iJob 1.0.0

iJob 1.0.0 — 首个正式版本 / First formal release

iJob 1.0.0 首次正式发布。First formal release of iJob 1.0.0.

源码提交：c1054599f1559afc5d67579feeeaa8e91066906a。这是首个正式版本 1.0.0。相对完整 Basic CI 通过的 01c7b39，只有七个 Markdown 文件更新；程序、依赖和构建输入相同，运行载荷逐字节保持一致。当前提交的仓库检查已通过；没有在当前提交重跑完整 Basic。
Source commit: c1054599f1559afc5d67579feeeaa8e91066906a. First formal 1.0.0 release. Only seven Markdown files changed since the complete passing Basic CI at 01c7b39; program, dependency and build inputs are identical and runtime payload bytes are unchanged. Repository checks passed on this commit; the complete Basic suite was not rerun on this commit.

下载文件 / Download inventory

文件 / File	Bytes	Size
ijob-1.0.0-docker.tar.gz	461,153,569	439.79 MiB
ijob-1.0.0-docker.zip	461,512,222	440.13 MiB
ijob-1.0.0-native.tar.gz	144,443,157	137.75 MiB
ijob-1.0.0-native.zip	144,798,248	138.09 MiB
ijob-1.0.0-source.zip	11,944,687	11.39 MiB
ijob-1.0.0-third-party-sources.zip	771,510,524	735.77 MiB

• Native：Windows/Linux 原生安装，部署者准备 Java 21 和操作系统依赖；ZIP/TAR 二选一。Native installation on Windows/Linux requires user-provided Java 21 and OS dependencies; choose one archive format.
• Docker：Linux amd64，包含三个离线镜像和 Compose 模板，backend/Agent 使用 Temurin 21.0.13+9、Ubuntu 24.04。Choose ZIP or TAR; contains three offline images and Compose templates for Linux amd64.
• source.zip：2524 个项目源码文件，绑定上述提交；不包含私有官网工程。Project source bound to the commit above, excluding private website engineering sources.
• third-party-sources.zip：665 份适用第三方源码/补丁/构建材料记录，包含 1009 个归档条目，匹配本组二进制。Matching third-party corresponding source, patches and build materials; publish alongside binaries at no additional charge. GitHub 自动源码包不能替代此文件 / GitHub's automatic source archives do not replace this asset.
• RELEASE-MANIFEST.json：提交、文件哈希、交付镜像身份和验证范围。Commit, archive hashes, delivered image identities and validation scope.
• SHA256SUMS.txt：六份归档与两份说明/清单的 SHA-256；不包含自身。Checksums for six archives plus these notes and the release manifest; excludes itself.

安装包包含中英文手册、LICENSE 和第三方告知。首次正式安装从空数据库 V1 开始；不提供开发期旧库转换工具。MySQL Connector/J、Oracle JDBC/NLS 由部署者合法取得并配置到实例外部驱动目录；PostgreSQL、SQL Server、SQLite 驱动随包提供。产品版本保持 1.0.0，Local JAR 协议保持 1。

Bundles include both manuals, LICENSE and third-party notices. First formal installation starts from an empty database at V1; the development-era migration tool is excluded. Obtain MySQL Connector/J and Oracle JDBC/NLS separately and configure the instance's external driver directory. PostgreSQL, SQL Server and SQLite drivers remain bundled. Product version is 1.0.0; Local JAR protocol remains 1.

校验 / Verification

Linux（仅校验已下载文件 / verify downloaded files）：

sha256sum --check --ignore-missing SHA256SUMS.txt

PowerShell（将结果与清单逐项比对 / compare each result with the checksum list）：

Get-FileHash -Algorithm SHA256 .\ijob-1.0.0-native.zip

校验成功后再解压。不同批次同名 1.0.0 文件不可混用。SHA-256 检查字节一致性，不是数字签名。请从本 Release 的 Assets 下载配套文件。
Verify before extraction. Do not mix identically named files from different candidates. SHA-256 verifies byte integrity, not a digital signature. Download the matching files from this release’s Assets section.

验证范围 / Validation scope

完整 Basic CI 在 01c7b39 提交通过（attempt 2）：7 项验证任务及保留任务成功。后端/Agent 共 1685 项：1683 通过、2 项真实 Kafka/RabbitMQ 条件跳过、0 失败/错误。前端 447 项单测（四分片重复执行）、560 普通浏览器及 147 生产浏览器用例通过、无跳过。9 组 Compose 配置与 3 个 linux/amd64 镜像构建通过；CI 未发布镜像。

The complete Basic CI passed on commit 01c7b39 (attempt 2): seven validation jobs and retention succeeded. Backend/Agent: 1683 passed, two conditional real Kafka/RabbitMQ skips, zero failures/errors. Frontend: 447 unit test cases repeated across four shards, 560 browser and 147 production-browser cases, all passed with no skips. Nine Compose configurations and three Linux amd64 image builds passed; no images were published.

首次尝试中 Agent 首次匿名 HTTP 请求超过 5 秒超时；该次未记为通过，随后保留全部断言、使用同一提交重跑完整套件通过。The first attempt timed out on the Agent's initial anonymous HTTP request; it is not counted as a pass. The full suite was rerun on unchanged source with all assertions retained.

