Releases: faustbrian/go-identifier
Release list
github.com/faustbrian/go-identifier v1.0.0
1.0.0 - 2026-08-25
Changed
-
Exclude intentional nested modules from root local-proxy archives so local,
bootstrap, CI, and public module checksums describe the same source
boundary. -
Track the pinned documentation-tool lockfile so clean CI checkouts install
the exact validated cspell dependency. -
Reconcile standalone dependency checksums against deterministic current
module archives so CI, local verification, and release consumers resolve
identical content. -
Harden standalone documentation validation with deterministic spelling and
link checks, package-specific documentation gates, and repository-local
contributor guidance.
Documentation
- Link the package README to the repository-wide Golib documentation portal.
Changed
- Publish the module from its standalone
github.com/faustbrian/go-identifieridentity while preserving its documented API and behavior. - Use the concurrency-safe default cryptographic entropy source directly for
UUIDv4 generation while retaining serialization for caller-provided readers. - Escape line breaks in generic identifier assertion diagnostics so hostile
canonical values cannot forge test log entries. - ULID parsing now accepts consistently lowercase Laravel storage values while
retaining uppercase canonical output and rejecting mixed-case input. - The module workflow gate now validates the repository's single root workflow
instead of requiring a forbidden package-local workflow. - Refreshed the exported API fingerprint for the canonical Go 1.26
documentation output, including explicit lowercase ULID output and
concurrency-safe UUIDv4 entropy ownership.
Added
- A deterministic
slug.LaravelEnglishcompatibility profile backed by the
attributed voku/portable-ascii 2.1.1 replacement data used by Laravel 13. - Typed domain identifiers without reflection or runtime registration.
- UUID v4/v7, ULID, TypeID 0.3.0, KSUID, and NanoID packages.
- Text, JSON, binary, SQL, and PostgreSQL UUID serialization.
- Injected clocks and entropy, deterministic test utilities, fuzzing,
mutation, race, benchmark, documentation, and CI gates. - Structured-log redaction plus exhaustive hostile-input, collision,
cross-language, concurrency, PostgreSQL-codec, and leakage evidence.
No release has been published.
Release integrity
- Source commit:
3a6338e54334ed0dca0c6264572530d56d19ce34 - Exact-head CI: https://github.com/faustbrian/go-identifier/actions/runs/32907572059
- Release dry-run: urn:sha256:b9fc00c88def826ed833cf6a7fede371966571649bf29d552c2b582ba728afb7
- Assets include a CycloneDX SBOM, SLSA v1 in-toto provenance, and SSH-signed checksums.
Verify the checksum attestation with:
ssh-keygen -Y verify -f ALLOWED_SIGNERS -I brian@cline.sh -n golib-release -s SHA256SUMS.sig < SHA256SUMS