Releases: xhyperium/kernel
Release list
v1.1.1
What's Changed
- Align v1.1.1 release gate with versioned evidence by @ZoneCNH in #25
- chore: refresh benchmark baseline for release-preflight evidence by @ZoneCNH in #26
- fix: upgrade Go 1.23→1.25.0 by @ZoneCNH in #32
- fix: upgrade golangci-lint v2.12.2 by @ZoneCNH in #33
- fix(contracts): 同步 golangci-lint 版本 test 期望至 v2.12.2 by @ZoneCNH in #34
- ci(kernel): runner 迁移 ci-kernel + 补 PR 门禁 + CICD 文档 by @ZoneCNH in #35
- ci(kernel): 修复 Go tools cache 路径展开 by @ZoneCNH in #36
- ci: kernel CI 治理优化 87→98+ by @ZoneCNH in #37
- docs: CI/CD 配置与评分文档 by @ZoneCNH in #38
- ci: 补充 gitleaks 密钥扫描门禁 by @ZoneCNH in #39
- docs(kernel): 评分文档同步 gitleaks 集成 90→100 by @ZoneCNH in #40
- fix: align workflow runner labels with sre/module.md by @ZoneCNH in #43
- ci: 改用 GitHub-hosted runner (ubuntu-latest) 替代 self-hosted by @ZoneCNH in #46
- chore(deps): bump github/codeql-action/upload-sarif from 4.36.2 to 4.37.0 by @dependabot[bot] in #45
- fix(ci): restrict evidence generation to tag pushes by @ZoneCNH in #47
- fix(ci): bump gosec setup Go 1.23→1.25 by @ZoneCNH in #48
- fix(ci): set git identity for release tag on hosted runners by @ZoneCNH in #49
Full Changelog: v1.1.0...v1.1.1
kernel v1.1.0 — bench-check 门禁修复 + SRE CI/CD 路由
v1.1.0 发布说明 (2026-06-18)
v1.1.0 是 v1.0.0 之后的维护性发布,Public API 不变(1.x 向后兼容)。
Changes
- 修复 bench-check 发布门禁:Makefile 的
BENCH_REGRESSION_THRESHOLD此前从未导出到scripts/ci/bench-check.sh,脚本始终用默认 10% 阈值,在共享 self-hosted runner 噪声下连锁阻断make ci→release-check→release-final-check。 - bench-check 噪声鲁棒性:
count=5取中位数;对 sub-5ns/op 基准引入绝对差 <2ns 噪声下限([NOISE-SKIP]),避免亚纳秒基准 run-to-run 误报,仍能捕捉 2x+ 真实回归。 - CI/CD SRE runner pool 路由:
ci.yml/security.yml→sre/foundation-l0池,release.yml→sre/deploy池。 - 重生
contracts/bench/baseline.txt(count=5)。
Verification
make ci 全绿(test / vet / lint / coverage 100% / race / bench-check / boundary / security / contracts / api / docs / artifact / dependency / standard-drift / workflow-runner / workflow-pin / examples / stdlib-only)。VERSION=v1.1.0 make release-preflight 通过(含 strict toolchain + release-evidence-check)。
Attachments
release/manifest/v1.1.0.json+.sha256— 发布证据 manifest(commitc1e746c)。release/manifest/latest.json+.sha256— latest 指针对齐 v1.1.0。
kernel v1.0.0 — 12 子包轻量工具集初始稳定发布
kernel v1.0.0 (2026-06-12)
12 子包初始稳定发布
| 子包 | 用途 |
|---|---|
lifecycx |
组件有序启动/逆序停止,失败自动回滚 |
errx |
结构化错误:ErrorKind/Severity/IsKind/AsError/ShouldRetry |
healthx |
健康检查状态与聚合(healthy/degraded/unhealthy) |
obsx |
可观测抽象接口:Logger/Metrics/Tracer/Span + Noop + SecretString |
retryx |
重试策略配置原语:指数退避 Delay/Jitter/Validate |
shutdownx |
优雅停机:LIFO Hook 管理 + OS 信号处理 |
syncx |
并发控制:SemaphoreLimiter + WorkerGroup |
timex |
时钟抽象:RealClock/FixedClock/FakeClock |
validx |
前置条件校验:Precondition/Invariant/RequireNonEmpty |
versionx |
