Skip to content

Fluxheim 1.6.36

Choose a tag to compare

@eldryoth eldryoth released this 30 Jun 17:38
· 556 commits to main since this release
Immutable release. Only release title and notes can be modified.
v1.6.36
6cd9a10

Fluxheim 1.6.36 Release Notes

Fluxheim 1.6.36 is the post-cutover structural cleanup release after the
Pingora-free 1.6.34 proof release and the 1.6.35 stabilization checkpoint.

This release is intentionally scoped to behavior-preserving cleanup unless
pentest or CI finds a correctness issue: remove temporary compatibility
boundaries, move remaining native runtime DTOs and helpers into their owning
crates, and delete inert Pingora-era root code that normal Fluxheim builds no
longer use.

Highlights

  • Start replacing the temporary native proxy shim with direct crate-owned APIs.
  • Rename the temporary native proxy shim module to native_proxy, keeping the
    historical crate::proxy re-export stable while the owning crate APIs are
    split out.
  • Stop re-exporting cache admin DTOs through the native proxy compatibility
    boundary; admin and CLI code now use the dedicated cache_api module
    directly.
  • Replace active root/admin/CLI/runtime imports of the historical crate::proxy
    compatibility alias with direct crate::native_proxy imports.
  • Move load-balancer admin request/result DTOs from the native proxy boundary
    into the fluxheim-load-balancer crate.
  • Remove the historical crate::proxy re-export from normal builds; active
    code now uses crate::native_proxy and crate-owned APIs directly.
  • Delete inert Pingora-era root source files that were permanently gated behind
    cfg(any()), including the old proxy, cache, header, auth-request, edge
    policy, PHP-FPM, traffic-mirror, and proxy-protocol adapters.
  • Remove stale disabled Pingora compatibility runner/test code from
    runtime.rs so dead cfg(any()) paths no longer reference non-existent
    native proxy methods or Pingora traits.
  • Remove the stale Pingora HTTP boundary exception rows now that normal source
    no longer carries quarantined Pingora HTTP adapter code.
  • Consolidate native proxy config storage so hot reload refreshes the same
    config snapshot used by cache purge, cache preview, cache stats, activity
    reset, and load-balancer stats paths.
  • Add native HTTP/1 chunked-body regression coverage for the historical
    overflow-sized chunk header crash class; the native parser rejects the
    ffffffffffffffff chunk size before routing reaches the proxy handler.
  • Pin observability smoke images to stable Prometheus and Jaeger tags instead
    of latest so CI pulls deterministic container versions.
  • Keep normal Fluxheim builds on the Pingora-free runtime introduced in
    1.6.34 and stabilized in 1.6.35.
  • Keep release, dependency, native-runtime, RPM, container, and smoke gates as
    blocking evidence while the cleanup removes compatibility code.

Compatibility Notes

  • This release should not change runtime configuration semantics.
  • Cleanup should be mechanical and behavior-preserving unless a specific
    security or correctness issue is found during review.

Verification

  • scripts/validate-release-metadata.sh
  • scripts/validate-pingora-dependency-policy.sh
  • scripts/validate-native-runtime-cutover.sh
  • scripts/stable_release_gate.sh check

