Skip to content

Release v0.0.16

Choose a tag to compare

View all tags
@github-actions github-actions released this 05 Sep 23:53
· 1 commit to main since this release
v0.0.16
This tag was signed with the committer’s verified signature. The key has expired.
terjekv Terje Kvernes
GPG key ID: F369EBACAF3BE717
Expired
Verified
Learn about vigilant mode.
02884ad
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

REST 0.0.16 adopts Core 0.0.25 and Bundle 0.0.7.

  • Each authorization batch evaluates one frozen policy, schema, and label state.
  • Policy versions include nullable label_set and unsigned generation; generation is local to one engine instance and can restart on replacement.
  • Invalid label reloads fail before publication and preserve the prior active state. Rules on disjoint resource kinds can share an output through one runtime owner; duplicate destinations within one kind remain invalid.
  • Breaking: malformed identities and IP values now fail JSON deserialization with HTTP 400 for the whole batch. Correct those inputs instead of expecting a per-item evaluation error.
  • Existing Allow/Deny response shapes remain stable. Rebuild and re-sign Bundle archives with CLI 0.0.7 before deploying them.

The migration passed 45 checks, including 37 instruction-level benchmarks with no gated regressions. The version-only release passed all 45 checks with 37 neutral benchmarks.

See migration #71, release #72, and the changelog.

Assets 4
Loading