Skip to content

Fluxheim 1.6.22

Choose a tag to compare

View all tags
@eldryoth eldryoth released this 20 Jun 17:03
· 149 commits to main since this release
Immutable release. Only release title and notes can be modified.
v1.6.22
This tag was signed with the committer’s verified signature.
eldryoth
SSH Key Fingerprint: EoLRQ5k4J5pYz3UMFmkrV798gYFNkToGS2xEPvebqB4
Verified
Learn about vigilant mode.
1cfb0ac
This commit was signed with the committer’s verified signature.
eldryoth
SSH Key Fingerprint: EoLRQ5k4J5pYz3UMFmkrV798gYFNkToGS2xEPvebqB4
Verified
Learn about vigilant mode.

Fluxheim 1.6.22 Release Notes

Fluxheim 1.6.22 starts the native admin and metrics serving slice of the
Pingora-exit line. The goal is to move control-plane HTTP behavior behind
Fluxheim-owned server primitives without weakening admin authentication or
changing production listener behavior prematurely.

Changed

  • Start native admin/metrics serving work for the control-plane side of the
    remaining runtime cutover.
  • Keep production admin and metrics compatibility conservative while native
    handler parity tests are introduced.
  • Mark config-derived admin, ops-socket, and metrics service plans native-ready
    after proving native HTTP/1 handler parity for admin auth and Prometheus text
    responses.
  • Update release metadata, RPM metadata, and container tag documentation for
    v1.6.22.

Security

  • Preserve the auth-first admin contract as the required behavior for native
    admin/control-plane serving.
  • Harden native background task handles so accidental handle drops abort tasks
    instead of silently detaching them, while documenting that aborting a watched
    critical handle triggers supervisor shutdown.
  • Mark native supervisor shutdown results as #[must_use] so callers cannot
    silently ignore whether they initiated shutdown or joined an existing
    shutdown.
  • Reject newline-bearing paths in native runtime cutover evidence generation
    before interpolating them into TOML fixtures.
  • Document that native admin target matching intentionally uses raw,
    percent-encoded paths to avoid normalization-bypass regressions.
  • Keep native runtime cutover evidence active for stream, UDP, HTTP/2, and
    final proxy-runtime blockers until those services are wired to native
    listeners.

Compatibility Boundary

  • Normal proxy profiles still retain the Pingora compatibility runtime in this
    release. The admin and metrics cutover is staged so response shape, auth, and
    local smoke behavior can be proven before flipping production service
    registration.

