Skip to content

github.com/faustbrian/go-authentication/authotel v1.0.0

Choose a tag to compare

View all tags
@faustbrian faustbrian released this 26 Aug 06:10
· 4 commits to main since this release
authotel/v1.0.0
9f3aa6f

1.0.0 - 2026-08-25

Documentation

  • Link the package README to the repository-wide Golib documentation portal.

Distribution

  • Include the canonical MIT licence in the independently published module.

Compatibility

  • Added a pinned module export baseline so incompatible public API changes
    fail the canonical repository gate.

Changed

  • Publish the module from its standalone github.com/faustbrian/go-authentication/authotel identity while preserving its documented API and behavior.

  • Refresh local v0.0.0 owned-module checksums after dependency manifests and
    release notes were normalized; runtime behavior and public APIs are
    unchanged.

  • Normalize credential, outcome, and failure dimensions to the documented
    closed value sets; clamp negative durations; complete each attempt exactly
    once under duplicate or concurrent callbacks without making duplicates wait
    for provider work; and isolate provider and observer panics without
    disclosing panic values.

  • Define adapter telemetry convention version 1.0.0 without mislabeling it as
    an OpenTelemetry instrumentation-module version or schema URL, and document
    signal stability, bounded-provider prerequisites, provider ownership,
    privacy, cancellation, concurrency, lifecycle, compatibility, and migration
    policy.

  • Preserve the caller context when a hostile tracer returns nil and release
    captured request context and span references after the winning completion so
    retained callbacks cannot retain request state.

  • Expand hardening proof across complete captured-telemetry redaction,
    high-concurrency cardinality, bounded batch-exporter backpressure, hostile
    provider fuzzing, SDK errors and shutdown, and enabled, sampled-out, no-op,
    and direct-instrumentation allocation benchmarks with enforced relative
    latency and allocation budgets.

  • Make the unavoidable bounded synchronous-provider prerequisite explicit:
    indefinitely blocking implementations are outside the supported contract
    because containing them would require unbounded abandoned goroutines.

  • Require owned sibling modules at local v0.0.0; clean external consumers
    pin each module to an exact main pseudo-version.

  • Refresh owned-module checksums against the final consolidated archives.

  • Normalized standalone module metadata against the canonical owned dependency
    graph, including complete checksums for clean consumer resolution.

  • Refreshed the canonical authentication checksum after its test archive
    changed, preserving isolated module verification.

  • Refreshed the canonical authentication checksum after its API compatibility
    baseline was normalized to the module boundary.

Added

  • Add an allocation-aware benchmark for the complete authentication
    instrumentation start-and-finish path.
  • Add bounded fuzz coverage for arbitrary credential, outcome, failure, and
    duration values across the complete instrumentation lifecycle.

Release integrity

Verify the checksum attestation with:

ssh-keygen -Y verify -f ALLOWED_SIGNERS -I brian@cline.sh -n golib-release -s SHA256SUMS.sig < SHA256SUMS

Assets 9
Loading