版本信息:BuildInfo + Compatibility |
contextx |
类型安全上下文:Key[T]/WithValue/Value/DeadlineRemaining |
contracttest |
契约测试辅助:AssertJSONFields/AssertErrorKind/AssertHealthStatus |
关键指标
| 指标 | 值 |
|---|---|
| 依赖 | stdlib-only,零外部依赖 |
| 覆盖率 | 100% 核心库(12/12 子包) |
| 测试 | 全部通过,-race 清零 |
| CI 门禁 | 15 项全部通过 |
| Go 版本 | 1.23(兼容 1.26) |
性能基准
| Benchmark | 结果 | 目标 |
|---|---|---|
| NewError | ~0.4 ns | < 100ns ✅ |
| IsKind (5层) | ~35 ns | < 1μs ✅ |
| Delay | ~3 ns | < 100ns ✅ |
| Aggregate (10) | ~530 ns | < 10μs ✅ |
安装
go get github.com/ZoneCNH/kernel@v1.0.0按需引入单个子包:
import (
"github.com/ZoneCNH/kernel/errx"
"github.com/ZoneCNH/kernel/timex"
)v1.0.0 发布前 PR
| PR | 内容 |
|---|---|
| #14 | v1.0.0 CHANGELOG + Benchmark 函数 |
| #15 | CI benchmark 回归门禁 |
| #16 | .editorconfig + CODING-STANDARDS |
| #17 | benchmark lint fix |
| #18 | release contract tests fix |
| #19 | benchmark baseline update |
| #20 | release evidence |
| #21 | bench threshold → 25 |
🤖 Generated with Claude Code
v0.9.0
Release v0.9.0 Evidence
Manifest: release/manifest/v0.9.0.json
Scope
Minor release for P1 kernel governance, release evidence hardening, and current GitHub Actions pin updates.
Summary
- Completes P1 kernel package and admission evidence for public API contracts, stdlib-only boundaries, and package boundary documents.
- Raises example regression coverage and narrows release coverage accounting to library packages.
- Hardens release preflight and evidence checks so the target version, current HEAD, manifest, and workspace state must agree.
- Updates GitHub Actions pins for current runner compatibility.
- Hosted CI is intentionally bypassed for this release because latest GitHub Actions runs fail before job steps/logs; local release gate remains required.
Gates
| Gate | Command | Evidence |
|---|---|---|
| Release preflight | VERSION=v0.9.0 GOWORK=off make release-preflight |
Required before tag creation and used as CI bypass evidence. |
| Release final check | VERSION=v0.9.0 GOWORK=off make release-final-check |
Included by release preflight. |
| Release evidence | VERSION=v0.9.0 GOWORK=off make release-evidence-check |
Confirms manifest, checksums, dependency evidence, and release metadata. |
| API compatibility | VERSION=v0.9.0 GOWORK=off make api-diff-check |
Included by CI/release gate. |
| Workflow pins | GOWORK=off make workflow-pin-check |
Confirms workflow/action pins are current and immutable where required. |
| Race detector | GOWORK=off go test -race ./... |
Included by CI/release gate. |
| Hosted CI | GitHub Actions | Bypassed by release owner instruction; latest hosted runs fail before job steps/logs. |
Controlled Scope
- No non-stdlib runtime dependency introduced.
- No force-push or history rewrite required.
- Tag and release must point at a commit that has passed local release preflight.