本次打包复用已验证运行载荷，仅更新文档、源码和绑定元数据，没有重新编译或重跑 Native/Docker 运行验收。与系统层升级候选的运行文件逐字节一致；复用 Native 8 项、Docker 13 项历史验收。回溯最初 Native 验收时，核对类/资源和第三方字节一致，仅排除 ZIP 容器元数据并规范化自有 Maven pom.properties 的换行，未声称原始 JAR 整体哈希相同。具体绑定见 RELEASE-MANIFEST.json。

Packaging reused verified runtime payloads and updated documentation, source and binding metadata. No recompilation or new Native/Docker runtime acceptance was performed. Runtime files match the OS-upgrade candidate byte-for-byte; eight Native and thirteen Docker acceptance checks are reused. Binding back to the original Native acceptance compares classes/resources and third-party bytes, excluding ZIP container metadata and normalizing only first-party Maven pom.properties line endings; it does not claim original JAR container hashes are identical. See RELEASE-MANIFEST.json.

Basic 不代替 Full 真实后端浏览器集成。最终提交未重跑 Full；用户取消的扩展系统/数据库/MQ/恢复矩阵也未重开，不声明全部组合通过。
Basic does not replace Full browser integration against real backends. Full was not rerun on the final commit. The canceled expanded OS/database/MQ/recovery matrix was not reopened; no claim covers all combinations.

已知风险 / Known risks

2026-11-01 使用 Trivy 0.76.1 重新扫描，漏洞库 UpdatedAt 为 2026-11-01T01:13:06.496727497Z。Java 识别索引刷新停滞，复用了经哈希验证的 2026-10-31 索引，尚未到其 2026-11-03 NextUpdate。三镜像漏洞集合与上一审查一致，没有新增或移除；这不代表零漏洞。

Rescanned on 2026-11-01 with Trivy 0.76.1 and the vulnerability database updated at 2026-11-01T01:13:06.496727497Z. Java identification-index refresh stalled; the verified 2026-10-31 index was reused before its 2026-11-03 NextUpdate. All three image finding sets are unchanged; this is not a zero-vulnerability claim.

• Spring MVC CVE-2026-47884、CVE-2026-47890：原始等级 CRITICAL。现有路由断言未发现相关 XSLT/隐式视图或 SSE 片段功能，但不等于修复。Raw CRITICAL findings remain; route assertions did not find the related features, which is not a patch.
• MyBatis 内嵌 OGNL CVE-2026-113730：MEDIUM。先前升级 MyBatis 与 PageHelper 分页出现兼容失败，因此保留已验证版本及风险记录。A prior MyBatis upgrade failed pagination compatibility with PageHelper; the verified version and risk remain.
• backend/Agent 各有 31 条 Ubuntu 包级命中（27 MEDIUM、4 LOW；跨镜像 24 个不同 CVE），本次数据库未提供固定修复版本。These OS packages are distributed inside the images and remain in scope.
• Native 扫描 3 条；backend 镜像 34 条；Agent 镜像 33 条；web 镜像、前端运行依赖和构建依赖本次均为 0 条。Counts are scoped scan results, not security guarantees.

若正式发布时间推迟，重新核对扫描数据库与已知风险的时效。Refresh the review if publication is delayed.

反馈与发布状态 / Feedback and publication status

普通问题使用 GitHub Issues，安全漏洞使用 Private vulnerability reporting（需要登录 GitHub）。仓库已经公开，私密漏洞报告已启用；维护者通知设置尚需账户侧确认。不要向公开 Issue/PR 提交漏洞细节或秘密。

The repository is public, Issues are available and private vulnerability reporting is enabled (GitHub sign-in required). Maintainer notification delivery remains an account-side check. Do not post vulnerability details or secrets in public issues or pull requests.

本组安装包、第三方源码和校验文件在本 GitHub Release 一起提供。官网地址为 https://ijob.ifielsc.com，暂未上线，部署另行处理。
This GitHub Release provides the complete set of installers, corresponding third-party source and checksums together. The website at https://ijob.ifielsc.com is not live; deployment is separate.

归档内手册和源码保留冻结提交的发布前状态文字；当前下载状态以本 Release 为准，维护分支和官网准备页会同步更新。此文字差异不改变运行文件。
Bundled manuals and source preserve the frozen commit’s pre-release status wording. This release is the current download authority; the maintained documentation and website preparation will be updated separately. Runtime files are unchanged.

构建状态说明：归档内 MANIFEST.json 的 public_release_approved: false 和告知审查 pending 是打包时保留的候选状态，不是当前发行状态。本次发布授权、对应源码与运行载荷核验记录在外层 RELEASE-MANIFEST.json 及本发布说明；冻结归档未因发布动作重新编译或改写。
Build-status clarification: the bundled MANIFEST.json retains the packaging-time candidate markers public_release_approved: false and notice-review pending. They do not describe current release availability. The outer RELEASE-MANIFEST.json and these release notes record publication authorization and corresponding-source/runtime verification. Publishing did not recompile or rewrite the frozen archives.