Tags give the ability to mark specific points in history as being important
-
v0.15.0
protectedRelease: v0.15.0b02e0f43 · ·v0.15.0 Minor release (0.14.5 -> 0.15.0). Highlights since v0.14.5: - Default-on OTEL observability, W3C trace-context + correlation propagation, structured logging with lumberjack rotation, and a generated health subsystem. - Polyglot client trace/correlation propagation (Python/Rust/Zig/TS) + MCP transport gating. - Security hardening: redaction of secret fields + bounded recursion, N-P3-3 sensitive-path guards, control-plane route-collision validation, per-handshake TLS rotation. - Generated TS client wire-key fixes (empty-schema camelCase, path-param request-type fields, schema-aware WebSocket send) across Go/Python/Rust/TS. - apic Claude Code plugin (/apic:mcp, observability-health-contract skill, config reference).
-
v0.14.0
protectedRelease: v0.14.0d09b1f3f · ·v0.14.0 — generated Python, Rust, and Zig client SDKs Adds config-driven generation of polyglot client SDKs (Python stdlib-only async, Rust async tokio/reqwest, Zig std-only sync) as peers of the Go and TypeScript clients, covering REST/WebSocket/GraphQL/MCP and every auth mode, with per-language HMAC interop keystones proven byte-identical to securex, native unit tests, real-socket e2e, and fuzzing. Existing Go/TS client output is unchanged. See docs/POLYGLOT_CLIENTS.md.
-
v0.13.0
protectedRelease: v0.13.0b8390ede · ·v0.13.0 Highlights since v0.12.5: - feat: react-ui service explorer — dependency-free generated React explorer (gen/client/react-ui/) with tabbed REST/WS/GraphQL/MCP panels, live Try-it panels, multi-language code samples (curl/Go/Python/TypeScript), and CSS-variable theming. Enabled via client.react_ui: true. - feat: live GraphQL subscriptions wired through graphQLSubscribe<Field>() (graphql-transport-ws over WebSocket) with bounded frame log. - security: appsec review hardening (rounds 1-3) — token placeholders in code samples, OIDC issuer handling, webhook badge, auth gating, dead-code cleanup. - fix: repair CI-only test fallbacks (tsc-absent path) and harden a timing-sensitive htpx rate-limit test. See docs/REACT_UI_EXPLORER.md for mount instructions and limitations.
-
v0.12.5
protectedRelease: v0.12.5833e4bed · ·v0.12.5 — resync gen/+testgen hashx mirror with the verify-time KDF DoS fix gen/ and testgen/ vendor a mirror of pkg/securex/hashx; the cost-ceiling changes in v0.12.3 left those copies stale, failing the generate:drift full-regen diff. Regenerated via 'make generate'; the drift gate is now clean.
-
v0.12.4
protectedRelease: v0.12.474db2719 · ·v0.12.4 — resync repo-root self-host mirror (fixes generate:drift) Regenerated the repo-root self-host mirror (api/, gql/, mcp/, types/) from configs/full.json so it carries the generated HashSecrets(ctx) methods + handler hashing calls it was missing. Purely additive; the generate:drift CI gate now passes (8 files in sync).
-
v0.12.3
protectedRelease: v0.12.35bd61618 · ·v0.12.3 — fuzz-found hashx verify-time DoS fix + fuzz crasher artifacts fix: bound verify-time KDF cost parameters (pbkdf2 i, scrypt N*r*p, bcrypt cost, argon2 m*t) so an attacker-influenced encoded hash cannot pin the CPU for seconds (CWE-400). Found by FuzzVerifyEncoded; crashers committed as regression seeds. ci: both fuzz jobs now upload fuzz-findings/ as on_failure artifacts for repro.