v1.15.3

Changed

• Require github.com/zatrano/canvas v1.0.1. Nested @foreach with @if in the body, struct-field loops, and map iteration on the AOT path were empty after the first outer iteration on v1.0.0.

go get github.com/zatrano/packages@v1.15.3

v1.15.2

Changed

• Require github.com/zatrano/rawhttp v1.0.0. The code is the same as rawhttp v0.2.10.
• Require github.com/zatrano/canvas v1.0.0. That tag is the same code as canvas v0.2.1.
• Retract v1.15.1. That tag requires canvas v0.2.0. The checksum database already recorded its zip, so the tag stays. Use v1.15.2.

v1.15.1

Require github.com/zatrano/framework/v3 v3.1.2 and github.com/zatrano/rawhttp v0.2.5. The nested mongo and webauthn modules require the same framework tag. Tag v1.15.0 stays on framework v3.1.0 and rawhttp v0.2.4.

v1.15.0

Why now: Graceful WebSocket shutdown uses RegisterShutdownHook, which is in the published framework v3.1.0. v3.0.0 is retracted.

Added

• WebSocket connections close gracefully on shutdown.

Changed

• Minimum framework is github.com/zatrano/framework/v3 v3.1.0. That release requires rawhttp v0.2.4.

v1.14.0

Publish the V3 package line. v1.13.1 stays the last v2 tag.

Breaking: removed packages/database, packages/orm, packages/template, packages/factory, and packages/httpclient. SQL access is packages/db. Rendering goes through Canvas.

No replace directives and no go.work. Requires framework/v3 v3.0.0, canvas v0.2.0, and rawhttp v0.2.2.

Install: go get github.com/zatrano/packages@v1.14.0

v1.13.1

Pin framework v2.8.0 so ratelimit compiles kernel/middleware.Throttle.

v1.13.0 declared framework v2.0.28. go vet / staticcheck without the sibling replace failed: undefined AttemptLimiter / Throttle.

Install: go get github.com/zatrano/packages@v1.13.1

v1.13.0

Move Accept negotiation into the kernel so packages no longer duplicate HTTP protocol primitives.

Breaking

• Removed github.com/zatrano/packages/negotiate. Use kernel/http.Negotiate and kernel/middleware.Negotiate.

Changed

• ratelimit HTTP 429 middleware delegates to kernel/middleware.Throttle
• url.HasRoute looks up Router.Route instead of generating a URL

Install: go get github.com/zatrano/packages@v1.13.0

v1.12.0

Why now: Replace the string Event/Listener addon with typed Fact/Reaction so application side effects have one mechanism.

Breaking

• Replaced the events addon with facts (typed Fact/Reaction, Sync/Async). Removed Listen/Dispatch/string event names, make:event/make:listener/make:subscriber, and EventServiceProvider. Auth publishes typed Facts (UserRegistered, EmailVerified, .). ORM persistence observers live on orm.ObserveModel and no longer use an application dispatcher.

Install with go get github.com/zatrano/packages@v1.12.0.

v1.11.1

Why now: Publish the gofmt import-order fix so the tagged CI is green.

Fixed

• Import order in auth/token and enablement graph tests (gofmt).

Install with go get github.com/zatrano/packages@v1.11.1.

v1.11.0

Why now: Put authorization, API tokens, OAuth, and social under packages/auth so the auth domain has one import namespace. Enable names stay flat.

Breaking

• Removed top-level import paths github.com/zatrano/packages/{authorization,apitoken,oauth,social}. Import auth/authorization, auth/token (package apitoken), auth/oauth, and auth/social. Enable names are unchanged.

Changed

• Auth domain namespace: implementations live under auth/authorization, auth/token, auth/oauth, and auth/social. webauthn stays github.com/zatrano/packages/webauthn (nested Go module path cannot move). auth.From(app) is unchanged. session, hashing, and notification/otp stay outside auth.

Install with go get github.com/zatrano/packages@v1.11.0.