diff --git a/.release-please-manifest.json b/.release-please-manifest.json index 9bb13cfd..22e2379f 100644 --- a/.release-please-manifest.json +++ b/.release-please-manifest.json @@ -1,3 +1,3 @@ { - ".": "0.5.18" + ".": "0.5.19" } diff --git a/CHANGELOG.md b/CHANGELOG.md index b60ef07c..c9fe616a 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,5 +1,57 @@ # Changelog +## [0.5.19](https://github.com/icoretech/codex-pooler/compare/codex-pooler-v0.5.18...codex-pooler-v0.5.19) (2026-08-07) + + +### Features + +* **admin:** expose metrics authentication state ([7ada8d5](https://github.com/icoretech/codex-pooler/commit/7ada8d5dacbd0fcec76e72ed09ed7957f2b76598)) +* **admin:** show runtime firewall session state ([de3bd07](https://github.com/icoretech/codex-pooler/commit/de3bd0767862a1708c0378b1e4dec934b967a5f3)) +* **ingress:** add explicit forwarded client policy ([1652d3a](https://github.com/icoretech/codex-pooler/commit/1652d3a43a44f4fef3893f8d25c9998446cba34a)) +* **ingress:** expose firewall denial telemetry ([6f3db40](https://github.com/icoretech/codex-pooler/commit/6f3db400b80cd3566a022e42f6339eae8731b689)) +* **mcp:** support the 2026-07-28 protocol ([cacc0cd](https://github.com/icoretech/codex-pooler/commit/cacc0cdcd05a3ffbd2d3cf0a41d0115d0c4441c1)) +* **security:** retain bounded ingress peer provenance ([0b482bf](https://github.com/icoretech/codex-pooler/commit/0b482bfb25e2c8582278b921dc261347ff9c011f)) + + +### Bug Fixes + +* **admin:** clarify runtime firewall route scope ([0e6962f](https://github.com/icoretech/codex-pooler/commit/0e6962fe39c10c30c0f410647e2007ae18694e84)) +* **admin:** complete firewall session state coverage ([fe7ea2d](https://github.com/icoretech/codex-pooler/commit/fe7ea2d42ef85b684b4ad43fe019ba4794577a76)) +* **deps:** update dependency @astrojs/starlight to v0.41.7 ([#265](https://github.com/icoretech/codex-pooler/issues/265)) ([c1bea14](https://github.com/icoretech/codex-pooler/commit/c1bea14bad647f33ae79888cefa0287221696a6e)) +* **dev:** resolve impeccable live helper from its handshake file ([439acec](https://github.com/icoretech/codex-pooler/commit/439acec3b8eb3a3dc6da1acd6fc4e3843ec92d81)) +* **dev:** scope impeccable live constants to the dev-features guard ([ef8553f](https://github.com/icoretech/codex-pooler/commit/ef8553f3cf63d7e86838b702a304a4b8da624bfa)) +* **docs:** enforce ingress boundary contract ([3bbea63](https://github.com/icoretech/codex-pooler/commit/3bbea635003ba6d860cb7073c203051f9d810d2f)) +* **gateway:** cancel abandoned websocket work across topologies ([4cf4b18](https://github.com/icoretech/codex-pooler/commit/4cf4b182a083234535d42db69686ad0159809e96)) +* **gateway:** close abandoned upstream websocket requests ([4988adb](https://github.com/icoretech/codex-pooler/commit/4988adbb95a6186e04274cc076628edcaf03f82d)) +* **gateway:** enforce image generation policy in dispatch ([51ad37a](https://github.com/icoretech/codex-pooler/commit/51ad37a165e890575f4da2f2e544ec2bc58545e9)) +* **gateway:** stagger websocket owner lease renewals ([c9bd890](https://github.com/icoretech/codex-pooler/commit/c9bd890884ad5375af35248d66fb86d26dc75d08)) +* **ingress:** add canonical runtime path classification ([0d29c8d](https://github.com/icoretech/codex-pooler/commit/0d29c8dbf9494528510f142b962651f3cef99b17)) +* **ingress:** bound forwarded client resolution ([28d9391](https://github.com/icoretech/codex-pooler/commit/28d9391242c9025eb42bf869359494154cf60e1b)) +* **ingress:** enforce configured forwarded client source ([0b68691](https://github.com/icoretech/codex-pooler/commit/0b6869149a6618609fa5a2215a2f53ac768519ab)) +* **ingress:** enforce decoded runtime path boundaries ([2487c2a](https://github.com/icoretech/codex-pooler/commit/2487c2af0a870f08d0d172a307d4fb5f9bcc2c07)) +* **ingress:** enforce strict canonical IP rules ([f68ae51](https://github.com/icoretech/codex-pooler/commit/f68ae5196de49d94b1c8c36d28571571a44f994f)) +* **ingress:** fail closed on unavailable settings ([16ce194](https://github.com/icoretech/codex-pooler/commit/16ce1947ffa7e7fe475d04803e419b05223dca7b)) +* **ingress:** reuse forwarded client resolution ([b3d3311](https://github.com/icoretech/codex-pooler/commit/b3d33110c7d3a9eeeadb729500b3c9f8625b9d1c)) +* **mcp:** align unsupported protocol error messages ([bb67216](https://github.com/icoretech/codex-pooler/commit/bb67216fd2e78f84213f2bcc0c8ed6b7edd44f4b)) +* **monitoring:** scope firewall denial dashboard ([3b8dbc7](https://github.com/icoretech/codex-pooler/commit/3b8dbc73ec09ef640a63155dfd3753968851ff04)) +* **openai:** adapt explicit prompt cache controls ([7ae45e7](https://github.com/icoretech/codex-pooler/commit/7ae45e7c86ea4479c684f49abc6b652acf844832)) +* **responses:** accept custom tools inside namespaces ([245e280](https://github.com/icoretech/codex-pooler/commit/245e28031b545edbb8e06574f93a8ee5c518dbd8)) +* **responses:** clarify namespace tool validation error ([77cb8fd](https://github.com/icoretech/codex-pooler/commit/77cb8fd99af5c6487b87ee418b4eb59e4d782334)) +* **security:** bind local browser trust to the immediate peer ([e9580ba](https://github.com/icoretech/codex-pooler/commit/e9580ba1ecbf9c2fff5d8c94061b114fe4781555)) +* **security:** enforce ingress firewall for pruned runtime routes ([67fbefd](https://github.com/icoretech/codex-pooler/commit/67fbefd4f937850d91094891201508b4d6a5a038)) +* **security:** reject malformed immediate peer addresses ([2da890e](https://github.com/icoretech/codex-pooler/commit/2da890e9b935d5d3f67a37fb6ef28793500b8d53)) +* **security:** validate preserved peer addresses with OTP ([e0f3c02](https://github.com/icoretech/codex-pooler/commit/e0f3c025998356a00d26178aca15943088b9e47e)) +* **settings:** make instance cache self-healing ([d16895d](https://github.com/icoretech/codex-pooler/commit/d16895de1fb4b70072f5dd4bac474c9bbd5e18f1)) +* **settings:** remove unsupported database setting env aliases ([2ba2287](https://github.com/icoretech/codex-pooler/commit/2ba22874800583212b6287dfe879ff5b9705ef26)) +* **test:** isolate database state and expected logs ([64c5f42](https://github.com/icoretech/codex-pooler/commit/64c5f425426e2ea68291b83653e78cb1805eb56f)) +* **v1:** centralize pool compatibility authorization ([baed23c](https://github.com/icoretech/codex-pooler/commit/baed23c84e3f0677582060ca756419432bceb7d2)) +* **websocket:** revoke sockets after firewall updates ([578b90a](https://github.com/icoretech/codex-pooler/commit/578b90a40b04d626195623b49e4e466f6e930162)) + + +### Performance Improvements + +* **gateway:** compile test settings overrides out of production ([10fba6e](https://github.com/icoretech/codex-pooler/commit/10fba6e1274bdd10196cf47e027278db150e3202)) + ## [0.5.18](https://github.com/icoretech/codex-pooler/compare/codex-pooler-v0.5.17...codex-pooler-v0.5.18) (2026-08-05) diff --git a/docs-site/src/content/docs/deployment/docker-compose.mdx b/docs-site/src/content/docs/deployment/docker-compose.mdx index 05df581f..f95b2c48 100644 --- a/docs-site/src/content/docs/deployment/docker-compose.mdx +++ b/docs-site/src/content/docs/deployment/docker-compose.mdx @@ -30,7 +30,7 @@ For every self-hosted install, choose a tagged stable release before creating ```bash export CODEX_POOLER_IMAGE=ghcr.io/icoretech/codex-pooler -export CODEX_POOLER_IMAGE_TAG=0.5.18 +export CODEX_POOLER_IMAGE_TAG=0.5.19 scripts/self-host/generate-env.sh ``` diff --git a/mix.exs b/mix.exs index ffb416d9..45e24037 100644 --- a/mix.exs +++ b/mix.exs @@ -5,7 +5,7 @@ defmodule CodexPooler.MixProject do [ app: :codex_pooler, # x-release-please-start-version - version: "0.5.18", + version: "0.5.19", # x-release-please-end elixir: "~> 1.16", elixirc_paths: elixirc_paths(Mix.env()),