Tags give the ability to mark specific points in history as being important
-
v0.1.15
protectedRelease: v0.1.15b8fdb24d · ·Release devnw/zig/grpc-zig v0.1.15 Includes final dependency tags and packaged test/build inputs. All local release correctness, feature-mode and package checks passed. Hosted release pipelines remain required for final sign-off. Related SONNY-4829, SONNY-4848.
-
v0.1.13
protectedRelease: v0.1.132625f5f5 · ·v0.1.13 — fips v0.1.2, h2spec conformance - fips v0.1.2 (2026-10-11 release chain: converge the devnw Zig graph on fips v0.1.2 and thread-pool v0.2.8), zlib 1.3.2. - Server enforces HTTP/2 framing, stream-state and request rules (h2spec generic http2 138/138); ClientMux serialises stream opening (RFC 7540 5.1.1). - Interop fixes (Echo path routing, handshake no longer waits for a connection WINDOW_UPDATE); CI creates GitLab Releases with the job token.
-
v0.1.10
protected00589ebc · ·v0.1.10: SONNY-1568 per-connection reader threads Releases the per-connection reader-thread series: - server reads frames on a per-connection thread so flow-control credit is processed while a response is being written (9a70efa) - credit waiters are released when the peer vanishes; teardown is TLS-safe (be74a46) - peer-gone tests are park-proof and client writers are released when the reader exits (89f3fba) build.zig.zon .version bumped 0.1.8 -> 0.1.10 (00589eb) to satisfy the check-version-tag gate; .version was left stale when v0.1.9 was tagged.
-
v0.1.8
protectedb7263dbf · ·Release v0.1.8 Iterative appsec + codepros audit-fix pass (3 review iterations to convergence). Security: - GAP-0018: fix connection-thread stack overflow (pre-auth remote DoS / segfault); configurable GRPC_ZIG_CONN_STACK_SIZE, 8 MiB default, CI-gated - NEW-1: cap inbound gRPC message assembly (max_recv_message_bytes, 4 MiB) - NEW-2: peer SETTINGS can no longer raise the inbound frame cap - I2/I5/I6: HPACK Huffman fail-closed, CONTINUATION reassembly bounds, gRPC prefix validation - NEW-A: bound stream-id-skip loop (client liveness DoS) - CM-UAF: close ClientMux stack-slot use-after-free race - O1: loopback-default bind; A5: remove hardcoded benchmark secret Correctness: readMessage trailer-only hang, single-call stream-id reuse, example handler paths, client-mux OOM deadlock, dead-code removal. Docs: truthful security posture, SECURITY.md, CONTRIBUTING.md. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>