Skip to content

GoRun 0.4.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 19 Oct 09:21
· 179 commits to main since this release
v0.4.0
3776264
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Installation and documentation

  • Add a copy-and-paste macOS/Linux installer with Intel/ARM detection, HTTPS
    release downloads, SHA-256 verification, atomic user-local installation and
    direct startup without Go, sudo or manual PATH edits. Preserve existing
    installations on failed verification or when an old release lacks start.
  • Put the English quick start first and preserve a complete linked Arabic README.
    Include hands-on plugin and theme development tutorials.

Workspace and foundations

  • Add Simple CMS and Agents + Commerce workspace modes to tailor the admin UI.
  • Add portable, site-scoped Edge manager capability contracts and regression tests;
    this is an authorization foundation, not a hosted Edge runtime.
  • Clarify API key and webhook command help and scope errors.

Automatic backup and safe recovery

  • Add daily/weekly local scheduling choices, atomic policy saves, recorded verified
    success and storage usage, persistent failure/retention alerts and System Health checks.
  • Fix relative/URI-character SQLite paths in read-only backup inspection.
  • Verify local admin/CLI backups before success or pruning. Retention counts only
    freshly inspected pairs; corrupt/legacy/partial copies cannot displace good copies.
  • Add gorun backup-preview with a disposable sanitized restore, fresh secret,
    fixed public-content module allowlist, no workers/extensions/integrations,
    loopback/Host checks and read-only browser isolation. Source backups and live data
    remain unchanged; final restore/cutover still uses a separate new directory.

First-login setup and diagnostics

  • Require the auto-generated administrator to replace the temporary password and
    choose email, site name and site/dashboard language before admin or authenticated
    API/MCP access. Save all fields atomically, rotate the browser session and revoke
    old sessions, keys and magic links; completed/existing configured accounts skip it.
  • Add read-only gorun doctor [--json] with configuration, permissions, SQLite,
    migration drift, module activation, admin, theme and local port checks plus recovery
    advice; do not initialize a site, generate secrets or apply migrations.

Operations

  • Local load harness (tools/loadtest, make loadtest): boots a real SQLite
    gorun serve, seeds published posts, and reports p50/p95/p99 latency, error
    rate, throughput, and approximate server RSS/CPU under N concurrent readers
    (optional light write mix). Docs: docs/LOADTEST.md. Not
    wired into CI (avoids flaky host-noisy gates).

Local startup

  • Add gorun start with SQLite migrations, bundled default-theme provisioning,
    atomic first-admin creation and a 256-bit password printed once. Print local
    and private IPv4 LAN preview URLs and open the local admin in a browser.
  • Keep administration, accounts, API and writes on localhost; validate Host and
    peer addresses, ignore forwarded identity and discard LAN credentials.
    --local-only disables LAN; --no-browser supports headless use.
  • Advertise/open the IPv4 loopback address to match the listener and avoid
    localhost resolving to an unrelated IPv6 listener on the same port.
  • Add a durable admin login alias for newly bootstrapped first administrators,
    preserving email login and shared throttling. Existing users are untouched.

Container image

docker pull ghcr.io/zadstack/gorun:0.4.0

Multi-arch (linux/amd64, linux/arm64). Binary archives below include the themes; verify them with the SHA256SUMS file.

Assets 7
Loading