v1.4.35

1.4.35 (2026-10-11)

Bug Fixes

• move to scalo 2.14.6, drop emit-chart (0b1c2ac)

Helm charts

Registry: oci://ghcr.io/hyperi-io/charts

Chart	Version	Digest
dfe-fetcher	1.4.35	sha256:c3ea75c9f0f523dee3d4eab7e25b7a13f512b1c4495b78513173454e0f857e81

What's Changed

• fix: move to scalo 2.14.6, drop emit-chart by @catinspace-au in #226

Full Changelog: v1.4.34...v1.4.35

v1.4.34

1.4.34 (2026-10-10)

Bug Fixes

• set the OCI title and description on the fetcher deployment contract (#225) (40e21a8)

Helm charts

Registry: oci://ghcr.io/hyperi-io/charts

Chart	Version	Digest
dfe-fetcher	1.4.34	sha256:124b630ddeeaf0dcad5bf789a8098bf30c821f79073fba925cb56ec38c903e8e

What's Changed

• fix: set the OCI title and description on the fetcher deployment contract by @catinspace-au in #225

Full Changelog: v1.4.33...v1.4.34

v1.4.33

1.4.33 (2026-10-09)

Bug Fixes

• allow container env specs in credential gate (#224) (5305270)
• emit deployment contract v4 (#223) (b7c1865)

Helm charts

Registry: oci://ghcr.io/hyperi-io/charts

Chart	Version	Digest
dfe-fetcher	1.4.33	sha256:17b44639cd741115bd8f287b3b959ac86133b7f8fc14e8e1ee389a4856b1235f

What's Changed

• test: pin every test container image by digest and drop internal credential references by @catinspace-au in #221
• test: pin the alpine test image by tag and digest by @catinspace-au in #222
• fix: emit deployment contract v4 by @catinspace-au in #223
• fix: allow container env specs in credential gate by @catinspace-au in #224

Full Changelog: v1.4.32...v1.4.33

v1.4.32

1.4.32 (2026-10-06)

Bug Fixes

• ci: make markdownlint blocking (#211) (8ab9126), closes #210
• clear clippy 1.99 lints and rename fetch_update (#217) (762f6e5)
• docs: clear the markdownlint warnings (#210) (0a742d7)
• GA public tree, secret types, dump tie, one API-error count (#207) (ae9046d)
• gcp: take the key JSON the chart ships (#209) (782053b)
• honour the version-check opt-out (#201) (9a8d98a), closes #200
• move to scalo 2.14.0 and turn PGO and BOLT on for GA (#220) (0ae4a16), closes #138 #218 #183 hyperi-io/scalo-rs#281
• name config keys the fetcher ignores (#216) (3f1b5ce), closes #179 #168
• refuse container env names that reach the CLI itself (#213) (656bf80)
• refuse off-host request URLs, fetch every Security Hub status (#203) (1bd8026)
• refuse to run the ingest listener with no token (#215) (b0a4822)
• replace private issue refs with setup requirements (#195) (f18d6e9)
• route topics, unstall windows, fsync cursors (#212) (3245fb9)
• tell chart users to set image.tag (#214) (84fc1b3), closes #174
• test: run the Kafka test broker on the JVM image (#202) (a7e34d7)
• test: wait for the group join, then frames (#208) (ee35787)

What's Changed

• fix: replace private issue refs with setup requirements by @catinspace-au in #195
• fix: honour the version-check opt-out by @catinspace-au in #201
• fix(test): run the Kafka test broker on the JVM image by @catinspace-au in #202
• fix: refuse off-host request URLs, fetch every Security Hub status by @catinspace-au in #203
• fix: GA public tree, secret types, dump tie, one API-error count by @catinspace-au in #207
• fix(gcp): take the key JSON the chart ships by @catinspace-au in #209
• fix(test): wait for the group join, then frames by @catinspace-au in #208
• fix(docs): clear the markdownlint warnings by @catinspace-au in #210
• fix(ci): make markdownlint blocking by @catinspace-au in #211
• fix: route topics, unstall windows, fsync cursors by @catinspace-au in #212
• fix: refuse container env names that reach the CLI itself by @catinspace-au in #213
• fix: tell chart users to set image.tag by @catinspace-au in #214
• fix: refuse to run the ingest listener with no token by @catinspace-au in #215
• fix: name config keys the fetcher ignores by @catinspace-au in #216
• fix: clear clippy 1.99 lints and rename fetch_update by @catinspace-au in #217
• fix: move to scalo 2.14.1 and turn PGO and BOLT on for GA by @catinspace-au in #220