Checksums And Signatures

  • Commit: 1cfb0ac23c418ef2d6226bf0026f7cc3ab5c1b66
  • Local gate: GitHub CI green before tag; local release metadata checks passed
  • CodeQL/code scanning: no open release-blocking alerts before tag
  • Source archive checksums:
    • 7e9e5839097f36a4963054c77b53006440cc080a3c5c8240d6022aeaa5a3a175 fluxheim-1.6.22.tar.gz
    • 3970ec5e2824e8ed2f06aeb30a0d08d849284df79c6f90f9b795ecc7b28372da fluxheim-1.6.22.zip
  • Binary checksums:
    • x86_64:
      • 8fbdd44b567060c84e3997b260514f86c668f3860f1673a394d4384b4eb98592 fluxheim-1.6.22-full-x86_64-linux.tar.gz
      • 86bd8831b8eef0b4de00d0706613e04fee70c59bee103f4863daa88a26e0a617 fluxheim-1.6.22-cache-x86_64-linux.tar.gz
      • 39c7005a3973f3d0224f138273d1205899745208f03d3aae259c95faac95a4c6 fluxheim-1.6.22-proxy-x86_64-linux.tar.gz
      • 75a4197c52fbf8947ca0cb2f415cc7790c795152fa65df878779a9f36980eeb4 fluxheim-1.6.22-php-x86_64-linux.tar.gz
      • 121a1633a9e245922a6f3673b4f5253afbd866738dbc0d284acaf55c0136ba47 fluxheim-1.6.22-load-balancer-x86_64-linux.tar.gz
      • c30fcf292191d182732c0cedfb24b13fadf1bbfa26be195bc92ed5db4c1d38f3 fluxheim-1.6.22-config-tester-x86_64-linux.tar.gz
    • aarch64:
      • 421e5a32afb7cd5c52e41aaa1d942ad07071c66e3cc15fb2fab8e05081c5505b fluxheim-1.6.22-full-aarch64-linux.tar.gz
      • 0a67c5a878c684daf8c1e7745a85956c25c4c856ae7fc268c06fbfa747a0930f fluxheim-1.6.22-cache-aarch64-linux.tar.gz
      • fa70e1221dfc0014e6e40d49855ef76c4f5b84cf8b4daf50cb69136af07a737b fluxheim-1.6.22-proxy-aarch64-linux.tar.gz
      • 456475b64d570400fc350bd175b6f07ef24669b1cda2a93180df9f8f8c39c8c9 fluxheim-1.6.22-php-aarch64-linux.tar.gz
      • 4a5be65883e45f7b32fcf0477ca120421d055ca1c7ef377adee15252ac9b357c fluxheim-1.6.22-load-balancer-aarch64-linux.tar.gz
      • 8cbc96e7f276adc96fa725e08cd0501cf400fa8460c33d3d277000bfcf6a4a79 fluxheim-1.6.22-config-tester-aarch64-linux.tar.gz
    • macos:
      • 5d4bef7c196f3fe6b9fee65a59264f4d20a88d04868b0f682509c2893b3abce7 fluxheim-1.6.22-dev-aarch64-macos.tar.gz
  • SBOM checksums:
    • 70c8cdbcde7ef65fa363cd512950ba96dd336186cd334de06693b025d189ee33 fluxheim.spdx.json
    • 48fbbc9d7db5897dc2579f24a05981da537bbc0bb930201dbc40e9251950da2b fluxheim.cyclonedx.json
  • Reproducible build:
    • 3a9e7ed5b38122f1be1a705e10a32c5a002fd383bd51b8dcdeaf934b0fe77be7 x86_64
    • a7b087242e89f82b2da633c8be50865241a47414b1e9ed01d401ed2d63394bb1 aarch64
    • a83fb3d87d63715bb71d2797e43185542656e6aa9de476855b944116bdbe128d macos
  • Full Build Container digests:
    • Wolfi: ghcr.io/valkyoth/fluxheim@sha256:17cc37795971aaa2c1615f1f06a164cc318c779b4b7ef41802eda63119807f8a
    • Alpine: ghcr.io/valkyoth/fluxheim@sha256:09a4ac9ea761a56c0d8306c2a2aedd6cdd4a5c56ca3982f61e63a90f5c3087b9
    • SUSE Micro: ghcr.io/valkyoth/fluxheim@sha256:8d0566cad1a71ba80d635b7e9030f0ed939c79c20edd7f578c38cfa4b3ecde2c
    • Debian: ghcr.io/valkyoth/fluxheim@sha256:081d513c1e70199fd3c1945d8781117ae8f70f09c8fec5765e59eb928776d6ad
  • Cache Build Container digests:
    • Wolfi: ghcr.io/valkyoth/fluxheim@sha256:2eba360b2a031dc04f943b4c97969dacd9c5ab0aae83a97b2fde636a4fc3c934
    • Alpine: ghcr.io/valkyoth/fluxheim@sha256:57ae58f51113608cfc778125118c9bc48e2f2c2b4475475793d54acd296eac18
    • SUSE Micro: ghcr.io/valkyoth/fluxheim@sha256:2148fc61fd80b1999861423064f9d822d0ad74a5e516303da4e80fa655de9bf2
    • Debian: ghcr.io/valkyoth/fluxheim@sha256:1d2d91af39784267969600b505790f96b487a1ef648f4a9d4095c51eb243ab2b
  • Proxy Build Container digests:
    • Wolfi: ghcr.io/valkyoth/fluxheim@sha256:31f056084830a927a41ddb087f33398e11fc00b8ad1aaa641a8f6261d514f9b3
    • Alpine: ghcr.io/valkyoth/fluxheim@sha256:4ef4a2c4ad073bd3b10c923ad13834d3019828636336d7ea40eb84d7d847c9ba
    • SUSE Micro: ghcr.io/valkyoth/fluxheim@sha256:76702267048afb72b5f136600755b4a930e427bc729ead32dab5d42c5eebebdd
    • Debian: ghcr.io/valkyoth/fluxheim@sha256:73dfb10cf36f900c9e07a6de743987459a44547647e4f59bbdb7aca6d8390cf5
  • PHP Build Container digests:
    • Wolfi: ghcr.io/valkyoth/fluxheim@sha256:4da923e7d634fda477f40ebdca7130a9861b291cef0212fc6deddb21a1acee4a
    • Alpine: ghcr.io/valkyoth/fluxheim@sha256:588c10f7d0963ef5ef7a561584b9c458599d439ed97bf2077a6427704b047477
    • SUSE Micro: ghcr.io/valkyoth/fluxheim@sha256:34e33efa2e66651f3f42f0aefcf3fa554ab162ec062f249c41d496932b454a4c
    • Debian: ghcr.io/valkyoth/fluxheim@sha256:3bbf4ee644dbe46b657476b7f00a7c497467e3b005699ab0d46564d29f3b7c30
  • Load Balancer Build Container digests:
    • Wolfi: ghcr.io/valkyoth/fluxheim@sha256:d07ae1e8784dd3de3ef032283bad2ce324195aac945016f2e732444a83308d96
    • Alpine: ghcr.io/valkyoth/fluxheim@sha256:7caaffee9a211eab4ea6587ea881ca8026b6b1bdb580173361aead565361b514
    • SUSE Micro: ghcr.io/valkyoth/fluxheim@sha256:05d83659dc90a2df8c5533327345c2d304026224c9e69af6d4cdf749f97e5aee
    • Debian: ghcr.io/valkyoth/fluxheim@sha256:3292fc0bfb48ea7031b38286a3abbe7e3993108755f21fad8e5ee5e64d5c04bc
  • Tag signature:
    • Good "git" signature for 1921261+eldryoth@users.noreply.github.com with ED25519 key SHA256:EoLRQ5k4J5pYz3UMFmkrV798gYFNkToGS2xEPvebqB4
Assets 16
Loading
0 Join discussion