github.com/faustbrian/go-queue/rabbitmq v1.0.0

[1.0.0] - 2026-08-28

Added

• Replace direct AMQP ownership with an explicit compatibility adapter over
  go-rabbitmq-queues while retaining the go-queue worker, option, request,
  and settlement surfaces.

• Require stable message identity, mandatory persistent publications, manual
  settlement, bounded pull requests, confirmed retry and terminal replacement
  publications, and independent producer and consumer lifecycles.

• Add CI-hosted RabbitMQ 4.3.5 TLS evidence for confirmed queueing, request and
  settlement, retry-before-ACK, terminal replacement, and producer/consumer
  failure isolation.

Changed

• Require WithNativeConfig; automatic acknowledgement, fanout, and headers
  exchanges are rejected until their legacy migration semantics are defined.

• Open the producer during construction and open the consumer only when
  Request first needs it.

• Preserve malformed, permanent, exhausted, canceled, infrastructure, repeated
  settlement, and repeated shutdown outcomes without exposing broker details.

• Reject invalid exchange policy without logging caller-controlled identities.

Release integrity

• Source commit: 532594a9036fd29c29c0b3fddd7b8ae9255f0055
• Exact-head CI: https://github.com/faustbrian/go-queue/actions/runs/33172582390
• Release rehearsal: https://github.com/faustbrian/go-queue/actions/runs/33178973420
• Verification evidence: urn:sha256:ed329afb2a8218831cba5de0983d1c5c2dc80373d9f6f6826603f49f0db753ff
• Assets include a CycloneDX SBOM, SLSA v1 in-toto provenance, and SSH-signed checksums.

Verify the checksum attestation with:

ssh-keygen -Y verify -f ALLOWED_SIGNERS -I brian@cline.sh -n golib-release -s SHA256SUMS.sig < SHA256SUMS