v6.1.1

Changelog

• 3d1f547 ci: reference actions by version tag instead of commit sha (#168)
• 752e135 fix: build with go 1.27.3 to distrust compromised emudhra cas (#167)

v6.1.0

Changelog

• c216940 feat(cache): share the response cache budget across protocols (#165)

v6.0.0

Changelog

• 3d2663b feat!: bound olric l2 memory and make rolling updates restart-free (#164)
• 1cad03d fix: survive cluster joins under load and bound backend waits (#162)

v5.1.0

Changelog

• 1976788 feat: expose the restart policy and count reload outcomes (#161)
• 9062471 fix(deps): bump opentelemetry to 1.45.0 for GO-2026-6505 (#160)
• 0c1ada4 chore(deps): bump golang (#158)

v5.0.0

Changelog

• 43f1fc9 chore: move module path to github.com/voluzi/cosmoguard/v5 (#157)
• 14eba63 fix(cache): replay the wildcard CORS answer when cosmoguard CORS is disabled
• 6022fac fix(cache): share JSON-RPC responses from wildcard-CORS nodes across origins
• 391806a fix(cache): share responses from wildcard-CORS nodes across origins
• 2d3a009 fix(ws): return the upstream's own error when it rejects a subscription (#156)
• 56a36c7 test(compat): live node-vs-cosmoguard compatibility checker (#154)
• b5d7960 ci(fuzz): run the fuzz job on Go 1.27 to avoid the spurious fuzztime deadline failure (#155)
• 641bd76 ci(docker): publish an edge image from main and move latest only for the newest stable tag (#153)
• a1b27b3 fix(grpc): count the proxy's own deadline as a breaker failure before its timer fires (#152)
• 81c393f fix(ws): subscription filters, first-event delivery, reload revocation and upstream robustness (#151)
• 43d501b chore(release): publish the chart from the app release tag (#150)
• 6b6b705 fix(http): harden upstream proxying, CORS on local errors, cache keys and metrics timeouts (#149)
• f1ddf4c chore: harden the Helm chart, gate chart publishing and tighten CI (#148)
• 1613c33 fix(grpc): align message limits with Cosmos nodes, keep upstream metadata and harden the breaker (#145)
• 5f7ea22 docs(ws): describe immediate migration after an upstream socket closes
• 4f5f7d4 fix(jsonrpc): omit params from outcome logs (#144)
• acdc9be fix(jsonrpc): handle invalid batch members individually (#143)
• 6e9b7d2 fix(http): preserve incomplete response integrity (#142)
• 517a4f4 fix(config): reject invalid policy settings (#141)
• d83db9c fix(ws): enforce process-local subscription limits (#140)
• 512569e fix: bound client-controlled strings in dashboard observability buffers (#139)
• 969357c fix(ws): bound subscriber notification queues (#138)
• f015f65 fix: reload projected configmap updates (#137)
• 03e21f2 fix(helm): require stable cluster encryption keys (#136)
• bb73720 fix: normalize json-rpc rule parameter matching (#135)
• 2def180 fix: bound request metric method cardinality (#134)
• 82bd9d5 fix(cache): defer header snapshot until final response (#133)
• cacb41c fix(jsonrpc): reject ambiguous envelope keys (#132)
• 149f5b7 fix(cache): bound upstream response capture (#130)
• 87862ef fix(cluster): authenticate dashboard peer fan-out (#131)
• d740e41 fix(cache): isolate http cache targets (#129)
• 9d18899 fix: release websocket request ids (#125)
• b79d4bf fix(cache): isolate http responses by cosmos height (#121)
• 9b4349f fix: reject ambiguous json-rpc batch ids (#120)
• 5b19daf fix(cache): honor upstream vary during cache admission (#119)

v4.0.3

Changelog

• 3c4b0fb fix(proxy): resolve client ip through trusted hops (#30)

v4.0.2

Changelog

• c19a7ec fix(proxy): preserve public host for direct nodes

v4.0.0

Changelog

• 3a85513 build: pin Go to patched 1.25.12 (clears govulncheck CVEs, keeps staticcheck on 1.25)
• 2ab0961 build: align Go to 1.26.5 across go.mod and Dockerfile (patched stdlib, clears govulncheck)
• c5c0b3d ci: fix test.yml push trigger to run on all branches (tags-ignore scoped to tags)
• 9938bca chore(helm): bump chart version to 1.0.0
• fae2532 build: pin builder Go to 1.25 to match go.mod and CI
• b86ad94 ci: gate release workflows on tests, add govulncheck, keep :latest on stable only
• fcd1871 fix(helm): preStop drain delay to eliminate 502s on pod termination
• 02c5cf8 fix(health): readiness gate for scaled-up pods + default to cluster/statefulSet
• 490ae0e feat: cluster env overrides + upstream_requests_total metric (#24)
• 3c8585d feat(cache): request coalescing (single-flight) + stale-while-revalidate (#22)
• f26d8f2 fix(dashboard): gate cross-pod observability replication behind opt-in flag (#21)
• 2a1ad3d fix(cache): cache Vary: Origin responses when cosmoguard owns CORS
• e0d4a23 feat(helm): auto-generate cluster encryption key when none is set (#20)
• d50a96e ci(goreleaser): base stable-release changelog on previous stable tag (#19)
• e65e829 feat: bound response cache memory to prevent OOMs (#18)
• ae90e7b Harden v4: fix crashes, auth bypasses, cache-key correctness, and cluster security (#17)
• bad1a48 chore(deps): bump the github-actions group across 1 directory with 4 updates (#16)
• f2bcc31 chore(deps): bump the go-dependencies group across 1 directory with 10 updates (#14)
• eccf6f3 docs: add install-script method to README; ci(goreleaser): mark pre-release tags via prerelease auto
• aa829ef ci(goreleaser): pin Go toolchain from go.mod so release builds satisfy the 1.25 requirement
• b183d45 v4.0.0: distributed cluster (olric) + live dashboard, auth, multi-upstream, gRPC cache, TLS edge (#2)
• ac56ab5 Merge pull request #1 from voluzi/chore/add-dependabot
• f5ad9f6 fix: remove spurious npm entry from dependabot config
• e2e7908 chore: add Dependabot configuration

v3.0.0

Changelog

• 13668c9 feat: add more unit tests
• 4ca14a1 refactor: code quality improvements and minor fixes
• 3b81ed3 refactor: rename to github.com/voluzi/cosmoguard

v2.8.2

Changelog

• e25d2ab chore(ci): workflows improvement and parallel builds