v0.8.0
v0.8.0 说明
- 语义硬化:
errx.IsKind与retryx.ShouldRetry现在遍历 wrapped/joined error tree,迁移时请确认依赖“只检查首个错误分支”的调用方预期。 - 安全格式化:
obsx.SecretString增强%#v/debug 格式脱敏,fmt.GoStringer/fmt.Formatter输出不再泄露原始 secret。 - 使用约束:
contextx.Key零值误用会 fail fast;迁移代码应统一通过contextx.NewKey创建键。 - 发布门禁:
ci纳入coverage-threshold与workflow-pin-check,workflow action 引用要求不可变 40 字符 SHA pin;coverage gate 已兼容 GitHub runner 的/bin/sh。
验证:
VERSION=v0.8.0 make ciVERSION=v0.8.0 make evidenceVERSION=v0.8.0 make release-evidence-check- Remote GitHub Actions on
fcfd6c7:kernel-cisuccess,kernel-securitysuccess
Full Changelog: v0.7.3...v0.8.0
v0.7.3
v0.7.1 — 文档版本对齐补丁
v0.7.1 说明
- README 版本引用对齐至 v0.7.0。
- 所有发布门禁通过(14 项 gate 全绿)。
验证: go test -race ./... 27 包 PASS · go vet 零告警 · make evidence-check PASS
v0.7.0 — 结构分析修复闭环 (9.7/10)
v0.7.0 说明
- 深度结构分析修复闭环(31 项),评分从 8.3 提升至 9.7/10。
- 新增
gosec静态安全分析集成(Makefile + security.yml + versions.env)。 - 新增
check_boundary_allowlist.txt边界白名单机制,check_boundary.sh支持读取白名单。 - 新增 Go 原生 fuzzing 测试:
FuzzErrorRoundtrip(errx)、FuzzKeyValueRoundtrip(contextx)。 - 代码质量:syncx
errors.Join聚合、lifecycx 幂等 Stop、healthx 时钟注入、contextx*bytesentinel 隔离。 - 测试补充:testutil 失败路径、validx Severity 断言、errx code-without-op、healthx JSON metadata、obsx Reveal 空值。
- 文档:并发语义注释、API 契约文档、分析报告更新至 9.7/10。
验证: go test -race ./... 27 包 PASS · go vet 零告警 · fuzz 测试 PASS · 所有发布门禁通过
v0.4.0
v0.4.0 发布证据 Release Evidence
发布标识
- Goal:
GOAL-20260601-002 - Release:
v0.4.0 - Module:
github.com/ZoneCNH/kernel - Manifest:
release/manifest/v0.4.0.json
必需门禁
| Gate | Command | Expected |
|---|---|---|
| Release final check | VERSION=v0.4.0 make release-final-check |
PASS |
| Release evidence | VERSION=v0.4.0 make release-evidence-check |
PASS |
| Dependency automation config | make dependency-check |
PASS; hosted Dependabot/Renovate execution remains unverified in docs/evidence/dependency-automation.md |
| Standard drift local gate | make standard-drift-check |
PASS |
| Standard drift optional live gate | STANDARD_DRIFT_LIVE=1 ./scripts/check_standard_drift.sh |
EXPECTED FAIL when live main remains ahead of pinned baseline |
工件清单
发布证据包含 docs/context/CTX-GOAL-20260601-002.md、docs/spec/SPEC-l0-kernel-v1.0.md、docs/design/DESIGN-l0-kernel-v1.0.md、ADR 003-010、评审报告、复盘报告、contracts/examples/golden 示例、依赖快照、标准同步报告和生成的 release/manifest/v0.4.0.json。
范围说明
v0.4.0 本地发布门禁验证依赖自动化配置、stdlib-only 模块图、固定的 xlib-standard 已审基线和发布 manifest 自校验。2026-06-02 复核 upstream live main 为 a7c8511b7b400d0f9effed5d50ac46e5faf185c2,高于 pinned baseline 041a62f21428111a4b46235a7910edbdf4e07d61,且 watched paths 变更覆盖 .agent/、docs/standard/、Makefile、contracts/contracts_test.go 和 scripts/check_docs.sh,因此 baseline 不做未审更新;live drift 风险通过 .standard-sync.yaml 的 live_review 与可选 STANDARD_DRIFT_LIVE=1 门禁显式暴露。Dependabot/Renovate 托管服务执行与 xgo 外部消费者验证仍属于外部证据。
v0.2.0
v0.2.0 发布证据 Release Evidence
发布标识
- Goal:
GOAL-20260601-002 - Release:
v0.2.0 - Module:
github.com/ZoneCNH/kernel - Manifest:
release/manifest/v0.2.0.json
必需门禁
| Gate | Command | Expected |
|---|---|---|
| Tests | GOWORK=off go test ./... |
PASS |
| Race | GOWORK=off go test -race ./... |
PASS |
| Vet | GOWORK=off go vet ./... |
PASS |
| Docs | make docs-check |
PASS |
| Boundary | make boundary-check |
PASS |
| Evidence | make evidence-check |
PASS |
| Release preflight | make release-preflight VERSION=v0.2.0 |
PASS |
工件清单
发布证据包含 docs/context/CTX-GOAL-20260601-002.md、docs/spec/SPEC-l0-kernel-v1.0.md、docs/design/DESIGN-l0-kernel-v1.0.md、ADR 003-010、评审报告、复盘报告、contracts/examples/golden 示例和生成的 release/manifest/v0.2.0.json。
仓库身份说明
v0.2.0 发布证据必须使用 go.mod 中的 github.com/ZoneCNH/kernel 模块路径。manifest 检查、契约测试和发布说明共同防止证据回退到旧仓库名或旧模块路径。