Fluxheim 1.6.36

[eldryoth]

Fluxheim 1.6.36 Release Notes

Fluxheim 1.6.36 is the post-cutover structural cleanup release after the
Pingora-free 1.6.34 proof release and the 1.6.35 stabilization checkpoint.

This release is intentionally scoped to behavior-preserving cleanup unless
pentest or CI finds a correctness issue: remove temporary compatibility
boundaries, move remaining native runtime DTOs and helpers into their owning
crates, and delete inert Pingora-era root code that normal Fluxheim builds no
longer use.

Highlights

• Start replacing the temporary native proxy shim with direct crate-owned APIs.
• Rename the temporary native proxy shim module to native_proxy, keeping the
  historical crate::proxy re-export stable while the owning crate APIs are
  split out.
• Stop re-exporting cache admin DTOs through the native proxy compatibility
  boundary; admin and CLI code now use the dedicated cache_api module
  directly.
• Replace active root/admin/CLI/runtime imports of the historical crate::proxy
  compatibility alias with direct crate::native_proxy imports.
• Move load-balancer admin request/result DTOs from the native proxy boundary
  into the fluxheim-load-balancer crate.
• Remove the historical crate::proxy re-export from normal builds; active
  code now uses crate::native_proxy and crate-owned APIs directly.
• Delete inert Pingora-era root source files that were permanently gated behind
  cfg(any()), including the old proxy, cache, header, auth-request, edge
  policy, PHP-FPM, traffic-mirror, and proxy-protocol adapters.
• Remove stale disabled Pingora compatibility runner/test code from
  runtime.rs so dead cfg(any()) paths no longer reference non-existent
  native proxy methods or Pingora traits.
• Remove the stale Pingora HTTP boundary exception rows now that normal source
  no longer carries quarantined Pingora HTTP adapter code.
• Consolidate native proxy config storage so hot reload refreshes the same
  config snapshot used by cache purge, cache preview, cache stats, activity
  reset, and load-balancer stats paths.
• Add native HTTP/1 chunked-body regression coverage for the historical
  overflow-sized chunk header crash class; the native parser rejects the
  ffffffffffffffff chunk size before routing reaches the proxy handler.
• Pin observability smoke images to stable Prometheus and Jaeger tags instead
  of latest so CI pulls deterministic container versions.
• Keep normal Fluxheim builds on the Pingora-free runtime introduced in
  1.6.34 and stabilized in 1.6.35.
• Keep release, dependency, native-runtime, RPM, container, and smoke gates as
  blocking evidence while the cleanup removes compatibility code.

Compatibility Notes

• This release should not change runtime configuration semantics.
• Cleanup should be mechanical and behavior-preserving unless a specific
  security or correctness issue is found during review.

Verification

• scripts/validate-release-metadata.sh
• scripts/validate-pingora-dependency-policy.sh
• scripts/validate-native-runtime-cutover.sh
• scripts/stable_release_gate.sh check