Full Changelog: v1.4.31...v1.4.32

v1.4.31

Built without the optimisation stage. No PGO and no BOLT ran for this release, so its binaries are slower than a standard release of the same code. Cut deliberately for a fast deploy-and-test cycle. Do not use it to measure performance, and prefer a later optimised release for anything long-lived.

1.4.31 (2026-09-27)

Bug Fixes

• zstd producer default, steadier tail test, regenerated compose (#194) (0e44c7b)

What's Changed

• fix: zstd producer default, steadier tail test, regenerated compose by @catinspace-au in #194

Full Changelog: v1.4.30...v1.4.31

v1.4.30

Built without the optimisation stage. No PGO and no BOLT ran for this release, so its binaries are slower than a standard release of the same code. Cut deliberately for a fast deploy-and-test cycle. Do not use it to measure performance, and prefer a later optimised release for anything long-lived.

1.4.30 (2026-09-27)

Bug Fixes

• fetcher: hold Vector and container intake until delivery (#192) (26c0437)
• metrics: count each failed send once (#191) (ff200e3)

What's Changed

• fix(metrics): count each failed send once by @catinspace-au in #191
• fix: hold Vector acks until delivered, confirm dead letters by @catinspace-au in #192

Full Changelog: v1.4.29...v1.4.30

v1.4.29

Built without the optimisation stage. No PGO and no BOLT ran for this release, so its binaries are slower than a standard release of the same code. Cut deliberately for a fast deploy-and-test cycle. Do not use it to measure performance, and prefer a later optimised release for anything long-lived.

1.4.29 (2026-09-24)

Bug Fixes

• ci: ignore unreachable otel advisory in osv (#187) (10efe44)
• deps: hmac 0.13, quick-xml 0.42, rust deps (#186) (9144f52)
• output: dead-letter refused fan-out records (#189) (ff58f8f)
• rebuild on scalo 2.12.9 (ea91eb6)

What's Changed

• fix(deps): hmac 0.13, quick-xml 0.42, rust deps by @catinspace-au in #186
• fix(ci): ignore unreachable otel advisory in osv by @catinspace-au in #187
• fix(output): dead-letter refused fan-out records by @catinspace-au in #189
• fix: rebuild on scalo 2.12.9 by @catinspace-au in #190

Full Changelog: v1.4.28...v1.4.29

v1.4.28

Built without the optimisation stage. No PGO and no BOLT ran for this release, so its binaries are slower than a standard release of the same code. Cut deliberately for a fast deploy-and-test cycle. Do not use it to measure performance, and prefer a later optimised release for anything long-lived.

1.4.28 (2026-09-24)

Bug Fixes

• rebuild on scalo 2.12.7, S3 source stable (#185) (878614b)

What's Changed

• fix: rebuild on scalo 2.12.7, S3 source stable by @catinspace-au in #185

Full Changelog: v1.4.27...v1.4.28

v1.4.27

Built without the optimisation stage. No PGO and no BOLT ran for this release, so its binaries are slower than a standard release of the same code. Cut deliberately for a fast deploy-and-test cycle. Do not use it to measure performance, and prefer a later optimised release for anything long-lived.

