Fluxheim 1.6.24

[eldryoth]

Fluxheim 1.6.24 Release Notes

Fluxheim 1.6.24 finishes the native HTTP/2 downstream parity proof for the
Pingora-exit line. The representative native runtime cutover report is now
blocker-free for the simple HTTP/1 + HTTP/2 + admin + metrics + stream + UDP
configuration, while the remaining Pingora runtime/listener adapter crates stay
targeted for a focused 1.6.25 deletion release.

Changed

• Promote the native HTTP/2 downstream preview to cutover-ready after every
  required safety hook is represented and tested.
• Update the native runtime cutover evidence script so the representative
  config expects no blockers.
• Move remaining Pingora dependency exceptions to 1.6.25, keeping the gate
  active while avoiding a rushed mixed release that both changes HTTP/2 parity
  status and deletes the final compatibility crates.
• Update release metadata, RPM metadata, and container tag documentation for
  v1.6.24.

Security

• Keep decoded HTTP/2 header-count enforcement before routing and document the
  paired decoded header-list byte bound from h2 max_header_list_size.
• Join aborted native stream and UDP listener tasks during shutdown, closing
  the short file-descriptor release window after an operator-triggered stop.
• Add an explicit zero-blocker assertion to the native runtime cutover evidence
  script for the representative config.
• Preserve native HTTP/2 tests for oversized URI rejection, oversized request
  bodies, decoded header count, request trailers, response trailers, prohibited
  HTTP/2 response headers, request flow-control release, response flow-control
  hold timeout, slow request-body timeout, and handler timeout.
• Keep the Pingora dependency policy enforceable: all remaining normal-profile
  Pingora crates must be deleted by the next dependency-removal checkpoint.

Compatibility Boundary

• Normal proxy profiles still compile the Pingora compatibility runtime in this
  release. The change in 1.6.24 is the HTTP/2 parity proof and blocker-report
  cleanup, not the final dependency deletion.

