Skip to content

Fluxheim 1.3.0

Choose a tag to compare

@eldryoth eldryoth released this 14 May 20:10
· 1194 commits to main since this release
Immutable release. Only release title and notes can be modified.
v1.3.0
91c4cfe

Fluxheim 1.3.0 Release Notes

Summary

Fluxheim 1.3.0 is the shared ingress/TLS feature-graph split release. It makes
the focused cache and proxy profiles TLS/ACME-capable without forcing unrelated
application modules into those builds.

  • Release type: focused packaging and feature-boundary release
  • Compatibility: default and full builds remain broad production builds;
    focused cache/proxy images are stricter by design
  • Primary area: Cargo feature graph, containers, packaging, and release docs

Scope

Fluxheim 1.3.0 starts the shared ingress/TLS feature-graph split. The goal is
to make TLS and ACME usable by focused builds such as cache, proxy, and future
load-balancer images without forcing every deployment to compile unrelated
webserver or cache modules.

Highlights

  • TLS backends now depend on the shared ingress feature instead of forcing
    the full proxy feature.
  • Added focused profile aliases:
    • profile-full
    • profile-web-server
    • profile-cache-edge
    • profile-proxy-edge
    • profile-load-balancer-edge
  • Added CI validation for the new focused profile aliases.
  • Added focused container configs for cache-edge and proxy-edge image builds.
  • Added runtime config guardrails so binaries compiled without web or
    cache reject configs that require those modules.
  • Expanded local and GitHub clippy coverage for TLS-only, full, web-server,
    cache-edge, proxy-edge, and load-balancer-edge builds.
  • Updated the roadmap:
    • 1.3.1+: PHP/FastCGI and PHP runtime follow-ups.
    • 1.4: advanced proxy parity.
    • 1.5: enterprise load-balancer parity.
    • 1.6: shared Wasm extensibility.

Compatibility Notes

The focused profiles are a compatibility step toward stricter images. Static
web serving still uses the shared proxy runtime in this first split, so
profile-web-server intentionally includes proxy.

The load-balancer image profile is prepared in CI but remains gated until the
1.5 load-balancer line unless explicitly requested in a manual image
workflow run.

Checksums And Signatures

  • Commit: 91c4cfe74b34c65f3d5d8b1f27ab39f725c91c5c
  • Local gate: GitHub CI green before tag; local release metadata checks passed
  • CodeQL/code scanning: no open release-blocking alerts before tag
  • Source archive checksums:
    • 0171b48920678b99ae77d36c7888d5b523bcb45b5827ee0ef4a3a68131863b56 fluxheim-1.3.0.tar.gz
    • c6acdf36b9310a3c6d9731f6dcbdeed5a5e79f75835b8ce24fa1ba2009d70237 fluxheim-1.3.0.zip
  • Binary checksums:
    • 26d2220a8a8e6eefd5b0fc65de100c9a55896ef359aea92b62840d09d44f29be fluxheim-1.3.0-full-x86_64-linux.tar.gz
    • 64f73b293ba87f9209744501e30b20c62ccd1e853f98435e7603431edb95bee3 fluxheim-1.3.0-cache-x86_64-linux.tar.gz
    • 8a7cca9dd3f434895dae4bc4c3cad45005683fd2d813301b3da08a18c815e71c fluxheim-1.3.0-proxy-x86_64-linux.tar.gz
  • SBOM checksums:
    • 0b98ffa64f8597c68aa9e7dfa0bab75c4ceb4027113705e2564575382500c7a1 fluxheim.spdx.json
    • 20af0d1856635524c9894705688171244e81baec0a3247e4f7d0290f7acc74f7 fluxheim.cyclonedx.json
  • Reproducible build:
    • 39065869d07a21352971b7c884ae3f3a93f1cf1db40929e362022598b631d45b
  • Full Build Container digests:
    • Wolfi: ghcr.io/valkyoth/fluxheim@sha256:83f6649a2da859f9d1e45d300dbabb41ef72e0ddfd8ae881fc645733e34c6318
    • Alpine: ghcr.io/valkyoth/fluxheim@sha256:3da7a8c8f37b1acd13a5a0d28cd9350a9a9ef1adf7cea1aaf555fd3fc1e9fe74
    • SUSE Micro: ghcr.io/valkyoth/fluxheim@sha256:b1f95109f9b67278ade4b197b02af51a4cc2be612270b32df5339f50ee7b3f92
    • Debian: ghcr.io/valkyoth/fluxheim@sha256:41bbc9f5c585af3c66a61a221a1a96b9403cc38b370b3156d03963e243d7015f
  • Cache Build Container digests:
    • Wolfi: ghcr.io/valkyoth/fluxheim@sha256:bb4152e92bd89e4c1dd09ce4e583cf6340c0737b04f12a5dd478cf90e6026a6d
    • Alpine: ghcr.io/valkyoth/fluxheim@sha256:4bfae69db74e1aea20ff3abd6e5b41550d8e7b19bbba86faec9e000905ad1bdd
    • SUSE Micro: ghcr.io/valkyoth/fluxheim@sha256:69937a3ee2ac45faa1e737f16a2938ba05b8669b4d64a83fa0d5629d002b46c6
    • Debian: ghcr.io/valkyoth/fluxheim@sha256:7f2b6010eff66f0edb4f7c82107468c99d08d9bd7e7b1d764cdb1912b7afef2e
  • Proxy Build Container digests:
    • Wolfi: ghcr.io/valkyoth/fluxheim@sha256:2f7dd19fd273236b34fd6fa09b07fd782c349004fd3650f0647ca0a771ed4b94
    • Alpine: ghcr.io/valkyoth/fluxheim@sha256:2e1e2bd355e5bb47a160f76ccb35510e557b018aae4387827291752948aec32c
    • SUSE Micro: ghcr.io/valkyoth/fluxheim@sha256:96927c467c99234fbbe9d6f6f2f66f722652b31a2b95935a758d0b783940d8eb
    • Debian: ghcr.io/valkyoth/fluxheim@sha256:3bd12333af9ea438eb50ecd545cc19df5c4b7319e2e88fa2476e1d2f7033d936
  • Tag signature:
    • Good "git" signature for 1921261+eldryoth@users.noreply.github.com with ED25519 key SHA256:EoLRQ5k4J5pYz3UMFmkrV798gYFNkToGS2xEPvebqB4