Skip to content

v0.2.0

Choose a tag to compare

@github-actions github-actions released this 07 Aug 23:01
· 6 commits to main since this release
Loom v0.2.0

Breaking:
- loom audit rotate requires --checkpoint and LOOM_AUDIT_CHECKPOINT_KEY_PREVIOUS,
  and verifies the prior checkpoint under the retired key before re-signing.
- runtime.Metrics.ObserveRecovery is split into ObserveRecoveryQueue and
  ObserveRecoveryProgress.
- oidc.NewVerifier fetches the JWKS during construction, so an unreachable key
  endpoint fails at startup.

Added: loom audit verify-checkpoint, loom audit export --stream for the durable
PostgreSQL audit stream, and bootstrap.Config.ReadyChecks with
oidc.Verifier.ReadyCheck.

Fixed: durable-store and recovery metrics were exported but never written;
loom_execute_duration_seconds was missing _sum; /readyz ignored an
application-supplied identity verifier; and PostgreSQL audit export could not
verify a chain written on a platform with a nanosecond clock.