Checksums And Signatures

• Commit: 835f10614900c5b3233d3de5e22bc5c85a6ad63a
• Local gate: GitHub CI green before tag; local release metadata checks passed
• CodeQL/code scanning: no open release-blocking alerts before tag
• Source archive checksums:
  • 8424d7bc90972e3870ceb15e2a36f0964c56e1dd33e82e486c729f3c9beba90b fluxheim-1.6.24.tar.gz
  • 36722dea641dbd88c472c8f88e2dfffbb68c3f26f603a85d811675d152028570 fluxheim-1.6.24.zip
• Binary checksums:
  • x86_64:
    • 0c30cde62b28f530a064af71b4624d50d757eacb6d1f8d614addf8195a7f9fc5 fluxheim-1.6.24-full-x86_64-linux.tar.gz
    • d9b7e83b59367e1b5db1f77f55a1062ecdec1946f20d646c5d0ca2c48050e65b fluxheim-1.6.24-cache-x86_64-linux.tar.gz
    • 87a9df8f1d80b77dabf2a266fcdd11aef779999c4b86519306d7fa4f1b3c41be fluxheim-1.6.24-proxy-x86_64-linux.tar.gz
    • a1de2681523396658d47a734a7b5f04bc6eec5e1a88e92489b0946ff273baa5d fluxheim-1.6.24-php-x86_64-linux.tar.gz
    • fb8cf0e0b159ee7ae66ff7e958eeb6e812c5b9327fbb21586a5e5c271fc219d4 fluxheim-1.6.24-load-balancer-x86_64-linux.tar.gz
    • ca66aa7d0fde7db94f547f583045a016d8ff1891374504cea2a0bf6114888cb6 fluxheim-1.6.24-config-tester-x86_64-linux.tar.gz
  • aarch64:
    • d07d60e196902048aa8eeb55f3695a87681670bbc61670f8be71d391e782c8f7 fluxheim-1.6.24-full-aarch64-linux.tar.gz
    • 9be8c03ee4c0410fb12de87b5b15e95694cd377fbf8d63af6e5205ef17d2fb7c fluxheim-1.6.24-cache-aarch64-linux.tar.gz
    • 606489bae2f696072c880c4665ef2a10cda9d451d25a2eb66366a959d2e2f03a fluxheim-1.6.24-proxy-aarch64-linux.tar.gz
    • b65709aeeee99062ba70af0a407b343aa15d1ca8e42b770f7dbd2bedf7a5458f fluxheim-1.6.24-php-aarch64-linux.tar.gz
    • 016b49de6b7da29fd2a3ebcad863c293c560e4a894feb66936bd9d7e3f5d834c fluxheim-1.6.24-load-balancer-aarch64-linux.tar.gz
    • a0934b53ea7081659c29f230e814ad3669c18437c9d6e36a6db76040f18215d3 fluxheim-1.6.24-config-tester-aarch64-linux.tar.gz
  • macos:
    • d63e1de498a696015ef4d04c26ddd82e41fc3057b47abd693a5c3988dfbfa61a fluxheim-1.6.24-dev-aarch64-macos.tar.gz
• SBOM checksums:
  • 60abf900757f6fc6e77e625a8018f6e0d5283df15deff7cf838a3ddbc8ad8c38 fluxheim.spdx.json
  • 125b8d1946c0b4fb11a6252cb0350c2a89cefabb0054a77867ba861d10b1ee34 fluxheim.cyclonedx.json
• Reproducible build:
  • 7241a8c6fb791c294eadc0ecec5611eb6561abac38a5e4d9bf2413425f7f2ad2 x86_64
  • 9eaf718cbc6c0cdde58841b636510745669dc42cd549b8850860ee120b748ed5 aarch64
  • 81c712338426a7313583dd802bc039a4c96038bc2deafab9bf70e1cf23ad8812 macos
• Full Build Container digests:
  • Wolfi: ghcr.io/valkyoth/fluxheim@sha256:491ff683e0bec7956545d97385d5993853bb22b58728fe3b1985ef3fa6d3b783
  • Alpine: ghcr.io/valkyoth/fluxheim@sha256:801974b342c8e1859ea4d14208088d4bdb09c2bd785a67534ae118154250a2b4
  • SUSE Micro: ghcr.io/valkyoth/fluxheim@sha256:63fe11f51c3582e9d184d291d3fbc5028108ec98dc77f0683b59e24c58943b0e
  • Debian: ghcr.io/valkyoth/fluxheim@sha256:1bae5153d63503ab4192e3c3b182cdf413346cae7881b12e80b25824f00db370
• Cache Build Container digests:
  • Wolfi: ghcr.io/valkyoth/fluxheim@sha256:4674a5276fdfc00b69c4cd863a5a8ac672380946f7ac2508a435389dd924bfb4
  • Alpine: ghcr.io/valkyoth/fluxheim@sha256:48a85fa94ffc2e48f6062984be137fa05bdd3ac6c28aaab585cbd84e58d6f698
  • SUSE Micro: ghcr.io/valkyoth/fluxheim@sha256:ade330e787b5bc76882b82d0a5cca2f1e2a54b21812771fbaa8bdd3b98529872
  • Debian: ghcr.io/valkyoth/fluxheim@sha256:5c8584cea2526fde7287999d58cd10cef763b477fd1a160e8aeb22f5354c3019
• Proxy Build Container digests:
  • Wolfi: ghcr.io/valkyoth/fluxheim@sha256:19429018d4bd46c2c4e1519b5ed893b42227e544626c449c4dcfd97a181062d2
  • Alpine: ghcr.io/valkyoth/fluxheim@sha256:24a7106ffafeb9461b70bdb57cb5fc9ea8a4809446c6de59c2d7cdd1c922b831
  • SUSE Micro: ghcr.io/valkyoth/fluxheim@sha256:0bbbd39a324b582c9d9b70544bba1d39c0de32b291fa2d4160726cfa74998550
  • Debian: ghcr.io/valkyoth/fluxheim@sha256:6695ab34496553816f00972545b23c4bce2a69df7f2468e4df7d15ccc1248ce1
• PHP Build Container digests:
  • Wolfi: ghcr.io/valkyoth/fluxheim@sha256:a78cf928fafa91426dde58b5e232f9e4153a9f7ee0ab66f9d636cfda11b19964
  • Alpine: ghcr.io/valkyoth/fluxheim@sha256:2422b45eb9e3fec85b6b76750679fa52963d7519db910ff95b69d730757d486c
  • SUSE Micro: ghcr.io/valkyoth/fluxheim@sha256:9d61382d432a5d39bbc9c0a29b915fb11da1bf1ae0d3651ac811eb5a46e5c6a7
  • Debian: ghcr.io/valkyoth/fluxheim@sha256:365f3e61191015503386a329fb2060435e9f28137771a494b9304ea0e1521527
• Load Balancer Build Container digests:
  • Wolfi: ghcr.io/valkyoth/fluxheim@sha256:19d8dff367924db4f1552a3fd5c530d0742978734956a85e2d97939dccf3bd17
  • Alpine: ghcr.io/valkyoth/fluxheim@sha256:b3598235b2aada4c8849733daad8d6b3a32baeff4f3c9c44f018b5d4c07b16bd
  • SUSE Micro: ghcr.io/valkyoth/fluxheim@sha256:12b3e4c86daeadf63e260e0a9984c6ab0076d0152da29eb157a35004f2c13f41
  • Debian: ghcr.io/valkyoth/fluxheim@sha256:03e10ba0843c87c3e85072e011bed80c9a27720bad1324174bac4ad7d810578a
• Tag signature:
  • Good "git" signature for 1921261+eldryoth@users.noreply.github.com with ED25519 key SHA256:EoLRQ5k4J5pYz3UMFmkrV798gYFNkToGS2xEPvebqB4

---

This discussion was created from the release Fluxheim 1.6.24.