Release 26.06_3

Zentinel 26.06_3

Cargo version: 0.6.18

What's Changed

Added

• Merge duplicate top-level blocks across included KDL files. listeners,
  routes, upstreams, filters, and agents blocks now merge across
  included files instead of the last file silently winning; duplicate IDs are
  rejected at parse time. Singleton blocks (system/server/waf) keep
  last-wins semantics but now warn on duplicates. (#277)

Fixed

• Upstream circuit breaker now recovers from the open state. A breaker that
  tripped open could remain open instead of transitioning to half-open and
  recovering once the backend healed. (#282)
• Guard active request/connection counters against underflow. (#278)

Changed

• Bump tiktoken-rs 0.11 → 0.12. (#269)
• Bump the rust-minor group (4 updates). (#284)
• CI: bump actions/checkout 6 → 7. (#283)

Installation

From crates.io

cargo install zentinel-proxy

From binary

Download the appropriate archive for your platform and extract:

tar -xzf zentinel-26.06_3-linux-amd64.tar.gz
sudo mv zentinel /usr/local/bin/

Docker

docker pull ghcr.io/zentinelproxy/zentinel:26.06_3

Supply Chain Security

All release archives are signed with Sigstore cosign using keyless signing tied to GitHub Actions OIDC identity. SLSA v1.0 provenance is attached to this release.

Verify a binary

cosign verify-blob --bundle zentinel-26.06_3-linux-amd64.tar.gz.bundle \
  --certificate-identity-regexp "github.com/zentinelproxy/zentinel" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \
  zentinel-26.06_3-linux-amd64.tar.gz

Verify the container image

cosign verify ghcr.io/zentinelproxy/zentinel:26.06_3 \
  --certificate-identity-regexp "github.com/zentinelproxy/zentinel" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com"

Checksums

Verify downloads with the .sha256 files.

Software Bill of Materials

CycloneDX 1.5 and SPDX 2.3 SBOMs are attached as release assets.