Skip to content

v0.6.2: Modern Stack Compatibility

Choose a tag to compare

View all tags
@githubmofo githubmofo released this 01 Sep 06:17
· 33 commits to main since this release
v0.6.2
4b16a43

Release Notes: TorusGuard v0.6.2 — Modern Stack Compatibility

Release Tag: v0.6.2
Release Date: August 31, 2026
Status: Stable Release (v6 Branch)

🌟 Executive Summary

TorusGuard v0.6.2 brings first-class compatibility with modern 2026 web application architectures, async paradigms, newer packaging managers, and cloud-native configuration workflows.

Modern projects have evolved beyond synchronous view controllers into async coroutines, Pydantic v2 type-safe schemas, SQLAlchemy 2.0 select statements, Next.js 14 App Router Server Actions, and Astral uv lockfiles. TorusGuard v0.6.2 ensures detection rules, remediation bundles, and targeted rechecks seamlessly align with these modern paradigms.

🚀 What's New in v0.6.2

1. 🔍 Automated Stack Profiler (core/stack_profiler.py)

  • Discovers project frameworks, version families, async architectures, and dependency managers automatically.
  • Detects:
    • Django 5.x (Async Native): Async views, aget(), ASGI handlers.
    • FastAPI 0.100+ (Pydantic v2): Annotated[..., Depends()], pydantic-settings, Lifespan context managers.
    • SQLAlchemy 2.0+: select() statement queries and AsyncSession.
    • Next.js 14+: App Router and "use server" Server Actions.
    • Modern Packaging: Fast package manager discovery (uv.lock, Poetry, PEP 621 pyproject.toml).
    • Container & CI/CD: Multi-stage Dockerfiles and GitHub Actions workflow permissions.

2. ⚡ Modern Async-Native Remediation

  • Django 5.x Async: Remediation diffs provide modern async scoping (await Invoice.objects.aget(id=inv_id, tenant_id=request.user.tenant_id)).
  • FastAPI 0.100+: Emits modern Annotated[User, Depends(get_verified_user)] patterns for role enforcement.
  • SQLAlchemy 2.0: Generates 2.0 select().where() chained tenant filters rather than legacy .filter() query chaining.
  • Next.js 14 Server Actions: Injects server-side session authentication guards before data mutation logic.

3. 🛡️ Container & CI/CD Supply Chain Coverage

  • Dockerfile Security: Identifies hardcoded image layer secrets and non-root execution (USER appuser).
  • GitHub Actions Security: Identifies unpinned mutable action tags and enforces immutable 40-character commit SHA pinning with minimal workflow permissions (permissions: read-all).

🧪 Validation Sign-Off

All modern stack capabilities are validated via harness/validate_v6_2_modern_stacks.py (19/19 checks passing).

Read the full sign-off in QA-SUMMARY-v6.2.md.

Assets 2
Loading