chore(main): release codex-pooler 0.5.19

.release-please-manifest.json

@@ -1,3 +1,3 @@
 {
-  ".": "0.5.18"
+  ".": "0.5.19"
 }

CHANGELOG.md

@@ -1,5 +1,57 @@
 # Changelog
 
+## [0.5.19](https://github.com/icoretech/codex-pooler/compare/codex-pooler-v0.5.18...codex-pooler-v0.5.19) (2026-08-07)
+
+
+### Features
+
+* **admin:** expose metrics authentication state ([7ada8d5](https://github.com/icoretech/codex-pooler/commit/7ada8d5dacbd0fcec76e72ed09ed7957f2b76598))
+* **admin:** show runtime firewall session state ([de3bd07](https://github.com/icoretech/codex-pooler/commit/de3bd0767862a1708c0378b1e4dec934b967a5f3))
+* **ingress:** add explicit forwarded client policy ([1652d3a](https://github.com/icoretech/codex-pooler/commit/1652d3a43a44f4fef3893f8d25c9998446cba34a))
+* **ingress:** expose firewall denial telemetry ([6f3db40](https://github.com/icoretech/codex-pooler/commit/6f3db400b80cd3566a022e42f6339eae8731b689))
+* **mcp:** support the 2026-07-28 protocol ([cacc0cd](https://github.com/icoretech/codex-pooler/commit/cacc0cdcd05a3ffbd2d3cf0a41d0115d0c4441c1))
+* **security:** retain bounded ingress peer provenance ([0b482bf](https://github.com/icoretech/codex-pooler/commit/0b482bfb25e2c8582278b921dc261347ff9c011f))
+
+
+### Bug Fixes
+
+* **admin:** clarify runtime firewall route scope ([0e6962f](https://github.com/icoretech/codex-pooler/commit/0e6962fe39c10c30c0f410647e2007ae18694e84))
+* **admin:** complete firewall session state coverage ([fe7ea2d](https://github.com/icoretech/codex-pooler/commit/fe7ea2d42ef85b684b4ad43fe019ba4794577a76))
+* **deps:** update dependency @astrojs/starlight to v0.41.7 ([#265](https://github.com/icoretech/codex-pooler/issues/265)) ([c1bea14](https://github.com/icoretech/codex-pooler/commit/c1bea14bad647f33ae79888cefa0287221696a6e))
+* **dev:** resolve impeccable live helper from its handshake file ([439acec](https://github.com/icoretech/codex-pooler/commit/439acec3b8eb3a3dc6da1acd6fc4e3843ec92d81))
+* **dev:** scope impeccable live constants to the dev-features guard ([ef8553f](https://github.com/icoretech/codex-pooler/commit/ef8553f3cf63d7e86838b702a304a4b8da624bfa))
+* **docs:** enforce ingress boundary contract ([3bbea63](https://github.com/icoretech/codex-pooler/commit/3bbea635003ba6d860cb7073c203051f9d810d2f))
+* **gateway:** cancel abandoned websocket work across topologies ([4cf4b18](https://github.com/icoretech/codex-pooler/commit/4cf4b182a083234535d42db69686ad0159809e96))
+* **gateway:** close abandoned upstream websocket requests ([4988adb](https://github.com/icoretech/codex-pooler/commit/4988adbb95a6186e04274cc076628edcaf03f82d))
+* **gateway:** enforce image generation policy in dispatch ([51ad37a](https://github.com/icoretech/codex-pooler/commit/51ad37a165e890575f4da2f2e544ec2bc58545e9))
+* **gateway:** stagger websocket owner lease renewals ([c9bd890](https://github.com/icoretech/codex-pooler/commit/c9bd890884ad5375af35248d66fb86d26dc75d08))
+* **ingress:** add canonical runtime path classification ([0d29c8d](https://github.com/icoretech/codex-pooler/commit/0d29c8dbf9494528510f142b962651f3cef99b17))
+* **ingress:** bound forwarded client resolution ([28d9391](https://github.com/icoretech/codex-pooler/commit/28d9391242c9025eb42bf869359494154cf60e1b))
+* **ingress:** enforce configured forwarded client source ([0b68691](https://github.com/icoretech/codex-pooler/commit/0b6869149a6618609fa5a2215a2f53ac768519ab))
+* **ingress:** enforce decoded runtime path boundaries ([2487c2a](https://github.com/icoretech/codex-pooler/commit/2487c2af0a870f08d0d172a307d4fb5f9bcc2c07))
