Skip to content

Releases: faustbrian/go-wsdl

github.com/faustbrian/go-wsdl v1.0.0

Choose a tag to compare

@faustbrian faustbrian released this 26 Aug 06:08

1.0.0 - 2026-08-25

Changed

  • Exclude intentional nested modules from root local-proxy archives so local,
    bootstrap, CI, and public module checksums describe the same source
    boundary.

  • Track the pinned documentation-tool lockfile so clean CI checkouts install
    the exact validated cspell dependency.

  • Reconcile standalone dependency checksums against deterministic current
    module archives so CI, local verification, and release consumers resolve
    identical content.

  • Harden standalone documentation validation with deterministic spelling and
    link checks, package-specific documentation gates, and repository-local
    contributor guidance.

Documentation

  • Link the package README to the repository-wide Golib documentation portal.

Changed

  • Publish the module from its standalone github.com/faustbrian/go-wsdl identity while preserving its documented API and behavior.
  • Validate benchmark output with the standard shell toolchain so clean Linux
    CI runners do not require an undeclared ripgrep installation.
  • Consolidate WSDL 1.1, WSDL 2.0, and cross-version interpretation policies in
    a canonical decision register with stable identifiers, normative sources,
    consequences, and executable evidence.
  • Delegate local mutation checks to the canonical exact-100 repository runner
    instead of a reduced package-local efficacy threshold.
  • Require owned sibling modules at local v0.0.0; clean external consumers
    pin each module to an exact main pseudo-version.

Distribution

  • Include the canonical MIT licence in the independently published module.

Compatibility

  • Preserve the provenance-pinned W3C SOAP encoding schema byte-for-byte in
    source archives and clean clones.

  • Check temporary interoperability fixture cleanup and normalize XML Schema
    extension detection to satisfy the canonical strict lint contract.

  • Added a pinned module export baseline so incompatible public API changes
    fail the canonical repository gate.

  • Separate W3C fixture conformance from Apache Woden interoperability so both
    results remain attributable.

  • Refresh owned-module checksums against the final consolidated archives.

  • Normalize standalone module metadata against the canonical owned dependency
    graph, including complete checksums for clean consumer resolution.

  • Refresh the canonical XSD checksum after its API compatibility tooling was
    standardized.

  • Add bounded WSDL 1.1 and WSDL 2.0 parsing and deterministic serialization.

  • Add SOAP, HTTP, MIME, extension, validation, and XML Schema integration.

  • Preserve the WSDL 2.0 wsdlx:safe operation property through parsing,
    compilation, generation, serialization, and semantic comparison.

  • Add typed WSDL 2.0 wrpc:signature support and XSD-backed RPC style
    validation.

  • Add XSD-backed WSDL 2.0 IRI and multipart operation-style validation.

  • Add explicit resolution, immutable compilation, builders, composition,
    semantic diff, and a separate bounded code-generation model.

  • Add provenance matrices, security documentation, fuzzing, benchmarks,
    coverage, mutation, race, and CI gates.

  • Add provenance-pinned accepted W3C WSDL 2.0 interoperability fixtures.

  • Add licensed SoapUI, dotnet-svcutil, Apache CXF, and DHL WSDL 1.1
    interoperability fixtures with executable round-trip evidence.

  • Preserve descendant-local namespaces in embedded schemas and reuse canonical
    schema prefixes during deterministic WSDL serialization.

  • Add a pinned Apache Woden Java gate for the W3C WSDL 2.0 fixture corpus.

  • Run the Woden gate in a digest-pinned Eclipse Temurin container instead of
    depending on an untracked host Java installation.

Release integrity

  • Source commit: 00d52441fd0c138aa6cc0fafe1247a8a6ba5f279
  • Exact-head CI: https://github.com/faustbrian/go-wsdl/actions/runs/32920602436
  • Release dry-run: urn:sha256:a2616bd05d5ae05145abfe028430df27a3848d8fa21202810b1f0c2472a2e508
  • Assets include a CycloneDX SBOM, SLSA v1 in-toto provenance, and SSH-signed checksums.

Verify the checksum attestation with:

ssh-keygen -Y verify -f ALLOWED_SIGNERS -I brian@cline.sh -n golib-release -s SHA256SUMS.sig < SHA256SUMS