Fluxheim 1.6.12

Fluxheim 1.6.12 Release Notes

Fluxheim 1.6.12 continues the Pingora-exit line by turning the native HTTP/2
preview into a reusable server primitive with stronger flow-control and trailer
coverage.

Added

• Added native HTTP/2 request/response handler types in fluxheim-server.
• Added native HTTP/2 response trailer support, including gRPC-style trailer
  propagation tests.
• Added real h2 client/server tests for request trailers and response trailers.

Hardened

• Refreshed non-Pingora dependency patches: getrandom 0.4.3, openssl
  0.10.81, brotli 8.0.4, and h2 0.4.15. Pingora remains pinned at 0.8.0
  while the 1.6 exit line removes it from normal builds.
• Added an absolute downstream HTTP/2 response-write lifetime budget.
• Added an absolute native HTTP/2 handler execution timeout.
• Sends response DATA through explicit h2 capacity reservation and polling,
  avoiding unbounded implicit response buffering.
• Rejects HTTP/2-prohibited response headers and trailers before sending.
• Zeroizes collected native HTTP/2 request bodies on drop and uses a bounded
  request-body preallocation hint.
• Treats zero-capacity h2 send-side wakeups as a closed response-capacity path.
• Keeps native HTTP/2 production cutover blocked until pre-routing
  HPACK/header-count allocation bounds are proven.

Verification

• cargo test --locked -p fluxheim-server native_http2
• cargo clippy --locked -p fluxheim-server --all-targets -- -D warnings
• cargo check --locked --workspace --all-targets
• scripts/smoke_native_http2_preview.sh
• scripts/check_latest_crates.sh