1.4.27 (2026-09-24)

Bug Fixes

• auth: authenticate with a key pair, and mint a session token (4b480e7)
• auth: mint and place credentials through scalo's sources (c96aa60), closes #118 #110 #112 #114
• auth: sign a request with the digest the profile names (8119301), closes #153
• auth: sign requests through scalo and resolve every prefix it serves (61d3a3d), closes #72
• ci: skip PGO and BOLT for the rc.14 workstream (#182) (ff253e3)
• config: count the vector receiver as work, and say so when idle (97657cc)
• config: refuse a shared instance id when more than one source runs (8a37e11)
• config: resolve every plain identity field at load (abdca8b), closes #21
• datadog: add the setup guide, and name the permission Datadog actually has (7f1e580)
• deps: drop four dependencies nothing calls, and demote two to dev (d2a8521), closes #63
• deps: move the REST path to reqwest 0.13 (a3df3f9), closes #39 #39
• deps: unyank chacha20, record the otel advisory's reachability, say release (6b805fd), closes #64
• docs: move the architecture doc under docs/ and add the README Context section (#177) (e7f1f44)
• docs: name scalo, not rustlib or pylib (#181) (d46c840)
• gates: match a sigv4 signer, not the word in a comment (741e28c)
• rebuild on scalo 2.12.6 with release consent (e14db5d)
• rest: name the units a profile declares when refusing an unknown one (28f59d6), closes #98
• rest: pace units to a declared rate and retry declared throttles (45b27b3), closes #120
• rest: place more than one credential on a request (6badc72), closes #148 #149
• scheduler: retry a failed tick over the same window and bound the catch-up span (edfbf1e), closes #133
• scheduler: stop a source's fetch task when a reload removes it (f677c33), closes #119
• test: bound the file-tail and dump listing races instead of sleeping (8e205c5), closes #117 #117
• test: cross a second boundary instead of polling for a change time (33b53aa), closes #171
• test: pin Kafka to the version the fleet can actually run (62a7354)
• test: stop the re-read test asserting which tick the line lands on (687f569), closes #116
• test: use a port nothing can bind, not one just handed back (9dfb307)

What's Changed

• fix(config): resolve every plain identity field at load by @catinspace-au in #131
• fix(rest): pace units to a declared rate and retry declared throttles by @catinspace-au in #136
• fix(scheduler): stop a source's fetch task when a reload removes it by @catinspace-au in #137
• fix(scheduler): retry a failed tick over the same window and bound the catch-up span by @catinspace-au in #139
• fix(rest): name the units a profile declares when refusing an unknown one by @catinspace-au in #140
• fix(deps): move the REST path to reqwest 0.13 by @catinspace-au in #142
• fix(auth): sign requests through scalo and resolve every prefix it serves by @catinspace-au in #144
• chore(ci): drop the removed spike channel and fix the doc pointer by @catinspace-au in #145
• fix(auth): mint and place credentials through scalo's sources by @catinspace-au in #146
• fix(rest): place more than one credential on a request by @catinspace-au in #150
• fix(auth): sign a request with the digest the profile names by @catinspace-au in #155
• fix(config): refuse a shared instance id when more than one source runs by @catinspace-au in #158
• fix(auth): authenticate with a key pair, and mint a session token by @catinspace-au in #159
• fix(datadog): add the setup guide, and name the permission Datadog actually has by @catinspace-au in #160
• fix(gates): match a sigv4 signer, not the word in a comment by @catinspace-au in #162
• fix(test): bound the file-tail and dump listing races instead of sleeping by @catinspace-au in #164
• fix(test): use a port nothing can bind, not one just handed back by @catinspace-au in #165
• fix(test): stop the re-read test asserting which tick the line lands on by @catinspace-au in #166
• fix(deps): unyank chacha20, record the otel advisory's reachability, say release by @catinspace-au in #163
• fix(deps): drop four dependencies nothing calls, and demote two to dev by @catinspace-au in #167
• fix(test): pin Kafka to the version the fleet can actually run by @catinspace-au in #169
• fix(config): count the vector receiver as work, and say so when idle by @catinspace-au in #170
• fix(test): cross a second boundary instead of polling for a change time by @catinspace-au in #172
• fix(docs): move the architecture doc under docs/ and add the README Context section by @catinspace-au in #177
• chore(ci): drop the optimise stanza the default now supplies by @catinspace-au in #180
• fix(docs): name scalo, not rustlib or pylib by @catinspace-au in https://githu...

v1.4.26

What's Changed

• fix(config): refuse a container env spec the resolver cannot read by @catinspace-au in #130

Full Changelog: v1.4.25...v1.4.26