github.com/faustbrian/go-api-query v1.1.0

1.1.0 - 2026-09-08

Added

• Add preferred HTTP, JSON:API, PostgreSQL, JSON-RPC, and Validation packages
  under adapters/ with behavior matching the released compatibility paths
  (ae89ed7fbf).

Deprecated

• Deprecate the five released adapter paths in favor of their target-oriented
  successors while retaining both through the documented compatibility interval.

Changed

• Share initialized adapter sentinel identities across released and successor
  paths, and select go-validation v1.1.0 for the Validation contract.

• Describe stable-v1 installation, adapter selection, named-type conversion,
  independent migration, and post-publication rollback
  (3d1476e477).

• Replace copied repository verification tooling with the pinned
  go-library-tools v1.0.13 contract while preserving the package API baseline,
  mutation checkpoints, and PostgreSQL integration evidence
  (f3047a824a,
  9e39ea5dae,
  b12293bcc7).

• Adopt the go-library-tools v1.4.0 schema-v2 cohesion contract without
  changing the package API or runtime behavior
  (21c17e8d69).

• Pin reusable CI to the immutable v1.4.0 W14-enforcement workflow and retain
  the complete required repository contract.

• Reconcile owned v1.0.0 dependency checksums with their transparency-log
  authenticated public module archives without changing dependency versions
  (5154bd33e9).

Fixed

• Preserve released PostgreSQL compiler behavior for a zero-value successor
  when compiling a valid plan with no execution fields, constraints, filters,
  or sorts
  (d59d2b2f25).
• Adapt the frozen replay harness at execution time so its descriptor utility
  resolves portably without changing the historical oracle artifact
  (052707e6fd).

Maintenance

• Record, harden, and rebind the immutable legacy replay and mutation evidence
  used to verify the release
  (197a09945a,
  402b896bec,
  6a4cade8ff,
  b4c5295661,
  f2882dfc84,
  0d8dd604a5,
  fcba93080b,
  9278645735,
  c9fadab14e,
  70e2913546,
  4278073716,
  14881eb050).

Documentation

• Replace stale pre-release tooling references with the shared repository
  verification commands and package-owned documentation.
• Link package documentation to the immutable v1.4.0 ecosystem index and
  Service Edge family guidance.

github.com/faustbrian/go-api-query v1.0.0

1.0.0 - 2026-08-25

Changed

• Exclude intentional nested modules from root local-proxy archives so local,
  bootstrap, CI, and public module checksums describe the same source
  boundary.

• Track the pinned documentation-tool lockfile so clean CI checkouts install
  the exact validated cspell dependency.

• Reconcile standalone dependency checksums against deterministic current
  module archives so CI, local verification, and release consumers resolve
  identical content.

• Harden standalone documentation validation with deterministic spelling and
  link checks, package-specific documentation gates, and repository-local
  contributor guidance.

Documentation

• Link the package README to the repository-wide Golib documentation portal.

Distribution

• Include the canonical MIT licence in the independently published module.

Changed

• Publish the module from its standalone github.com/faustbrian/go-api-query identity while preserving its documented API and behavior.
• Upgrade golang.org/x/text to v0.41.0 so the dependency graph no longer
  contains GO-2026-5970.
• Pin owned dependencies to published source revisions so clean consumers can
  resolve the module before the first tags.
• Execute API compatibility tooling against the isolated module graph so owned
  dependency source changes cannot conflict with release checksums.
• Normalized standalone module metadata against the canonical owned dependency
  graph, including complete checksums for clean consumer resolution.
• Removed package-local quality-tool dependencies now that repository tooling
  is versioned and executed exclusively by the root command surface.
• Run API compatibility with an explicitly pinned tool so isolated release
  checks do not depend on undeclared host-installed Go tools.
• Use the repository-pinned current apidiff revision for the canonical API
  compatibility gate.

Added

• Immutable typed schemas, requests, plans, canonical JSON, structured errors,
  authorization hooks, mandatory constraints, and conservative query costs.
• Bounded field selection, relationship paths, typed filter expressions,
  deterministic sorts, cursor and offset page requests.
• Authenticated encrypted versioned cursors, rotation, replay hooks, nullable
  positions, and stable response page envelopes.
• Strict HTTP and JSON-RPC parsers, OpenRPC descriptors, authoritative
  jsonapi composition, cross-transport conformance, and validation
  reporting.
• Safe PostgreSQL primitives, SQLC guidance, test builders, canonical
  conformance helpers, and real PostgreSQL safety tests.
• Exact production coverage, race, fuzz, mutation, vulnerability, compatibility,
  documentation, benchmark, and release automation.

Security

• Hostile input suites cover injection, authorization, tenant isolation,
  traversal, schema probing, cursor tampering/replay, Unicode, and resource
  exhaustion.

Release integrity

• Source commit: b69acc7edf26bafbca4496132715b2b71cc753b2
• Exact-head CI: https://github.com/faustbrian/go-api-query/actions/runs/32916458954
• Release dry-run: urn:sha256:e76f1bb40b0e5f0ce31a60491769404c12c62f20e483e8322588251dc4268389
• Assets include a CycloneDX SBOM, SLSA v1 in-toto provenance, and SSH-signed checksums.

Verify the checksum attestation with:

ssh-keygen -Y verify -f ALLOWED_SIGNERS -I brian@cline.sh -n golib-release -s SHA256SUMS.sig < SHA256SUMS