v2.19.0

Changelog

Features

• 056af5d: feat(check): check:changelog gets a parser it does not share with the renderer (@jp1337)
• 4d09e2f: feat(core): the self-test harness refuses a host that already uses its range (@jp1337)
• 9e45ad2: feat(docs): the changelog page gets its own version list (@jp1337)
• a0ac208: feat: 2.19 — what it passes on, it also filters (#182) (@jp1337)

Bug Fixes

• 2bb8c57: fix(app-css): /ports stops collapsing its aside unconditionally (@jp1337)
• 9f0d360: fix(app-css): /ports' threshold is measured, and the arithmetic could not have found it (@jp1337)
• fbbd985: fix(check:ui): row agreement compares this run's row, not an old one (@jp1337)
• 3552cb8: fix(check:ui): the URL comes from the config the script already reads (@jp1337)
• bdce1af: fix(check:ui): the ports catalogue counts what this run added (@jp1337)
• f73be5e: fix(cli): a panic that times out reports what the marker holds (@jp1337)
• 212bee1: fix(core): the self-test peer says why it could not dial (@jp1337)
• d8bab9a: fix(deps): update module github.com/mdlayher/netlink to v1.11.2 (#177) (@renovate[bot])
• 68f2f17: fix(docker): compose declares its own health check, and a test keeps the two identical (@jp1337)
• 0f6f648: fix(docs): an arriving changelog link opens its section, which it did not (@jp1337)
• 2a372fb: fix(docs-css): an inline code chip may break when it cannot fit (@jp1337)
• 89add2d: fix(docs-css): the rouge theme colours the keys it was leaving plain (@jp1337)
• 034bb94: fix(i18n): shorten boot_enforce_failed's German label to fit the column (@jp1337)
• 4719b43: fix(i18n): two audit labels say what their action actually covers (@jp1337)
• 3796eb5: fix(web): the way onward no longer depends on recovery codes being minted (@jp1337)

Other

• c9e53c0: build(css): the changelog stops leaking into the published stylesheet, and Phase 4 is rebuilt (@jp1337)
• 56bf657: build(deps): pin lodash-es above its code-injection advisory (#183) (@jp1337)
• ac6a2fd: build: G115 leaves the global gosec excludes (@jp1337)
• 16da9bf: chore(deps): update dependency mermaid to v12 (#178) (@renovate[bot])
• b10e26a: ci: the spelling gate moves to the workflow with no path filter (@jp1337)
• cd498e8: config, docs: the second factor stopped being optional in 2.18 and two pages still said it was (#180) (@jp1337)
• cafcb1b: core: ECONNREFUSED against the harness's own listener is blocked, not failed (@jp1337)
• 9e7ffc6: internal/core: guard the collision check's order, not errors.Is (@jp1337)
• 68e5412: internal/shared: tighten the healthcheck field comparison against 30 vs 3 (@jp1337)
• 90f4836: merge: B1a — the ACME paths and a ceremony on easywall's own port (@jp1337)
• c13f451: merge: B1b — the store's silent constants and the password-floor guard (@jp1337)
• bc3c7fc: merge: B1c — JustGated becomes observable, and the client's wire edge (@jp1337)
• 81b7177: merge: B2a — the peer says why it could not dial, and the harness checks for a collision (@jp1337)
• 8fad8c5: merge: B2b — a skip that read like a pass, and a deadline whose reason was false (@jp1337)
• 7aae76a: merge: B2c — panic's timeout reads the marker, and two audit labels say what they cover (@jp1337)
• 5d060ac: merge: B2d — G115 leaves the global excludes, and the spelling gate covers the repository (@jp1337)
• d91b5f5: merge: B3a — check:changelog gets a second opinion, and the changelog page gets a version list (@jp1337)
• 6fd6040: merge: B3b — check:ui drives the server it was told about, and survives a second run (@jp1337)
• 9c7c70c: merge: B3c — compose declares its own health check, and a test keeps the two identical (@jp1337)
• 1e043ba: merge: B4a — five carried entries in the stylesheet and the design document (@jp1337)
• f336bc8: merge: B4b — /ports gets its aside back, above a provisional width (@jp1337)
• 3910abd: merge: B5a — invariants.md is repaired, and six limits move to where a reader meets them (@jp1337)
• db83232: merge: b4c (@jp1337)
• 4d8a038: merge: b5b (@jp1337)
• 9ce14b9: merge: b5c (@jp1337)
• a70518c: merge: carried-forward.md is empty, and honest about the one row it gained (@jp1337)
• c56bae9: refactor(docs-css): the three callout washes become tokens (@jp1337)
• 0810f4c: release: 2.19.0 (#184) (@jp1337)
• e0ca1ee: render-changelog: the native-
  -opening hedge was answered days ago (@jp1337)
• f033aa5: test(core): close two gaps found in review — an unfalsifiable assertion, a stale header claim (@jp1337)
• e42d4a3: test(core): the four forward tests stop being green for nothing in CI (@jp1337)
• bd6c67a: test(shared): the two copies of the mark cannot drift apart (@jp1337)
• 83107db: test(web): a retired hue may be named in a comment, not in a declaration (@jp1337)
• 6d45343: test(web): one passkey ceremony runs on easywall's own default port (@jp1337)
• 9996f19: test(web): pin passkeys.json's mode and the session fingerprint's separator (@jp1337)
• 3544078: test(web): the ACME paths get unit coverage that does not need a kernel (@jp1337)
• 7dd1b11: test(web): the password-floor guard sees the rule, not only its name (@jp1337)
• 7348967: test(web): the three getters report a reply that is not their payload (@jp1337)
• 29d3f1f: test: narrow the docs.yml codespell exemption to the trigger-path entry (@jp1337)
• d2c7006: ui-check: raise the screenshot viewport above /ports' own breakpoint (@jp1337)
• 4cc8862: web/src/app.css: fourteen switches, not eleven (@jp1337)