v0.10.0

What's Changed

• Annotate protocol-mandated MD5 and bounded allocation as safe by @tas50 in #103
• ci: add xgrep security scan workflow by @tas50 in #104
• ci: bump the github-actions group across 1 directory with 10 updates by @dependabot[bot] in #108
• deps(deps): bump modernc.org/sqlite from 1.53.0 to 1.54.0 in the go-dependencies group by @dependabot[bot] in #106
• fix(security): close authorization gaps and authorize cookbook file transfers by @tas50 in #109
• perf: flatten fleet-scale check-in cost by @tas50 in #110
• perf: index search and make fleet bootstrap linear by @tas50 in #111
• feat: report real metrics from /_stats by @tas50 in #112
• test: close conformance gaps and add differential testing against a real Chef server by @tas50 in #113
• fix: idempotent Close, fail-closed authorization, wider differential coverage by @tas50 in #114
• ci(differential): fix the workflow's setup, and record the reference-routing blocker by @tas50 in #115
• ci(differential): use Cinc Server's own paths, and get the comparison actually running by @tas50 in #116
• ci: bump the github-actions group with 2 updates by @dependabot[bot] in #119
• deps(deps): bump modernc.org/sqlite from 1.54.0 to 1.55.0 in the go-dependencies group by @dependabot[bot] in #118
• fix(api): return Chef's object envelopes on responses that carry them by @tas50 in #117

Full Changelog: v0.9.0...v0.10.0

v0.9.0

What's Changed

• feat(state): load org membership from members.json; seed anna/ben in acme by @tas50 in #70
• fix(api): correct five confirmed bugs with regression tests by @tas50 in #72
• fix(api): preserve actor key on update; constant-time password check; name-robustness tests by @tas50 in #73
• ci: bump the github-actions group with 6 updates by @dependabot[bot] in #71
• fix(search): stop a stray ]/} hanging the query lexer; add fuzzing, body cap, and coverage by @tas50 in #74
• test(auth): fuzz the signature/header verification path by @tas50 in #75
• docs: note the build artifact path in CLAUDE.md by @tas50 in #76
• test(state): expand dev/test-repo to 99 nodes by @tas50 in #77
• test(state): client version drift, bare nodes, and recent check-ins by @tas50 in #78
• Back test nodes with fauxhai ohai data + uptime by @tas50 in #79
• Pluggable storage backend: memory + SQLite (the persistence foundation) by @tas50 in #80
• Wire Store/Org onto the pluggable Backend + --storage/--db flags by @tas50 in #81
• Idempotent restart on a durable store (stable keys) + persistence docs by @tas50 in #82
• Atomic Tx for the storage backend; provision orgs transactionally by @tas50 in #83
• docs: rewrite intro — in-memory or SQLite, drop-in for testing and production by @tas50 in #84
• Loadable SQLite dev database + dedicated developer docs (cinc-console wiring) by @tas50 in #85
• ci: hardened container release workflow (mirrors cinc-console) by @tas50 in #86
• docs: move docs/superpowers/specs to docs/specs by @tas50 in #87
• docs: correct cinc-console description and repo link by @tas50 in #89
• feat(sqlite): forward-only schema migration engine by @tas50 in #88
• docs: add a security/footprint section to 'Why cinc-zero' by @tas50 in #90
• feat(authz): enforce ACLs by default in the binary + faithful client bootstrap by @tas50 in #91
• feat(dev): faithful authz for seeded console users; rename anna/ben to tim/jack by @tas50 in #92
• feat(dev): ship a committed ~1100-node ACME business fixture via seedgen by @tas50 in #93
• feat(fleetsim): steady-state fleet check-in traffic simulator by @tas50 in #94
• Update the loadtest CLI options + remove the binary by @tas50 in #95
• Add more files to the gitignore by @tas50 in #96
• perf(sqlite): cap pool to one connection to end write busy-wait under fleet load by @tas50 in #97
• perf(sqlite): give reads a dedicated WAL pool so dashboards don't starve under fleet load by @tas50 in #98
• perf(sqlite): reuse prepared statements on the objects-table hot path by @tas50 in #99
• perf(sqlite): prepare the org-probe and blob single-row statements by @tas50 in #100
• perf(sqlite): optional group commit to coalesce writes under fleet load by @tas50 in #101
• docs: tighten "Why cinc-zero" and drop em-dashes from the README by @tas50 in #102

Full Changelog: v0.8.0...v0.9.0

v0.8.0

What's Changed

• feat(state): stash user passwords on load; seed anna with a web login by @tas50 in #69

Full Changelog: v0.7.0...v0.8.0

v0.7.0

What's Changed

• test: source/issues URLs and complex version deps on some test cookbooks by @tas50 in #66
• feat(test-repo): add demo data bags (users, secrets, apps) by @tas50 in #67
• feat(auth): webui-key impersonation (X-Ops-Request-Source: web) by @tas50 in #68

Full Changelog: v0.6.3...v0.7.0

v0.6.3

What's Changed

• fix(repo): carry maintainer and project URLs on loaded cookbooks by @tas50 in #65

Full Changelog: v0.6.2...v0.6.3

v0.6.2

What's Changed

• Revert immutable-release workflow change by @tas50 in #64

Full Changelog: v0.6.1...v0.6.2

v0.6.1

What's Changed

• fix(ci): attach release assets before publishing for immutable releases by @tas50 in #63

Full Changelog: v0.6.0...v0.6.1

v0.6.0

What's Changed

• Enrich test-repo environments with attributes/pins and ship matching cookbooks by @tas50 in #61
• feat: surface cookbook license and description from metadata by @tas50 in #62

Full Changelog: v0.5.0...v0.6.0

v0.5.0

What's Changed

• docs: capture v0.4.0 performance benchmarks by @tas50 in #58
• Load full server state from disk via --state, with a dev/test-repo seed by @tas50 in #60
• Publish Docker images on release by @damacus in #59

New Contributors

• @damacus made their first contribution in #59

Full Changelog: v0.4.0...v0.5.0

v0.4.0

What's Changed

• bench: load-test harness, runner script, and v0.3.0 baseline by @tas50 in #52
• perf: speed up cold and warm search scans by @tas50 in #53
• docs: replace status table with a Why cinc-zero section by @tas50 in #54
• perf: stream object-list responses instead of map + reflection by @tas50 in #55
• perf: generate bootstrap RSA keys in parallel by @tas50 in #56
• perf: warm the serving path at startup to cut cold first-request latency by @tas50 in #57

Full Changelog: v0.3.0...v0.4.0