Checksums And Signatures

• Commit: 759f6e392ef69c73d6bd7045bad00a8c45f0d3ad
• Local gate: GitHub CI green before tag; local release metadata checks passed
• CodeQL/code scanning: no open release-blocking alerts before tag
• Source archive checksums:
  • 66d0ff417154dbebda803abb6828fb3ddbe3aacfe1a9f989dea7417b71976c79 fluxheim-1.6.12.tar.gz
  • 3f91a4e58063b4878def834d79c22b7d9eb803be296a65fbbbf17c60140db003 fluxheim-1.6.12.zip
• Binary checksums:
  • x86_64:
    • bdc4f7103de6e1ff40fcd59aa4fbdae1abbcee2d1da52b1f5c31c58ed6f452f9 fluxheim-1.6.12-full-x86_64-linux.tar.gz
    • a87ea4f6b6b4fc5f207a7478e2e78dc2c1eb779054a36b66ac2bed35336c63e2 fluxheim-1.6.12-cache-x86_64-linux.tar.gz
    • 528cac372d18e97927413bb06c8ae0411b17b133191e0aab83c25f8914fcd2ec fluxheim-1.6.12-proxy-x86_64-linux.tar.gz
    • 196fbb2064e15240f747661d99539fa0a74d22dbe2e4f31c7610de72a8ba29a8 fluxheim-1.6.12-php-x86_64-linux.tar.gz
    • 13f64df06adae00eb3ebe6ccdff962090bb9ff8c3d20aa3864c118b4e1f977d7 fluxheim-1.6.12-load-balancer-x86_64-linux.tar.gz
    • 935966046198fd2d1a1812ba1c91f5cf4c1c7e7d62aead432a5ab98c56cf833a fluxheim-1.6.12-config-tester-x86_64-linux.tar.gz
  • aarch64:
    • 34364e61b6a0c9479662a2f6c4061f6e8ff963fa74077bf2657b147aa4b241f2 fluxheim-1.6.12-full-aarch64-linux.tar.gz
    • 8f3f40f0a04bf92887c715ccaffaadfe21662d7d193b92083bb732686e460107 fluxheim-1.6.12-cache-aarch64-linux.tar.gz
    • 878e04dabfc933ac3dde27d6ea581c9c266ac6c04e9d3b632c0516de0dc53fa8 fluxheim-1.6.12-proxy-aarch64-linux.tar.gz
    • 698c8daa51669f3c304531b0eacbe266abb350f81233e603c7b24390c8449b92 fluxheim-1.6.12-php-aarch64-linux.tar.gz
    • fc6269c0404cc8276e550cbd9afad0e518d606e041266da6e02cd76fac7f8142 fluxheim-1.6.12-load-balancer-aarch64-linux.tar.gz
    • 7e942dfc09e446f611a86b7a7a308e4115df4f09be1378171720a246232abdbd fluxheim-1.6.12-config-tester-aarch64-linux.tar.gz
  • macos:
    • 438a202b77ef717c68cc3e2f3aafc706dcc269d09ba550fdd6eea3cee25f20c0 fluxheim-1.6.12-dev-aarch64-macos.tar.gz
• SBOM checksums:
  • 63c544a2c2d3bb3dd89ca07528eb23caa5841b3a68930d88e4a883ed36d3e0d2 fluxheim.spdx.json
  • e4e206bcd1249a8a05730fce62303bcb4824bc8e523f288be215d1dc949d6d0e fluxheim.cyclonedx.json
• Reproducible build:
  • e416f1d3ecf069c55e13e63b917c5fe6dd1d6c30907e23e5487963eb4e656a2b x86_64
  • f7908f71fb961292300c3f685f69cc26895be8ef4328b7d50885138831ff605f aarch64
  • 83c849f6c55ef36e6f0c86b6c5ee8e80ed67832e70ab0cc0970811bbf5c35501 macos
• Full Build Container digests:
  • Wolfi: ghcr.io/valkyoth/fluxheim@sha256:a9dfb9382f4c79f82c2673878286d31d5b55f9a33567863bc7264d699b9d17c5
  • Alpine: ghcr.io/valkyoth/fluxheim@sha256:1251aacaf63559df8785befc10b51110d9cb8209ae4c81ef2ebb532f471fcc4a
  • SUSE Micro: ghcr.io/valkyoth/fluxheim@sha256:3717e2eb3b62de94bf576bcf317264abe6400eafd5971db4a934bd1c219e5808
  • Debian: ghcr.io/valkyoth/fluxheim@sha256:6255f252dfff9091044fb3890271bcd5dcf979ca52a7f3c05abd8fc44bac7583
• Cache Build Container digests:
  • Wolfi: ghcr.io/valkyoth/fluxheim@sha256:993e516d5debd839f09185e67b062f3f760ce9515b9bed97842cbceef6021b78
  • Alpine: ghcr.io/valkyoth/fluxheim@sha256:ea2c36cf367154ed15464ddaf7b52c938f4e6e13ef04b60365926d68e17db303
  • SUSE Micro: ghcr.io/valkyoth/fluxheim@sha256:2fde0f1648ae509c614996126257b49f39b3fc367714dad609529f23c9980e92
  • Debian: ghcr.io/valkyoth/fluxheim@sha256:2c36dfe9c0e3f344b16cfffd84f113676668c2f3102d97978a8c1c8eab4f1441
• Proxy Build Container digests:
  • Wolfi: ghcr.io/valkyoth/fluxheim@sha256:06ddc5f9d938ce3772f792d8c514cca145bd01c09dae63ddd10a17eeab8c8a22
  • Alpine: ghcr.io/valkyoth/fluxheim@sha256:275f44cf8e8940fda4e1f203e3aa6b2436a5097aed5b3bfb6a53df916ff8d4b2
  • SUSE Micro: ghcr.io/valkyoth/fluxheim@sha256:746e33ea6f112ae60ab65e16703e229dea07628c4718e0a37e1b1786fd61505b
  • Debian: ghcr.io/valkyoth/fluxheim@sha256:38730a681eb5bf1b85c421e37ff037eb6499acab9a5ae50560e6bb74f2b99844
• PHP Build Container digests:
  • Wolfi: ghcr.io/valkyoth/fluxheim@sha256:b76695cead3263bcfc623dcd6d5a51267b6aa2b4d16aefc0f110aead47b26301
  • Alpine: ghcr.io/valkyoth/fluxheim@sha256:60ce88214e83fd041592a64f9b472642d011d4da6f76a4851c0f971368903e92
  • SUSE Micro: ghcr.io/valkyoth/fluxheim@sha256:c6d369eb1506433d881cec254465d09457e61eae463884a7e80bc0a4c2b76042
  • Debian: ghcr.io/valkyoth/fluxheim@sha256:4f1082da786b0889aa5b826cc01cad7ccc48d904fa53e5028e44640f78d89066
• Load Balancer Build Container digests:
  • Wolfi: ghcr.io/valkyoth/fluxheim@sha256:92c23be93239ff4400d2c0e91d5c278d20e984e62d667449573bd977742c484e
  • Alpine: ghcr.io/valkyoth/fluxheim@sha256:78bbe6182baf3c3f407d66780cc7633d41e7ae4f0a5e781edbc5e2c64e65619f
  • SUSE Micro: ghcr.io/valkyoth/fluxheim@sha256:bf39568ce2dc71b0f85218f7fa6c115d29ba40670fd26b16a88636afe40b8026
  • Debian: ghcr.io/valkyoth/fluxheim@sha256:18f7878907a2b8b11e291b0021ef777094e06d5c0d9aa3287eeeaecd713287d8
• Tag signature:
  • Good "git" signature for 1921261+eldryoth@users.noreply.github.com with ED25519 key SHA256:EoLRQ5k4J5pYz3UMFmkrV798gYFNkToGS2xEPvebqB4