Skip to content

github.com/faustbrian/go-api-query v1.0.0

Choose a tag to compare

View all tags
@faustbrian faustbrian released this 26 Aug 06:06
· 56 commits to main since this release
v1.0.0
b69acc7

1.0.0 - 2026-08-25

Changed

  • Exclude intentional nested modules from root local-proxy archives so local,
    bootstrap, CI, and public module checksums describe the same source
    boundary.

  • Track the pinned documentation-tool lockfile so clean CI checkouts install
    the exact validated cspell dependency.

  • Reconcile standalone dependency checksums against deterministic current
    module archives so CI, local verification, and release consumers resolve
    identical content.

  • Harden standalone documentation validation with deterministic spelling and
    link checks, package-specific documentation gates, and repository-local
    contributor guidance.

Documentation

  • Link the package README to the repository-wide Golib documentation portal.

Distribution

  • Include the canonical MIT licence in the independently published module.

Changed

  • Publish the module from its standalone github.com/faustbrian/go-api-query identity while preserving its documented API and behavior.
  • Upgrade golang.org/x/text to v0.41.0 so the dependency graph no longer
    contains GO-2026-5970.
  • Pin owned dependencies to published source revisions so clean consumers can
    resolve the module before the first tags.
  • Execute API compatibility tooling against the isolated module graph so owned
    dependency source changes cannot conflict with release checksums.
  • Normalized standalone module metadata against the canonical owned dependency
    graph, including complete checksums for clean consumer resolution.
  • Removed package-local quality-tool dependencies now that repository tooling
    is versioned and executed exclusively by the root command surface.
  • Run API compatibility with an explicitly pinned tool so isolated release
    checks do not depend on undeclared host-installed Go tools.
  • Use the repository-pinned current apidiff revision for the canonical API
    compatibility gate.

Added

  • Immutable typed schemas, requests, plans, canonical JSON, structured errors,
    authorization hooks, mandatory constraints, and conservative query costs.
  • Bounded field selection, relationship paths, typed filter expressions,
    deterministic sorts, cursor and offset page requests.
  • Authenticated encrypted versioned cursors, rotation, replay hooks, nullable
    positions, and stable response page envelopes.
  • Strict HTTP and JSON-RPC parsers, OpenRPC descriptors, authoritative
    jsonapi composition, cross-transport conformance, and validation
    reporting.
  • Safe PostgreSQL primitives, SQLC guidance, test builders, canonical
    conformance helpers, and real PostgreSQL safety tests.
  • Exact production coverage, race, fuzz, mutation, vulnerability, compatibility,
    documentation, benchmark, and release automation.

Security

  • Hostile input suites cover injection, authorization, tenant isolation,
    traversal, schema probing, cursor tampering/replay, Unicode, and resource
    exhaustion.

Release integrity

Verify the checksum attestation with:

ssh-keygen -Y verify -f ALLOWED_SIGNERS -I brian@cline.sh -n golib-release -s SHA256SUMS.sig < SHA256SUMS

Assets 9
Loading