WolfProxy v0.4.16

v0.4.16: survive backends with short keep-alives — fixes intermittent 502s through the node proxy (wabil)

pool_idle_timeout drops from 30s to 1s (WolfStack's actix backend
closes idle connections after 2s, so 2-30s-old pooled sockets were
already dead and 502'd with IncompleteMessage/SendRequest), plus one
same-backend retry on a fresh connection when a pooled socket turns
out stale — the request body is fully buffered so the replay is safe
and invisible. HeaderTimeout joins the routine-noise log filter.

---

Verifying this release

Each binary is signed via cosign keyless OIDC and ships with a SLSA build provenance attestation.

Verify the cosign signature:

cosign verify-blob \
  --bundle wolfproxy-x86_64.cosign.bundle \
  --certificate-identity-regexp 'https://github.com/wolfsoftwaresystemsltd/wolfproxy/\.github/workflows/release\.yml@.*' \
  --certificate-oidc-issuer 'https://token.actions.githubusercontent.com' \
  wolfproxy-x86_64

Verify the build provenance:

gh attestation verify wolfproxy-x86_64 --repo wolfsoftwaresystemsltd/wolfproxy

Verify the SHA-256 checksum:

sha256sum -c SHA256SUMS

Artifacts

• wolfproxy-x86_64 / wolfproxy-aarch64 — static musl binaries (Linux x86_64 and ARM64).
• wolfproxy-<arch>.cosign.bundle — cosign signature bundle (cert + signature + Rekor entry).
• SHA256SUMS — checksums for both binaries.