Checksums And Signatures

• Commit: 6cd9a10a4d785cdaa7ff0b176dfcf22042686ed2
• Local gate: GitHub CI green before tag; local release metadata checks passed
• CodeQL/code scanning: no open release-blocking alerts before tag
• Source archive checksums:
  • 215d0ac21796fb981144ea5a33820da1a8d67d8891d98f81c5513fbfc0168051 fluxheim-1.6.36.tar.gz
  • 8007f0b668e61132b4890e3d3092a09408c19cfcdc439572b01674c23b80a47a fluxheim-1.6.36.zip
• Binary checksums:
  • x86_64:
    • b0e5366eb23a7e42d629014061fd4659573e700730da6b3ffe7af26ddd73a967 fluxheim-1.6.36-full-x86_64-linux.tar.gz
    • 9739830c23de66b99eb5354c274bbd717304275ee65478913616cf3363a13630 fluxheim-1.6.36-cache-x86_64-linux.tar.gz
    • 16ffb7bb24e6860f298f6e1cd0db0e8b857ae7ac2d6544efab736db45066a097 fluxheim-1.6.36-proxy-x86_64-linux.tar.gz
    • b21c9f16d4ed9917b887544787ce9b54591a86470458b47533e2e1460a7cd540 fluxheim-1.6.36-php-x86_64-linux.tar.gz
    • cac96225de447e687f9618c35a397a74a931e872b9722f52c604dcaaf67800f0 fluxheim-1.6.36-load-balancer-x86_64-linux.tar.gz
    • e013ab6e2af4f87c253e3cb74279accd9b1e7be49e89f23fb77bfbc8a620fb48 fluxheim-1.6.36-config-tester-x86_64-linux.tar.gz
  • aarch64:
    • f76965912aa73599a51c2260b819949629200275547efa336bf200b429a5c711 fluxheim-1.6.36-full-aarch64-linux.tar.gz
    • 6482a7af48daeaf3d72476104d1d50e6acef02d85feb3cd0ebfc048894f9511f fluxheim-1.6.36-cache-aarch64-linux.tar.gz
    • 7ef7acc3c33ef4f2de597563aa8359babf5bfba28e7a41fd18eca81c79f2e58b fluxheim-1.6.36-proxy-aarch64-linux.tar.gz
    • ecf6d7f28541b4b5a2887f10a316797d9d52d0669ee8a677831249e659f78aea fluxheim-1.6.36-php-aarch64-linux.tar.gz
    • 15730f1b91551027d5f89f1e8551a8eeb62c164fb976502cbaf88116b80ce073 fluxheim-1.6.36-load-balancer-aarch64-linux.tar.gz
    • 2dc888f11218bcbd17c8e0d9f7a7e739de7312afeaa2dd2e548cc368aa5acd65 fluxheim-1.6.36-config-tester-aarch64-linux.tar.gz
  • macos:
    • 78e515b802bd34c69d376fdfc2709f20c09b3c5997b7b8d027c088ca42aab406 fluxheim-1.6.36-dev-aarch64-macos.tar.gz
• SBOM checksums:
  • fc87e46610d7c705cebb1e6339d1ffa8f5c17a987db5c14d932cae5168349726 fluxheim.spdx.json
  • 5d78efb5dc3563d7a73da23cc56d9237789f709551a1b6b55834d98c91070548 fluxheim.cyclonedx.json
• Reproducible build:
  • bf50cd4d2f9135244fbf4f5e9b9a837c21b70e66d443cd123b8cc043f73a03da x86_64
  • 8df58b9c7a4deec52977e15d118c932e8f9cd4c31b1ad7896bf33240e134c215 aarch64
  • 2e17993d0f01e72e99426219113921e2c1b0865769fdab8d8bc8c9e9fe6e86a5 macos
• Full Build Container digests:
  • Wolfi: ghcr.io/valkyoth/fluxheim@sha256:144a7ae25fbc32a42e875d078e3a51d7ea93ccbab5f526251efe4ddf8c429ed5
  • Alpine: ghcr.io/valkyoth/fluxheim@sha256:49d423fab13195a19253b2063649e66f41565c0cb4d8fde299b7205eca1ef688
  • SUSE Micro: ghcr.io/valkyoth/fluxheim@sha256:1c3873456d856d1611061ee925b146e0fbbfce219015d54040b05528f5ce4cdd
  • Debian: ghcr.io/valkyoth/fluxheim@sha256:6200a1a1d5b8ba96f019e1cf33cb57c46a019a96cace4055bc5a42de6eec07e2
• Cache Build Container digests:
  • Wolfi: ghcr.io/valkyoth/fluxheim@sha256:86915cf5d21117d7a01fc84317eefcdde8986e58a2a94541a704beab5d138b4c
  • Alpine: ghcr.io/valkyoth/fluxheim@sha256:15a5e5c1a44d0c758b1df77ec009af201af53de26fa834dec5a75778a9034efe
  • SUSE Micro: ghcr.io/valkyoth/fluxheim@sha256:22afc27807ebcf746c5541e187002f04849696040a4b235262d70365315a1ccc
  • Debian: ghcr.io/valkyoth/fluxheim@sha256:6fe1adf0ab7d76de4634e824eb25af6d0e8e54462124eb223c8842c41019bce4
• Proxy Build Container digests:
  • Wolfi: ghcr.io/valkyoth/fluxheim@sha256:c7853e89617ff9274a7c9639f2fbc000a40c6893754ae613f27ecb25c162acbd
  • Alpine: ghcr.io/valkyoth/fluxheim@sha256:1bc9d5758507f38526cddea6064f51a8bc15c2d5b0ba834bb6e6dd7cd07b3a6c
  • SUSE Micro: ghcr.io/valkyoth/fluxheim@sha256:7986cb25cacd4feabb977939e2037164a77614144f02f0d986fc8c784c8f441b
  • Debian: ghcr.io/valkyoth/fluxheim@sha256:3c4f4a027e470da75c2b0275360c5fafd39aef9feeee5bdb1a44912e8a6025d0
• PHP Build Container digests:
  • Wolfi: ghcr.io/valkyoth/fluxheim@sha256:186b6d495d7891aadebcc75c839c92aa10c4bb5e77eec6d3e52258fa2fe96084
  • Alpine: ghcr.io/valkyoth/fluxheim@sha256:e1649b71eef48d7719075c3d5da1d729a0cffa1d3adf2b788bb401c7d9cd6fef
  • SUSE Micro: ghcr.io/valkyoth/fluxheim@sha256:a5e692ea02b029d7c4351f750cacc2dce2e6b41336d26d34f34c043cf3e3c2b9
  • Debian: ghcr.io/valkyoth/fluxheim@sha256:2fd828ecf1bb8b812408db8fcb7df5a5be3090405cac0d07b017588aaae4ed09
• Load Balancer Build Container digests:
  • Wolfi: ghcr.io/valkyoth/fluxheim@sha256:bcfb40acdaef8204e4293ab34a3170045a4e620b654bc7449941f2e33796e58c
  • Alpine: ghcr.io/valkyoth/fluxheim@sha256:021ba07e5bb8c46640e2bb9a32176f76c7538dc2e6c17166d6b7dfd22e0f745e
  • SUSE Micro: ghcr.io/valkyoth/fluxheim@sha256:0eaf9fe96a956691c7c049062070344790f606269cd249254b2bab8e09b5ecfe
  • Debian: ghcr.io/valkyoth/fluxheim@sha256:226000b521ebbc15878be9853a2cf94806e5cfa21b2d21027be044d8f0bc2fdb
• Tag signature:
  • Good "git" signature for 1921261+eldryoth@users.noreply.github.com with ED25519 key SHA256:EoLRQ5k4J5pYz3UMFmkrV798gYFNkToGS2xEPvebqB4

---

This discussion was created from the release Fluxheim 1.6.36.