v0.2.1

Changes

Fixed

• fix(release): set GH_REPO for gh in the release job (#163)

Internal

• chore(release): 0.2.1 (#164)
• ci: wait for a new build-env tag on pull requests (#159)

What's Changed

• ci: wait for a new build-env tag on pull requests by @lorenzocaprari in #159
• fix(release): set GH_REPO for gh in the release job by @lorenzocaprari in #163
• chore(release): 0.2.1 by @lorenzocaprari in #164

Full Changelog: v0.2.0...v0.2.1

v0.2.0

Changes

Added

• feat(agents): add coverage-floor skill (#105)
• feat: stream parse, embed, and score in batches (#88)

Fixed

• fix(ci): run the release subjects job on dry runs (#152)
• fix(cli): reject an out-of-range NESSO_THREADS with a usage error (#149)
• fix(platform): read ru_maxrss directly in peakResidentBytes (#148)
• fix(embed): keep int8 embeddings off AMX tiles (#137)
• fix(search): reject a corpus built with another model or format version (#135)
• fix(embed): cap int8 sessions by estimated per-session memory and available RAM (#134)
• fix(ci): grant security-events so Release can call Package (#130)
• fix(embed): deterministic int8 via single-thread session pool (#92)
• fix(ci): keep the fp32 determinism stressor alive (#85)

Documentation

• docs: add CodeQL, ClusterFuzzLite, and GHCR badges (#158)
• docs: show nesso grep in the README and demo (#150)
• docs(security): drop the enable-reporting note from the issue template (#147)
• docs: rewrite the README first screen and move deep docs to docs/ (#146)
• docs(security): describe private reporting as enabled and list 0.2.x (#141)
• docs: limit the single-author rule to maintainer and agent commits (#138)
• docs(adr): record supported platforms and toolchains (#111)
• docs(adr): record byte-identical determinism (#99)
• docs(adr): record offline operation and local-only data (#102)
• docs(adr): record the streaming batch pipeline (#100)
• docs(adr): record CPU-only inference (#98)
• docs(adr): record exact brute-force search without ANN (#101)
• docs(agents): forbid lowering the coverage floor (#107)
• docs(adr): adopt MADR for architecture decisions (#95)
• docs: add AGENTS.md for coding agents (#94)
• docs(contributing): list all Conan profiles and agent commit rules (#93)
• docs: add community health files and changelog automation (#82)

Internal

• ci(codecov): count partial lines as hits, ignore test/, skip gcov plugin (#162)
• ci: upload coverage reports to Codecov (#160)
• chore(release): 0.2.0 (#157)
• chore: move renovate.json, .cppcheck-suppressions, and Dockerfile.runtime out of root (#153)
• chore: clean up clang-tidy config, stale scripts, and docs (#151)
• build(deps): bump devcontainer Python pins to fix known vulnerabilities (#142)
• ci: add a single gate job for required checks (#145)
• ci(release): require approval before publishing (#143)
• build(deps): bump virtualenv from 21.14.7 to 21.14.13 in /.devcontainer (#139)
• build(release): fail when the release binary links networking code (#136)
• build: ship the release binary without a RUNPATH (#133)
• build(packaging): ship third-party notices in the .deb and runtime image (#132)
• chore(scripts): quote comma words in array literals (#131)
• ci: harden runners and scan the runtime image (#129)
• ci: lint workflows and review dependencies (#128)
• ci: track benchmark history (#127)
• ci: gate patch coverage and publish test reports (#126)
• ci: publish arm64 .deb and a multi-arch runtime image (#125)
• ci: reproducible-build and distro install checks (#124)
• ci: sign the runtime image with cosign and add SLSA L3 provenance (#123)
• ci: draft releases from the conanfile.py version (#122)
• ci: consolidate test jobs and align job names (#121)
• ci: decouple arm64 tests and bake fuzz and bench tools into build-env (#120)
• ci: bake test deps into build-env image and add ccache (#119)
• ci: remove placeholder and duplicate check runs (#118)
• ci: run a fast determinism pass on pull requests (#116)
• ci: slim build artifacts and skip heavy jobs on docs-only changes (#114)
• ci: trim PR benchmarks, gate on main baseline, run AFL++ nightly (#113)
• ci: run BDD scenarios and ctest in parallel (#112)
• ci: lint agent docs against the repo (#104)
• ci: block on int8 determinism across processes (#108)
• build(deps): bump the pip group across 1 directory with 4 updates (#109)
• build(deps): bump ossf/scorecard-action from 2.4.4 to 2.5.0 in the github-actions group (#110)
• chore: relicense the project under Apache 2.0 (#96)
• build(deps): bump oss-fuzz-base/base-builder from b867812 to 1f9cf74 in /.clusterfuzzlite in the docker group across 1 directory (#90)
• build(deps): bump the github-actions group with 2 updates (#91)
• ci: hash build-env images from resolved dependencies (#89)
• chore: namespace and build hygiene (#87)
• build(deps): bump actions/upload-artifact from 4.6.2 to 7.0.1 in the github-actions group (#86)
• ci: fuzz with clusterfuzzlite, pin digests, and run codeql on main (#84)
• build(deps): bump the github-actions group across 1 directory with 9 updates (#83)
• ci: add blocking clang and arm64 release builds (#81)
• ci: publish verifiable releases and run the pipeline on main (#80)
• ci: pin actions and harden the supply chain (#79)

