Skip to content

v1.0.0

Choose a tag to compare

@github-actions github-actions released this 10 Jul 18:20
d87e918

1.0.0 (2026-07-10)

⚠ BREAKING CHANGES

  • router: deployments relying on the implicit allow-all CORS default must set cors_origins explicitly — a real allow-list, or ["*"] to keep allow-all (MA-2026-007).

Added

  • router: deny cross-origin by default — the CORS flip lands (v1 gate A-5a) (#191) (a69baed)

Documentation

  • governance: the v1.0 gate closes — waivers approved, rehearsal green (#193) (10c222f)