v0.1.12

0.1.12 (2026-07-06)

Features

• horismos: reactive config core — leaf diff, held-back merge, Section, ReloadOutcome (#529 step 1) (#563) (6f72e5f)
• zetesis: wire Cardigann definition-driven indexer client (#512) (b53885a)

Bug Fixes

• acquisition: low-severity audit batch findings (zetesis/ergasia/syntaxis/aitesis/syndesmos) (#503) (2a112c1), closes #447 #381 #461 #446 #435 #445
• aitesis: atomic approval workflow and request authorization (#487) (a27fd12), closes #395 #396 #397
• aitesis: compare-and-swap request status to close approval lost-update race (#560) (77a3a5e)
• akouo: playback-engine correctness (real seek, decode-failure signaling) (#485) (8c027af), closes #386 #387 #398 #399 #400 #401 #402 #403 #404
• akouo: propagate real underruns, stop audio on pause, honor buffer_size (#562) (ddd5097)
• apotheke: guard single-row writes against zero-row match (#507) (29a97cc), closes #492
• apotheke: guard want.rs and play_history single-row writes against zero-row match (#561) (3277278), closes #538 #552
• apotheke: period-scoped stats, checked writes, transactional streaks (#496) (9673863), closes #405 #406 #407 #450 #451
• archon: render reliability and wire metadata/queue/curation traits (#497) (9a57b03), closes #388 #408 #409 #410 #411 #412 #468 #469 #470
• archon: secure renderer TLS/QUIC transport (cert pinning, peer auth) (#486) (cf1fb43), closes #389 #413 #414 #415
• core: low-severity audit batch findings (exousia/horismos/apotheke/kritike) (#502) (790617a)
• epignosis: metadata provider correctness (TVDB cache, TMDB cross-ref, AcoustID) (#494) (58efa38), closes #416 #417 #471 #458
• epignosis: reject non-success HTTP responses and deflake rate-limit test (#506) (995208b), closes #498 #482
• ergasia: download filesystem safety (reconciliation, disk guard, zip-slip) (#491) (f8ec16e), closes #360 #365 #366 #367 #452 #453 #454
• ergasia: validate archive entries and enforce extraction byte caps (#555) (3353751)
• exousia: harden auth paths (constant-time keys, DB-authoritative bearer, refresh TOCTOU) (#476) (fae78ab), closes #473 #418 #419 #420
• komide: bound feed/episode fetch, fix backoff overflow, add coverage (#495) (bb59ff4), closes #368 #369 #370 #371 #455 #456
• media: low-severity audit batch findings (komide/epignosis/prostheke) (#504) (9405fb6), closes #382 #464 #440 #444 #466
• paroche: accept repeated Subsonic playlist song params (#509) (86e421e), closes #477
• paroche: authenticate endpoints, SSRF guard, real pagination, transactional writes (#483) (7faa6ca), closes #361 #372 #373 #374 #375 #457
• paroche: close IPv4-compatible-IPv6 SSRF bypass and resolve magnet trackers (#511) (9ea2ec2), closes #479
• paroche: report real list totals instead of page-slice length (#508) (2056a1c), closes #478
• paroche: route enqueue_download through the live download queue (#510) (5356330), closes #499
• paroche: scope get_request to caller and redact indexer creds in download_url (#558) (eb906b2)
• serving: low-severity audit batch findings (paroche/syndesis/archon/akouo) (#505) (8b6c86f), closes #383 #465 #384 #439 #437 #436
• syndesis: secure renderer client (pinned TLS, reassembly, bounded buffers) (#484) (e71cd8d), closes #362 #363 #364 #376 #377 #378 #379 #380
• syndesmos: correct Last.fm and Tidal integrations (#481) (da2afc3), closes #390 #391 #392 #421 #422 #423
• syntaxis: async mock extract to match ergasia DownloadEngine trait (#493) (593758e)
• syntaxis: correct download dispatch (slot leaks, retry wakeup, protocol guard) (#489) (e11fd19), closes #393 #394 #424 #425 #426 #427 #428
• syntaxis: dispatch recovered items and close retry/cancel races (#559) (e017616)
• zetesis: close indexer-fetch SSRF, injection, XML-DoS, and key-leak defects (#556) (f3bafb2)
• zetesis: harden indexer search (SSRF guard, key redaction, body cap, tx) (#488) (9b9ae1b), closes #429 #430 #431 #432 #433 #434 #459 #460 #467