v1.0.8-nightly.20261019090210.39226987058.1

Changes in 1.0.8

Changed

• Route Dependabot metadata approval through the trusted default branch while preserving the existing author and review policy.
• Prepare the metadata automation maintenance release.

Upgrade

Use the existing upgrade procedure and preserve configuration and data. No data migration is required.

Security

This release preserves the existing security and release-validation policy. Publication does not deploy the service or establish physical-device acceptance.

Build provenance

nightly candidate with a version fixed before compilation.

Source: 1e32daa09ddb128fe505a45fd6f329654bd2ffb5

Validation: https://github.com/victron-venus/dbus-esphome-grid-sensor/actions/runs/39226987058

See release-manifest.json for package hashes and version input evidence.

v1.0.8

Changes in 1.0.8

Changed

• Route Dependabot metadata approval through the trusted default branch while preserving the existing author and review policy.
• Prepare the metadata automation maintenance release.

Upgrade

Use the existing upgrade procedure and preserve configuration and data. No data migration is required.

Security

This release preserves the existing security and release-validation policy. Publication does not deploy the service or establish physical-device acceptance.

Build provenance

Promoted unchanged from v1.0.8-rc.1.

Source: c9ccf50a906ba4c288093e6bb1c30a655aef9882

Validation: https://github.com/victron-venus/dbus-esphome-grid-sensor/actions/runs/39145141018

Promotion: https://github.com/victron-venus/dbus-esphome-grid-sensor/actions/runs/39147840628

Assets and release-manifest.json are byte-for-byte copies of the verified release candidate.

v1.0.8-rc.1

Changes in 1.0.8

Changed

• Route Dependabot metadata approval through the trusted default branch while preserving the existing author and review policy.
• Prepare the metadata automation maintenance release.

Upgrade

Use the existing upgrade procedure and preserve configuration and data. No data migration is required.

Security

This release preserves the existing security and release-validation policy. Publication does not deploy the service or establish physical-device acceptance.

Build provenance

rc candidate with a version fixed before compilation.

Source: c9ccf50a906ba4c288093e6bb1c30a655aef9882

Validation: https://github.com/victron-venus/dbus-esphome-grid-sensor/actions/runs/39145141018

See release-manifest.json for package hashes and version input evidence.

v1.0.8-beta.1

Changes in 1.0.8

Changed

• Route Dependabot metadata approval through the trusted default branch while preserving the existing author and review policy.
• Prepare the metadata automation maintenance release.

Upgrade

Use the existing upgrade procedure and preserve configuration and data. No data migration is required.

Security

This release preserves the existing security and release-validation policy. Publication does not deploy the service or establish physical-device acceptance.

Build provenance

beta candidate with a version fixed before compilation.

Source: c9ccf50a906ba4c288093e6bb1c30a655aef9882

Validation: https://github.com/victron-venus/dbus-esphome-grid-sensor/actions/runs/39140388692

See release-manifest.json for package hashes and version input evidence.

v1.0.7

Changes in 1.0.7

Changed

• Modernize PEP 639 license metadata and Ruff configuration while retaining lint coverage.
• Analyze and execute maintained ESPHome firmware lambdas with native memory instrumentation.
• Document firmware and broker trust boundaries, project governance and source-bound RC fuzzing evidence.

Upgrade

Use the existing installation procedure and preserve local configuration. The
runtime configuration format is unchanged. Package builders should use the
committed locked toolchain; live sensor, firmware and D-Bus acceptance remain
separate from these software checks.

Security

Native tests extend verification of the maintained firmware lambdas. No new
application vulnerability fix or hardware acceptance is claimed. Existing TLS,
OTA and broker trust requirements remain in force.

Build provenance

Promoted unchanged from v1.0.7-rc.1.

Source: 20a21d3ada1decb2346ee34a341ebc831664ad1f

Validation: https://github.com/victron-venus/dbus-esphome-grid-sensor/actions/runs/39032028466

Promotion: https://github.com/victron-venus/dbus-esphome-grid-sensor/actions/runs/39036039506

Assets and release-manifest.json are byte-for-byte copies of the verified release candidate.

v1.0.7-rc.1

Changes in 1.0.7

Changed

• Modernize PEP 639 license metadata and Ruff configuration while retaining lint coverage.
• Analyze and execute maintained ESPHome firmware lambdas with native memory instrumentation.
• Document firmware and broker trust boundaries, project governance and source-bound RC fuzzing evidence.

Upgrade

Use the existing installation procedure and preserve local configuration. The
runtime configuration format is unchanged. Package builders should use the
committed locked toolchain; live sensor, firmware and D-Bus acceptance remain
separate from these software checks.

Security

Native tests extend verification of the maintained firmware lambdas. No new
application vulnerability fix or hardware acceptance is claimed. Existing TLS,
OTA and broker trust requirements remain in force.

Build provenance

rc candidate with a version fixed before compilation.

Source: 20a21d3ada1decb2346ee34a341ebc831664ad1f

Validation: https://github.com/victron-venus/dbus-esphome-grid-sensor/actions/runs/39032028466

See release-manifest.json for package hashes and version input evidence.

v1.0.7-beta.1

Changes in 1.0.7

Changed

• Modernize PEP 639 license metadata and Ruff configuration while retaining lint coverage.
• Analyze and execute maintained ESPHome firmware lambdas with native memory instrumentation.
• Document firmware and broker trust boundaries, project governance and source-bound RC fuzzing evidence.

