142) — closes #134, #135, #136, #137
  • golangci-lint: correct .golangci.yml to use linters.settings (golangci-lint v2) (#159) — closes #138
  • domkit: neutralize stale package docs (#159) — closes #139
  • godoc: add runnable Example* tests for 7 packages (#159) — closes #140
  • CI: decouple check names from Go toolchain version #145 — closes #145 (resolved via API during prerelease)

Breaking changes

  • embedkit: removed the unused embedkit package (#160) — closes #156. No consumers found across the Symaira workspace; symbrain has its own specialized implementation.

Chore / Docs

  • deps: bump golang.org/x/net from 0.57.0 to 0.58.0 (#143)
  • README: correct consumer list after repo consolidation (#153)
  • README: name the tools that actually consume this library (#154)
  • Security: add .github/SECURITY.md with supported versions and reporting policy (#161)
  • CI: pin golangci/golangci-lint-action to SHA for supply-chain hardening (#161)

Security

No new vulnerabilities. Secret scanning, push protection, and Dependabot security updates are enabled. secret_scanning_non_provider_patterns and secret_scanning_validity_checks remain disabled — these require GitHub Advanced Security (not available for personal-account repos; see #132).

Closed Issues

None directly closed by this release's tag (issues were closed via the implementation PRs).

Full Changelog: v0.11.0...v0.12.0

Assets 2
Loading