Checksums And Signatures

  • Commit: 6cd9a10a4d785cdaa7ff0b176dfcf22042686ed2
  • Local gate: GitHub CI green before tag; local release metadata checks passed
  • CodeQL/code scanning: no open release-blocking alerts before tag
  • Source archive checksums:
    • 215d0ac21796fb981144ea5a33820da1a8d67d8891d98f81c5513fbfc0168051 fluxheim-1.6.36.tar.gz
    • 8007f0b668e61132b4890e3d3092a09408c19cfcdc439572b01674c23b80a47a fluxheim-1.6.36.zip
  • Binary checksums:
    • x86_64:
      • b0e5366eb23a7e42d629014061fd4659573e700730da6b3ffe7af26ddd73a967 fluxheim-1.6.36-full-x86_64-linux.tar.gz
      • 9739830c23de66b99eb5354c274bbd717304275ee65478913616cf3363a13630 fluxheim-1.6.36-cache-x86_64-linux.tar.gz
      • 16ffb7bb24e6860f298f6e1cd0db0e8b857ae7ac2d6544efab736db45066a097 fluxheim-1.6.36-proxy-x86_64-linux.tar.gz
      • b21c9f16d4ed9917b887544787ce9b54591a86470458b47533e2e1460a7cd540 fluxheim-1.6.36-php-x86_64-linux.tar.gz
      • cac96225de447e687f9618c35a397a74a931e872b9722f52c604dcaaf67800f0 fluxheim-1.6.36-load-balancer-x86_64-linux.tar.gz
      • e013ab6e2af4f87c253e3cb74279accd9b1e7be49e89f23fb77bfbc8a620fb48 fluxheim-1.6.36-config-tester-x86_64-linux.tar.gz
    • aarch64:
      • f76965912aa73599a51c2260b819949629200275547efa336bf200b429a5c711 fluxheim-1.6.36-full-aarch64-linux.tar.gz
      • 6482a7af48daeaf3d72476104d1d50e6acef02d85feb3cd0ebfc048894f9511f fluxheim-1.6.36-cache-aarch64-linux.tar.gz
      • 7ef7acc3c33ef4f2de597563aa8359babf5bfba28e7a41fd18eca81c79f2e58b fluxheim-1.6.36-proxy-aarch64-linux.tar.gz
      • ecf6d7f28541b4b5a2887f10a316797d9d52d0669ee8a677831249e659f78aea fluxheim-1.6.36-php-aarch64-linux.tar.gz
      • 15730f1b91551027d5f89f1e8551a8eeb62c164fb976502cbaf88116b80ce073 fluxheim-1.6.36-load-balancer-aarch64-linux.tar.gz
      • 2dc888f11218bcbd17c8e0d9f7a7e739de7312afeaa2dd2e548cc368aa5acd65 fluxheim-1.6.36-config-tester-aarch64-linux.tar.gz
    • macos:
      • 78e515b802bd34c69d376fdfc2709f20c09b3c5997b7b8d027c088ca42aab406 fluxheim-1.6.36-dev-aarch64-macos.tar.gz
  • SBOM checksums:
    • fc87e46610d7c705cebb1e6339d1ffa8f5c17a987db5c14d932cae5168349726 fluxheim.spdx.json
    • 5d78efb5dc3563d7a73da23cc56d9237789f709551a1b6b55834d98c91070548 fluxheim.cyclonedx.json
  • Reproducible build:
    • bf50cd4d2f9135244fbf4f5e9b9a837c21b70e66d443cd123b8cc043f73a03da x86_64
    • 8df58b9c7a4deec52977e15d118c932e8f9cd4c31b1ad7896bf33240e134c215 aarch64
    • 2e17993d0f01e72e99426219113921e2c1b0865769fdab8d8bc8c9e9fe6e86a5 macos
  • Full Build Container digests:
    • Wolfi: ghcr.io/valkyoth/fluxheim@sha256:144a7ae25fbc32a42e875d078e3a51d7ea93ccbab5f526251efe4ddf8c429ed5
    • Alpine: ghcr.io/valkyoth/fluxheim@sha256:49d423fab13195a19253b2063649e66f41565c0cb4d8fde299b7205eca1ef688
    • SUSE Micro: ghcr.io/valkyoth/fluxheim@sha256:1c3873456d856d1611061ee925b146e0fbbfce219015d54040b05528f5ce4cdd
    • Debian: ghcr.io/valkyoth/fluxheim@sha256:6200a1a1d5b8ba96f019e1cf33cb57c46a019a96cace4055bc5a42de6eec07e2
  • Cache Build Container digests:
    • Wolfi: ghcr.io/valkyoth/fluxheim@sha256:86915cf5d21117d7a01fc84317eefcdde8986e58a2a94541a704beab5d138b4c
    • Alpine: ghcr.io/valkyoth/fluxheim@sha256:15a5e5c1a44d0c758b1df77ec009af201af53de26fa834dec5a75778a9034efe
    • SUSE Micro: ghcr.io/valkyoth/fluxheim@sha256:22afc27807ebcf746c5541e187002f04849696040a4b235262d70365315a1ccc
    • Debian: ghcr.io/valkyoth/fluxheim@sha256:6fe1adf0ab7d76de4634e824eb25af6d0e8e54462124eb223c8842c41019bce4
  • Proxy Build Container digests:
    • Wolfi: ghcr.io/valkyoth/fluxheim@sha256:c7853e89617ff9274a7c9639f2fbc000a40c6893754ae613f27ecb25c162acbd
    • Alpine: ghcr.io/valkyoth/fluxheim@sha256:1bc9d5758507f38526cddea6064f51a8bc15c2d5b0ba834bb6e6dd7cd07b3a6c
    • SUSE Micro: ghcr.io/valkyoth/fluxheim@sha256:7986cb25cacd4feabb977939e2037164a77614144f02f0d986fc8c784c8f441b
    • Debian: ghcr.io/valkyoth/fluxheim@sha256:3c4f4a027e470da75c2b0275360c5fafd39aef9feeee5bdb1a44912e8a6025d0
  • PHP Build Container digests:
    • Wolfi: ghcr.io/valkyoth/fluxheim@sha256:186b6d495d7891aadebcc75c839c92aa10c4bb5e77eec6d3e52258fa2fe96084
    • Alpine: ghcr.io/valkyoth/fluxheim@sha256:e1649b71eef48d7719075c3d5da1d729a0cffa1d3adf2b788bb401c7d9cd6fef
    • SUSE Micro: ghcr.io/valkyoth/fluxheim@sha256:a5e692ea02b029d7c4351f750cacc2dce2e6b41336d26d34f34c043cf3e3c2b9
    • Debian: ghcr.io/valkyoth/fluxheim@sha256:2fd828ecf1bb8b812408db8fcb7df5a5be3090405cac0d07b017588aaae4ed09
  • Load Balancer Build Container digests:
    • Wolfi: ghcr.io/valkyoth/fluxheim@sha256:bcfb40acdaef8204e4293ab34a3170045a4e620b654bc7449941f2e33796e58c
    • Alpine: ghcr.io/valkyoth/fluxheim@sha256:021ba07e5bb8c46640e2bb9a32176f76c7538dc2e6c17166d6b7dfd22e0f745e
    • SUSE Micro: ghcr.io/valkyoth/fluxheim@sha256:0eaf9fe96a956691c7c049062070344790f606269cd249254b2bab8e09b5ecfe
    • Debian: ghcr.io/valkyoth/fluxheim@sha256:226000b521ebbc15878be9853a2cf94806e5cfa21b2d21027be044d8f0bc2fdb
  • Tag signature:
    • Good "git" signature for 1921261+eldryoth@users.noreply.github.com with ED25519 key SHA256:EoLRQ5k4J5pYz3UMFmkrV798gYFNkToGS2xEPvebqB4