v0.6.0

0.6.0

v0.5.0

0.5.0

v0.4.0

QueueFlow 0.4.0

v0.3.0

QueueFlow 0.3.0

v0.2.0

Breaking

• The API fails closed. queueflow serve in api or all mode now
  refuses to start unless tenant credentials (--jwt-secret and/or
  --api-keys) and a --worker-token are configured. The previous
  development placeholder (any non-empty token authenticates as tenant
  tenant1; worker endpoints open to any authenticated caller) is still
  available, but only when requested explicitly with --dev
  (QUEUEFLOW_DEV=1). Library users: AuthConfig::default() now rejects
  every request; use AuthConfig::development() for the old behaviour.
• GET /api/v1/stats is tenant-scoped. It now returns durable counts for
  the caller's tenant read from the store (jobs in the store, completed,
  failed, retries, dead letters, and the same for workflows) instead of the
  process-local engine counters, which leaked cross-tenant activity and reset
  on restart. The response shape is unchanged. The process counters remain
  available on the Prometheus metrics port.
• JobStore gained a required method, count_stats, and JobApi gained
  tenant_stats. Custom store implementations must implement it.

Added

• --dev / QUEUEFLOW_DEV flag for local development without credentials.
• --auto-migrate false (and QUEUEFLOW_AUTO_MIGRATE=false) can now turn
  startup migrations off; previously the flag could only be set, not unset.
• Engine::tenant_stats and JobStore::count_stats.
• Benchmark harness (scripts/bench.sh) and BENCHMARKS.md.
• SECURITY.md, this changelog, and Dependabot configuration.

Changed

• The OpenAPI document's info.version now follows the crate version instead
  of a hard-coded 1.0.0.
• make docker and the README now use the ghcr.io/elision-labs/queueflow
  image name that the release workflow actually publishes.
• Python SDK generator templates ship a worker runtime; the Go SDK is
  generated with its real module path.
• Dependency updates for RUSTSEC-2026-0190 (anyhow), RUSTSEC-2026-0221
  (event-listener), RUSTSEC-2026-0258 (h2), and RUSTSEC-2026-0285 (rustls).
  RUSTSEC-2023-0071 (rsa, via jsonwebtoken) is documented as not applicable
  in .cargo/audit.toml.

v0.1.0

CI: release.yml was unparseable; fix two broken jobs

- release.yml never ran once: the step name "Publish (ordered: core ->
  ...)" contains an unquoted colon-space, which makes the whole file
  invalid YAML - GitHub stamped a 0-second "workflow file issue"
  failure on every push and silently skipped the v* tag trigger. Quote
  it.
- The package job carried its own copy of the in-workspace .crate
  extraction (same bug just fixed in the Makefile); point it at
  make check-package instead of duplicating.
- The python codegen check byte-compiled into the root-owned
  docker-generated tree, which only works where Docker remaps file
  ownership (macOS); send the bytecode cache to a writable tmpdir.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>