v1.4.27

Built without the optimisation stage. No PGO and no BOLT ran for this release, so its binaries are slower than a standard release of the same code. Cut deliberately for a fast deploy-and-test cycle. Do not use it to measure performance, and prefer a later optimised release for anything long-lived.

1.4.27 (2026-09-24)

Bug Fixes

• auth: authenticate with a key pair, and mint a session token (4b480e7)
• auth: mint and place credentials through scalo's sources (c96aa60), closes #118 #110 #112 #114
• auth: sign a request with the digest the profile names (8119301), closes #153
• auth: sign requests through scalo and resolve every prefix it serves (61d3a3d), closes #72
• ci: skip PGO and BOLT for the rc.14 workstream (#182) (ff253e3)
• config: count the vector receiver as work, and say so when idle (97657cc)
• config: refuse a shared instance id when more than one source runs (8a37e11)
• config: resolve every plain identity field at load (abdca8b), closes #21
• datadog: add the setup guide, and name the permission Datadog actually has (7f1e580)
• deps: drop four dependencies nothing calls, and demote two to dev (d2a8521), closes #63
• deps: move the REST path to reqwest 0.13 (a3df3f9), closes #39 #39
• deps: unyank chacha20, record the otel advisory's reachability, say release (6b805fd), closes #64
• docs: move the architecture doc under docs/ and add the README Context section (#177) (e7f1f44)
• docs: name scalo, not rustlib or pylib (#181) (d46c840)
• gates: match a sigv4 signer, not the word in a comment (741e28c)
• rebuild on scalo 2.12.6 with release consent (e14db5d)
• rest: name the units a profile declares when refusing an unknown one (28f59d6), closes #98
• rest: pace units to a declared rate and retry declared throttles (45b27b3), closes #120
• rest: place more than one credential on a request (6badc72), closes #148 #149
• scheduler: retry a failed tick over the same window and bound the catch-up span (edfbf1e), closes #133
• scheduler: stop a source's fetch task when a reload removes it (f677c33), closes #119
• test: bound the file-tail and dump listing races instead of sleeping (8e205c5), closes #117 #117
• test: cross a second boundary instead of polling for a change time (33b53aa), closes #171
• test: pin Kafka to the version the fleet can actually run (62a7354)
• test: stop the re-read test asserting which tick the line lands on (687f569), closes #116
• test: use a port nothing can bind, not one just handed back (9dfb307)

What's Changed

• fix(config): resolve every plain identity field at load by @catinspace-au in #131
• fix(rest): pace units to a declared rate and retry declared throttles by @catinspace-au in #136
• fix(scheduler): stop a source's fetch task when a reload removes it by @catinspace-au in #137
• fix(scheduler): retry a failed tick over the same window and bound the catch-up span by @catinspace-au in #139
• fix(rest): name the units a profile declares when refusing an unknown one by @catinspace-au in #140
• fix(deps): move the REST path to reqwest 0.13 by @catinspace-au in #142
• fix(auth): sign requests through scalo and resolve every prefix it serves by @catinspace-au in #144
• chore(ci): drop the removed spike channel and fix the doc pointer by @catinspace-au in #145
• fix(auth): mint and place credentials through scalo's sources by @catinspace-au in #146
• fix(rest): place more than one credential on a request by @catinspace-au in #150
• fix(auth): sign a request with the digest the profile names by @catinspace-au in #155
• fix(config): refuse a shared instance id when more than one source runs by @catinspace-au in #158
• fix(auth): authenticate with a key pair, and mint a session token by @catinspace-au in #159
• fix(datadog): add the setup guide, and name the permission Datadog actually has by @catinspace-au in #160
• fix(gates): match a sigv4 signer, not the word in a comment by @catinspace-au in #162
• fix(test): bound the file-tail and dump listing races instead of sleeping by @catinspace-au in #164
• fix(test): use a port nothing can bind, not one just handed back by @catinspace-au in #165
• fix(test): stop the re-read test asserting which tick the line lands on by @catinspace-au in #166
• fix(deps): unyank chacha20, record the otel advisory's reachability, say release by @catinspace-au in #163
• fix(deps): drop four dependencies nothing calls, and demote two to dev by @catinspace-au in #167
• fix(test): pin Kafka to the version the fleet can actually run by @catinspace-au in #169
• fix(config): count the vector receiver as work, and say so when idle by @catinspace-au in #170
• fix(test): cross a second boundary instead of polling for a change time by @catinspace-au in #172
• fix(docs): move the architecture doc under docs/ and add the README Context section by @catinspace-au in #177
• chore(ci): drop the optimise stanza the default now supplies by @catinspace-au in #180
• fix(docs): name scalo, not rustlib or pylib by @catinspace-au in #181
• fix(ci): skip PGO and BOLT for the rc.14 workstream by @catinspace-au in #182
• fix: rebuild on scalo 2.12.6 with release consent by @catinspace-au in #184

Full Changelog: v1.4.26...v1.4.27