purple-wolf v0.4.4
Purple Wolf v0.4.4 is a compatibility-preserving performance, security, and
release-engineering update for the Traefik WASM WAF and webhook relay.
Highlights
- Removes the TOML parser stack from the JSON-only Traefik guest while keeping
TOML support enabled by default forpurple-wolf-coreusers. - Removes an allocation from browser User-Agent SQLi suffix inspection and
trims unused Tokio, Hyper, core, and TOML dependencies from the relay. - Updates
quinn-prototo 0.11.15 to resolveRUSTSEC-2026-0185. - Uses locked dependency graphs for release/container builds and modernizes
CI, Pages, artifact, and Docker actions to their current Node 24 majors. - Expands no-default-feature, package, workflow, deployment, fuzz, Docker, and
homelab validation while preserving existing WAF defaults and behavior.
Compatibility
WAF configuration and request-handling behavior are unchanged. Default
purple-wolf-core users retain Config::parse; consumers that disable default
features must enable toml-config when they need TOML parsing.
Artifacts
The release includes the Traefik WASM module, Linux and macOS relay binaries,
the Helm chart, container-image SBOMs, checksums, keyless signatures and
certificates, and a signed release manifest.
Full changelog: v0.4.3...v0.4.4