v1.2.0

This release makes the job status reliable. A job that pauses at the wait step now shows waiting, and a job whose process ends shows stopped — no job stays in_progress forever. A defect in SplitBundle for a Bundle with no entries is fixed. CI gains a scheduled fuzz workflow and a license check for Go dependencies.

What's Changed

Bug Fixes

• fix: report a job as waiting when the wait step pauses it — the new waiting job status replaces in_progress for a paused job. job list and pipeline status show the ‖ symbol for a waiting job or step. (closes #752) #753
• fix: report a job as stopped when its process ends — the new stopped job status marks a job that a user stopped, for example with Ctrl+C. job list no longer shows such a job as a running job. (closes #746) #747
• fix: make SplitBundle return one chunk for a Bundle with no entries — SplitBundle returned zero chunks for a Bundle with an empty entry array, which made ReassembleBundle fail. It now returns one chunk with an empty entry array. The fuzz target found the defect, and the corpus entry is committed as a regression test. (closes #748) #750

Internal & CI

• ci: add a scheduled fuzz workflow — runs each fuzz target with -fuzz for 60 seconds each night and on manual dispatch, and uploads new corpus entries as an artifact when a target finds a failure. (closes #749) #751
• ci: add a license check for Go dependencies — the new reusable workflow _licenses.yaml runs go-licenses check on the full transitive module tree and fails on a copyleft license. (closes #754) #755
• test: use the TORCH auth block in place of the deprecated flat fields — moves 145 incidental test uses to the Auth block, so staticcheck SA1019 no longer blocks the lint job. (closes #760) #761

Dependency Updates

• Go toolchain: go 1.27.0 #757
• Go modules: stretchr/testify v1.12.1 #756
• Tooling: golangci/golangci-lint v2.13.0 #759
• Docker: nginxinc/nginx-unprivileged:1.31-alpine digest c3fed64 #758

Full Changelog