v0.1.0

nesso 0.1.0 is the first public release: semantic grep for logs. Search log files by meaning instead of exact strings, from one Linux CLI. It runs fully offline: no server, no cloud, no API keys.

Install

curl -LO https://github.com/lorenzocaprari/nesso/releases/download/v0.1.0/nesso_0.1.0_amd64.deb
sudo apt install ./nesso_0.1.0_amd64.deb

Check the download against SHA256SUMS:

sha256sum -c SHA256SUMS --ignore-missing

Requirements

• Ubuntu 26.04 or newer (glibc 2.43+)
• amd64 (x86_64)

Known limits

• amd64 .deb only. There's no arm64 package, container image, SBOM or signature in this release.
• First release: the CLI and on-disk formats may still change before 1.0.

License

v0.1.0 was released under the MIT license (#59). Later the project moved to Apache-2.0 (#96, 18 Oct 2026). Releases after v0.1.0 are Apache-2.0.

Full list

• refactor: nest raw vector commands under nesso store by @lorenzocaprari in #41
• test: count CLI sources in the coverage floor by @lorenzocaprari in #42
• feat: persist text corpora for nesso index and search by @lorenzocaprari in #43
• refactor: share parse and search between grep and the corpus by @lorenzocaprari in #44
• fix: send store progress to stderr by @lorenzocaprari in #45
• Cli/register commands by @lorenzocaprari in #46
• feat: publish a versioned .deb and runtime image on vX.Y.Z by @lorenzocaprari in #47
• refactor: add libnesso facade over core, embed, and parser by @lorenzocaprari in #48
• refactor: parse argv into typed requests and render in one place by @lorenzocaprari in #49
• test: locate models via NESSO_MODELS_DIR and fail when required by @lorenzocaprari in #51
• Ci/require model tests by @lorenzocaprari in #52
• ci: gate on cppcheck unused-function analysis by @lorenzocaprari in #53
• ci: add a report-only end-to-end benchmark job by @lorenzocaprari in #60
• fix(embed): batched inference with dynamic padding by @lorenzocaprari in #61
• refactor!: remove store subcommand and StorageEngine by @lorenzocaprari in #62
• refactor(core): flat-matrix top-k replaces EmbeddingStore by @lorenzocaprari in #63
• perf(core): runtime SIMD dispatch with FMA by @lorenzocaprari in #64
• test(bdd): godog harness wired into ctest by @lorenzocaprari in #65
• Refactor/test functional layout by @lorenzocaprari in #66
• test(bdd): specify current grep, index, and search behaviour by @lorenzocaprari in #67
• feat(core)!: corpus format v2 by @lorenzocaprari in #68
• refactor!: typed errors, readable messages, grep exit codes 0/1/2 by @lorenzocaprari in #69
• Fix/bert tokenizer by @lorenzocaprari in #70
• Refactor/chunker by @lorenzocaprari in #71
• Fix/deterministic embeddings by @lorenzocaprari in #72
• fix(cli): exit codes 0/1/2 and readable failures by @lorenzocaprari in #73
• feat(parser): accept real log files and stdin by @lorenzocaprari in #74
• test(embed): add process determinism gate by @lorenzocaprari in #75
• feat(core): warn when corpus sources are stale by @lorenzocaprari in #76
• feat(cli): show progress in interactive terminals by @lorenzocaprari in #77
• perf: refresh release benchmark baseline by @lorenzocaprari in #78

Full Changelog: https://github.com/lorenzocaprari/nesso/commits/v0.1.0