From cfe04acd66a725ef5e6de253dbc262403b926e1a Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" <41898282+github-actions[bot]@users.noreply.github.com> Date: Sat, 8 Aug 2026 19:18:15 +0000 Subject: [PATCH] chore(main): release codex-pooler 0.5.19 --- .release-please-manifest.json | 2 +- CHANGELOG.md | 72 +++++++++++++++++++ .../docs/deployment/docker-compose.mdx | 2 +- mix.exs | 2 +- 4 files changed, 75 insertions(+), 3 deletions(-) diff --git a/.release-please-manifest.json b/.release-please-manifest.json index 9bb13cfd..22e2379f 100644 --- a/.release-please-manifest.json +++ b/.release-please-manifest.json @@ -1,3 +1,3 @@ { - ".": "0.5.18" + ".": "0.5.19" } diff --git a/CHANGELOG.md b/CHANGELOG.md index b60ef07c..49c587a7 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,5 +1,77 @@ # Changelog +## [0.5.19](https://github.com/icoretech/codex-pooler/compare/codex-pooler-v0.5.18...codex-pooler-v0.5.19) (2026-08-08) + + +### Features + +* **admin:** expose metrics authentication state ([7ada8d5](https://github.com/icoretech/codex-pooler/commit/7ada8d5dacbd0fcec76e72ed09ed7957f2b76598)) +* **admin:** show runtime firewall session state ([de3bd07](https://github.com/icoretech/codex-pooler/commit/de3bd0767862a1708c0378b1e4dec934b967a5f3)) +* **ingress:** add explicit forwarded client policy ([1652d3a](https://github.com/icoretech/codex-pooler/commit/1652d3a43a44f4fef3893f8d25c9998446cba34a)) +* **ingress:** expose firewall denial telemetry ([6f3db40](https://github.com/icoretech/codex-pooler/commit/6f3db400b80cd3566a022e42f6339eae8731b689)) +* **mcp:** support the 2026-07-28 protocol ([cacc0cd](https://github.com/icoretech/codex-pooler/commit/cacc0cdcd05a3ffbd2d3cf0a41d0115d0c4441c1)) +* **observability:** expose reset confirmation phases ([5645e43](https://github.com/icoretech/codex-pooler/commit/5645e432f2e6c2cbe922c6512b2fd0a2e18a1132)) +* **security:** retain bounded ingress peer provenance ([0b482bf](https://github.com/icoretech/codex-pooler/commit/0b482bfb25e2c8582278b921dc261347ff9c011f)) + + +### Bug Fixes + +* **admin:** clarify runtime firewall route scope ([0e6962f](https://github.com/icoretech/codex-pooler/commit/0e6962fe39c10c30c0f410647e2007ae18694e84)) +* **admin:** complete firewall session state coverage ([fe7ea2d](https://github.com/icoretech/codex-pooler/commit/fe7ea2d42ef85b684b4ad43fe019ba4794577a76)) +* **admin:** correct quota and saved reset meter states ([c263d90](https://github.com/icoretech/codex-pooler/commit/c263d90629ba406cc4b2462ab6ba9e3c3f9ac616)) +* **admin:** describe bridge ring rendezvous ordering ([c8dbe44](https://github.com/icoretech/codex-pooler/commit/c8dbe4411b5799a2df9eff47daf85b6a8ddf67a5)) +* **admin:** explain applied reset quota confirmation ([d549738](https://github.com/icoretech/codex-pooler/commit/d549738aa712a86e0560718785de39d71d18b616)) +* **admin:** keep provider quota authoritative across reset precision ([c6085c2](https://github.com/icoretech/codex-pooler/commit/c6085c264fe74ae3ca5bee28063860164fefe12f)) +* **admin:** render unknown quota meters as static ([da65a05](https://github.com/icoretech/codex-pooler/commit/da65a050461a7ad1bd5c196a588ae1a68b64be3e)) +* **deps:** update dependency @astrojs/starlight to v0.41.7 ([#265](https://github.com/icoretech/codex-pooler/issues/265)) ([c1bea14](https://github.com/icoretech/codex-pooler/commit/c1bea14bad647f33ae79888cefa0287221696a6e)) +* **dev:** preserve lifecycle command PATH ([32d8002](https://github.com/icoretech/codex-pooler/commit/32d8002849787204bd75e07059c7680a49173b6c)) +* **dev:** recover verified legacy server state ([aea8f49](https://github.com/icoretech/codex-pooler/commit/aea8f499cdce9271c37397d110d676daaf313bf8)) +* **dev:** resolve impeccable live helper from its handshake file ([439acec](https://github.com/icoretech/codex-pooler/commit/439acec3b8eb3a3dc6da1acd6fc4e3843ec92d81)) +* **dev:** scope impeccable live constants to the dev-features guard ([ef8553f](https://github.com/icoretech/codex-pooler/commit/ef8553f3cf63d7e86838b702a304a4b8da624bfa)) +* **docs:** enforce ingress boundary contract ([3bbea63](https://github.com/icoretech/codex-pooler/commit/3bbea635003ba6d860cb7073c203051f9d810d2f)) +* **gateway:** cancel abandoned websocket work across topologies ([4cf4b18](https://github.com/icoretech/codex-pooler/commit/4cf4b182a083234535d42db69686ad0159809e96)) +* **gateway:** close abandoned upstream websocket requests ([4988adb](https://github.com/icoretech/codex-pooler/commit/4988adbb95a6186e04274cc076628edcaf03f82d)) +* **gateway:** enforce image generation policy in dispatch ([51ad37a](https://github.com/icoretech/codex-pooler/commit/51ad37a165e890575f4da2f2e544ec2bc58545e9)) +* **gateway:** stagger websocket owner lease renewals ([c9bd890](https://github.com/icoretech/codex-pooler/commit/c9bd890884ad5375af35248d66fb86d26dc75d08)) +* **ingress:** add canonical runtime path classification ([0d29c8d](https://github.com/icoretech/codex-pooler/commit/0d29c8dbf9494528510f142b962651f3cef99b17)) +* **ingress:** bound forwarded client resolution ([28d9391](https://github.com/icoretech/codex-pooler/commit/28d9391242c9025eb42bf869359494154cf60e1b)) +* **ingress:** enforce configured forwarded client source ([0b68691](https://github.com/icoretech/codex-pooler/commit/0b6869149a6618609fa5a2215a2f53ac768519ab)) +* **ingress:** enforce decoded runtime path boundaries ([2487c2a](https://github.com/icoretech/codex-pooler/commit/2487c2af0a870f08d0d172a307d4fb5f9bcc2c07)) +* **ingress:** enforce strict canonical IP rules ([f68ae51](https://github.com/icoretech/codex-pooler/commit/f68ae5196de49d94b1c8c36d28571571a44f994f)) +* **ingress:** fail closed on unavailable settings ([16ce194](https://github.com/icoretech/codex-pooler/commit/16ce1947ffa7e7fe475d04803e419b05223dca7b)) +* **ingress:** reuse forwarded client resolution ([b3d3311](https://github.com/icoretech/codex-pooler/commit/b3d33110c7d3a9eeeadb729500b3c9f8625b9d1c)) +* **mcp:** align unsupported protocol error messages ([bb67216](https://github.com/icoretech/codex-pooler/commit/bb67216fd2e78f84213f2bcc0c8ed6b7edd44f4b)) +* **mcp:** suppress non-remainder quota balances ([2e00690](https://github.com/icoretech/codex-pooler/commit/2e006908ab9d16695f34520fd2430f0a238652b1)) +* **monitoring:** scope firewall denial dashboard ([3b8dbc7](https://github.com/icoretech/codex-pooler/commit/3b8dbc73ec09ef640a63155dfd3753968851ff04)) +* **openai:** adapt explicit prompt cache controls ([7ae45e7](https://github.com/icoretech/codex-pooler/commit/7ae45e7c86ea4479c684f49abc6b652acf844832)) +* **quota:** derive freshness at read time ([79eb794](https://github.com/icoretech/codex-pooler/commit/79eb7944c63d64d06bd0b2d8ddd4f0bd9f84187d)) +* **quota:** normalize freshness evidence aliases ([799c3da](https://github.com/icoretech/codex-pooler/commit/799c3da91c7107f39884412e4c9e6b096f3a131a)) +* **quota:** preserve explicit account reset provenance ([d54383f](https://github.com/icoretech/codex-pooler/commit/d54383f50bea666591e15cab8aa4ccb42beb330c)) +* **responses:** accept custom tools inside namespaces ([245e280](https://github.com/icoretech/codex-pooler/commit/245e28031b545edbb8e06574f93a8ee5c518dbd8)) +* **responses:** clarify namespace tool validation error ([77cb8fd](https://github.com/icoretech/codex-pooler/commit/77cb8fd99af5c6487b87ee418b4eb59e4d782334)) +* **routing:** bind circuit completions to admitted probes ([61006b1](https://github.com/icoretech/codex-pooler/commit/61006b189f99d21cd0f4071acb131e3af0c39898)) +* **routing:** record attempt-owned