Upgrade

Use the existing installation procedure and preserve local configuration. The
runtime configuration format is unchanged. Package builders should use the
committed locked toolchain; live sensor, firmware and D-Bus acceptance remain
separate from these software checks.

Security

Native tests extend verification of the maintained firmware lambdas. No new
application vulnerability fix or hardware acceptance is claimed. Existing TLS,
OTA and broker trust requirements remain in force.

Build provenance

beta candidate with a version fixed before compilation.

Source: 20a21d3ada1decb2346ee34a341ebc831664ad1f

Validation: https://github.com/victron-venus/dbus-esphome-grid-sensor/actions/runs/39031471285

See release-manifest.json for package hashes and version input evidence.

v1.0.6

Changes in 1.0.6

Changed

• Validate each public release candidate with bounded, network-isolated fuzz campaigns against its exact source revision.
• Require positive engine execution counts, instrumented production code and validated seed corpora; retain source-bound reports and diagnostic evidence.
• Run deterministic seed and configuration checks in ordinary CI without starting mutation campaigns on betas.

Upgrade

Use the existing installation procedure, preserve local configuration and keep the previous accepted package for rollback. This maintenance release updates release validation and does not change the application configuration format. Deployment and applicable device or integration acceptance remain separate from publication.

Security

RC publication rejects absent or invalid source-bound fuzz reports. The fuzz runner bounds corpus paths, file types and size. No application vulnerability or new target-device acceptance is claimed by these tooling changes.

Acceptance scope

The exact downloaded v1.0.6-rc.1 archive passed 64 tests; its sdist and wheel each passed 48 tests (160 total, zero skips). Imports and file hashes were checked against the accepted source. The RC completed 8,847,442 fuzz executions, and the downloaded archive passed an isolated Atheris seed replay with production instrumentation.

On a Cerbo running Venus OS v3.75 / ARMv7 / Python 3.12.13, the same archive passed compilation, native dependency imports and pure payload/update/disconnect checks, then read the existing system state through one GetValue call. No service was replaced or registered and no actuator command was sent. This does not claim an in-place upgrade or a live MQTT sensor-stream test.

Use the documented installation/update procedure, preserve local configuration and retain the previous accepted package for rollback. No configuration or data migration is introduced by this validation update.

Acceptance details: #69 (comment)

Build provenance

Promoted unchanged from v1.0.6-rc.1.

Source: 4b368d6524b26d8fa2349479f6a23cf7bed3f571

Validation: https://github.com/victron-venus/dbus-esphome-grid-sensor/actions/runs/38847804786

Promotion: https://github.com/victron-venus/dbus-esphome-grid-sensor/actions/runs/38851168482

Assets and release-manifest.json are byte-for-byte copies of the verified release candidate.

v1.0.6-rc.1

Changes in 1.0.6

Changed

• Validate each public release candidate with bounded, network-isolated fuzz campaigns against its exact source revision.
• Require positive engine execution counts, instrumented production code and validated seed corpora; retain source-bound reports and diagnostic evidence.
• Run deterministic seed and configuration checks in ordinary CI without starting mutation campaigns on betas.

Upgrade

Use the existing installation procedure, preserve local configuration and keep the previous accepted package for rollback. This maintenance release updates release validation and does not change the application configuration format. Deployment and applicable device or integration acceptance remain separate from publication.

Security

RC publication rejects absent or invalid source-bound fuzz reports. The fuzz runner bounds corpus paths, file types and size. No application vulnerability or new target-device acceptance is claimed by these tooling changes.

Build provenance

rc candidate with a version fixed before compilation.

Source: 4b368d6524b26d8fa2349479f6a23cf7bed3f571

Validation: https://github.com/victron-venus/dbus-esphome-grid-sensor/actions/runs/38847804786

See release-manifest.json for package hashes and version input evidence.

v1.0.6-nightly.20261017075342.39015293163.1

Changes in 1.0.6

Changed

• Modernize PEP 639 license metadata and Ruff configuration without dropping lint rules.

• Analyze and execute all maintained firmware lambdas with native memory instrumentation.

• Document governance, continuity limits and firmware/broker trust boundaries.

• Validate each public release candidate with bounded, network-isolated fuzz campaigns against its exact source revision.

• Require positive engine execution counts, instrumented production code and validated seed corpora; retain source-bound reports and diagnostic evidence.

• Run deterministic seed and configuration checks in ordinary CI without starting mutation campaigns on betas.

Upgrade

Use the existing installation procedure, preserve local configuration and keep the previous accepted package for rollback. This maintenance release updates release validation and does not change the application configuration format. Deployment and applicable device or integration acceptance remain separate from publication.

Security

RC publication rejects absent or invalid source-bound fuzz reports. The fuzz runner bounds corpus paths, file types and size. No application vulnerability or new target-device acceptance is claimed by these tooling changes.

Build provenance

nightly candidate with a version fixed before compilation.

Source: a2fe12170bc71db33afb14ba4f4808618093c0cf

Validation: https://github.com/victron-venus/dbus-esphome-grid-sensor/actions/runs/39015293163

See release-manifest.json for package hashes and version input evidence.