+* **ingress:** enforce strict canonical IP rules ([f68ae51](https://github.com/icoretech/codex-pooler/commit/f68ae5196de49d94b1c8c36d28571571a44f994f))
+* **ingress:** fail closed on unavailable settings ([16ce194](https://github.com/icoretech/codex-pooler/commit/16ce1947ffa7e7fe475d04803e419b05223dca7b))
+* **ingress:** reuse forwarded client resolution ([b3d3311](https://github.com/icoretech/codex-pooler/commit/b3d33110c7d3a9eeeadb729500b3c9f8625b9d1c))
+* **mcp:** align unsupported protocol error messages ([bb67216](https://github.com/icoretech/codex-pooler/commit/bb67216fd2e78f84213f2bcc0c8ed6b7edd44f4b))
+* **monitoring:** scope firewall denial dashboard ([3b8dbc7](https://github.com/icoretech/codex-pooler/commit/3b8dbc73ec09ef640a63155dfd3753968851ff04))
+* **openai:** adapt explicit prompt cache controls ([7ae45e7](https://github.com/icoretech/codex-pooler/commit/7ae45e7c86ea4479c684f49abc6b652acf844832))
+* **responses:** accept custom tools inside namespaces ([245e280](https://github.com/icoretech/codex-pooler/commit/245e28031b545edbb8e06574f93a8ee5c518dbd8))
+* **responses:** clarify namespace tool validation error ([77cb8fd](https://github.com/icoretech/codex-pooler/commit/77cb8fd99af5c6487b87ee418b4eb59e4d782334))
+* **security:** bind local browser trust to the immediate peer ([e9580ba](https://github.com/icoretech/codex-pooler/commit/e9580ba1ecbf9c2fff5d8c94061b114fe4781555))
+* **security:** enforce ingress firewall for pruned runtime routes ([67fbefd](https://github.com/icoretech/codex-pooler/commit/67fbefd4f937850d91094891201508b4d6a5a038))
+* **security:** reject malformed immediate peer addresses ([2da890e](https://github.com/icoretech/codex-pooler/commit/2da890e9b935d5d3f67a37fb6ef28793500b8d53))
+* **security:** validate preserved peer addresses with OTP ([e0f3c02](https://github.com/icoretech/codex-pooler/commit/e0f3c025998356a00d26178aca15943088b9e47e))
+* **settings:** make instance cache self-healing ([d16895d](https://github.com/icoretech/codex-pooler/commit/d16895de1fb4b70072f5dd4bac474c9bbd5e18f1))
+* **settings:** remove unsupported database setting env aliases ([2ba2287](https://github.com/icoretech/codex-pooler/commit/2ba22874800583212b6287dfe879ff5b9705ef26))
+* **test:** isolate database state and expected logs ([64c5f42](https://github.com/icoretech/codex-pooler/commit/64c5f425426e2ea68291b83653e78cb1805eb56f))
+* **v1:** centralize pool compatibility authorization ([baed23c](https://github.com/icoretech/codex-pooler/commit/baed23c84e3f0677582060ca756419432bceb7d2))
+* **websocket:** revoke sockets after firewall updates ([578b90a](https://github.com/icoretech/codex-pooler/commit/578b90a40b04d626195623b49e4e466f6e930162))
+
+
+### Performance Improvements
+
+* **gateway:** compile test settings overrides out of production ([10fba6e](https://github.com/icoretech/codex-pooler/commit/10fba6e1274bdd10196cf47e027278db150e3202))
+
 ## [0.5.18](https://github.com/icoretech/codex-pooler/compare/codex-pooler-v0.5.17...codex-pooler-v0.5.18) (2026-08-05)
 
 

docs-site/src/content/docs/deployment/docker-compose.mdx

@@ -30,7 +30,7 @@ For every self-hosted install, choose a tagged stable release before creating
 
 ```bash
 export CODEX_POOLER_IMAGE=ghcr.io/icoretech/codex-pooler
-export CODEX_POOLER_IMAGE_TAG=0.5.18
+export CODEX_POOLER_IMAGE_TAG=0.5.19
 scripts/self-host/generate-env.sh
 ```
 

mix.exs

@@ -5,7 +5,7 @@ defmodule CodexPooler.MixProject do
     [
       app: :codex_pooler,
       # x-release-please-start-version
-      version: "0.5.18",
+      version: "0.5.19",
       # x-release-please-end
       elixir: "~> 1.16",
       elixirc_paths: elixirc_paths(Mix.env()),