circuit recovery outcomes ([791d844](https://github.com/icoretech/codex-pooler/commit/791d8446478b10d1b3faab7fc6b6db8019e9d922)) +* **routing:** score reported-percent exhaustion as empty ([844b737](https://github.com/icoretech/codex-pooler/commit/844b737cadc0b98b4325a769d9641d2ca8beefd3)) +* **saved-resets:** close post-consume convergence handoff ([1bc9f83](https://github.com/icoretech/codex-pooler/commit/1bc9f83f696ff3cfdc7202a8a37135f3a4697f16)) +* **saved-resets:** defer burns for recoverable circuit siblings ([21bf4b3](https://github.com/icoretech/codex-pooler/commit/21bf4b33bc77c22f2d00f759d44ef3b04b464374)) +* **security:** bind local browser trust to the immediate peer ([e9580ba](https://github.com/icoretech/codex-pooler/commit/e9580ba1ecbf9c2fff5d8c94061b114fe4781555)) +* **security:** enforce ingress firewall for pruned runtime routes ([67fbefd](https://github.com/icoretech/codex-pooler/commit/67fbefd4f937850d91094891201508b4d6a5a038)) +* **security:** reject malformed immediate peer addresses ([2da890e](https://github.com/icoretech/codex-pooler/commit/2da890e9b935d5d3f67a37fb6ef28793500b8d53)) +* **security:** validate preserved peer addresses with OTP ([e0f3c02](https://github.com/icoretech/codex-pooler/commit/e0f3c025998356a00d26178aca15943088b9e47e)) +* **settings:** make instance cache self-healing ([d16895d](https://github.com/icoretech/codex-pooler/commit/d16895de1fb4b70072f5dd4bac474c9bbd5e18f1)) +* **settings:** remove unsupported database setting env aliases ([2ba2287](https://github.com/icoretech/codex-pooler/commit/2ba22874800583212b6287dfe879ff5b9705ef26)) +* **test:** isolate database state and expected logs ([64c5f42](https://github.com/icoretech/codex-pooler/commit/64c5f425426e2ea68291b83653e78cb1805eb56f)) +* **upstreams:** parse Cloudflare cookie dates without httpd ([e69a78e](https://github.com/icoretech/codex-pooler/commit/e69a78e04e441f723ded8424470232b0529e3208)) +* **usage:** omit synthetic credits metadata ([d8c1579](https://github.com/icoretech/codex-pooler/commit/d8c15799626634a5bd02197f160be63680715073)) +* **usage:** require all emitted quota windows to allow ([7552c20](https://github.com/icoretech/codex-pooler/commit/7552c20e60851756726599ee4f37f137095e24b7)) +* **v1:** centralize pool compatibility authorization ([baed23c](https://github.com/icoretech/codex-pooler/commit/baed23c84e3f0677582060ca756419432bceb7d2)) +* **websocket:** revoke sockets after firewall updates ([578b90a](https://github.com/icoretech/codex-pooler/commit/578b90a40b04d626195623b49e4e466f6e930162)) + + +### Performance Improvements + +* **gateway:** compile test settings overrides out of production ([10fba6e](https://github.com/icoretech/codex-pooler/commit/10fba6e1274bdd10196cf47e027278db150e3202)) + ## [0.5.18](https://github.com/icoretech/codex-pooler/compare/codex-pooler-v0.5.17...codex-pooler-v0.5.18) (2026-08-05) diff --git a/docs-site/src/content/docs/deployment/docker-compose.mdx b/docs-site/src/content/docs/deployment/docker-compose.mdx index 05df581f..f95b2c48 100644 --- a/docs-site/src/content/docs/deployment/docker-compose.mdx +++ b/docs-site/src/content/docs/deployment/docker-compose.mdx @@ -30,7 +30,7 @@ For every self-hosted install, choose a tagged stable release before creating ```bash export CODEX_POOLER_IMAGE=ghcr.io/icoretech/codex-pooler -export CODEX_POOLER_IMAGE_TAG=0.5.18 +export CODEX_POOLER_IMAGE_TAG=0.5.19 scripts/self-host/generate-env.sh ``` diff --git a/mix.exs b/mix.exs index fbf9145f..0b0f6522 100644 --- a/mix.exs +++ b/mix.exs @@ -5,7 +5,7 @@ defmodule CodexPooler.MixProject do [ app: :codex_pooler, # x-release-please-start-version - version: "0.5.18", + version: "0.5.19", # x-release-please-end elixir: "~> 1.20", elixirc_paths: elixirc_paths(Mix.env()),