[github-actions]

Changepacks

vespera@0.6.0 → 0.7.0 - crates/vespera/Cargo.toml

Minor

• Docs: AGENTS.md key-component line counts refreshed and rows added for cron.rs, bounded.rs, cancel.rs and ParkingDispatch. No API change.
• CI: the observational branch-coverage job no longer fails when the pinned nightly's llvm-cov lcov export crashes; the coverage summary still runs. No API change.
• C ABI: vespera_dispatch_async now honours the async in-flight cap (shared with JNI dispatchAsync, default 4096, over the cap → inline 503), and C hosts can set runtime, limit, deadline and async-cap knobs with the new vespera_configure_* functions (VESPERA_ERR_TOO_LATE once fixed) instead of environment variables.
• vespera::cron::shutdown_and_wait can no longer report idle while a cron run is starting: a tick that wakes up as shutdown begins now backs out instead of launching its job.
• #[vespera::cron] jobs declared in src/lib.rs / src/main.rs or inside an inline mod now resolve to their real module path (previously crate::lib::job failed to compile and inline module segments were dropped), and a job declared after vespera! in a file that already has registered jobs is no longer skipped.
• Test-only: AsyncDispatchTest no longer races the orTimeout delayer thread. No API change.
• The Java bridge now forwards at most 1024 principal authorities and attributes (the Rust wire limit) and logs a one-time warning instead of every request of such a user failing with 400.
• CI: Miri now also runs the C ABI (feature ffi) unit tests, covering its raw-pointer and buffer round-trips. No API change.
• Documented that the virtual-thread poll-first dispatch runs the handler's first poll outside any Tokio task, and how to opt out with -Dvespera.virtualThread.pollFirst=false.
• WebFlux apps built as GraalVM native images now get the Spring Security reflection hints (new VesperaSecurityRuntimeHints, imported by both autoconfigurations), and the anonymous-principal check compares class names, so Spring Security's anonymousUser is never forwarded as an authenticated principal even when the token class cannot be loaded.
• The WebFlux proxy answers a streamed response that panics or fails before anything was committed with its own 500 (Rust status and headers such as Set-Cookie discarded, DispatchEvent.panicked set), aborts the connection once bytes were sent, and forwards form bodies a WebFilter such as Spring Security's CsrfWebFilter already read via getFormData() instead of an empty body.
• Releases whose attestation step did not complete (such as 0.6.0) can now be given provenance and SBOM attestations afterwards; verify them with --signer-workflow dev-five-git/vespera/.github/workflows/reattest.yml.
• The crate SBOMs now carry a CycloneDX serialNumber (a reproducible UUID of name, version and commit), which actions/attest requires — the 0.6.0 release attested provenance but its SBOM attestations were rejected as "Unsupported SBOM format". scripts/sbom.sh checks the field on every PR. No API change.
• VesperaBridge.java is brought back under the 1000-line file cap by moving its argument checks into a new package-private BridgeInputChecks class, native-library loading into VesperaNativeLoader and the virtual-thread pooled DIRECT dispatch into DirectModeDispatcher. No API change.
• The tracing feature's vespera.dispatch span now records the matched route template as route (e.g. /users/{id}) instead of the raw request path, so secrets in path segments no longer reach logs.

vespera_core@0.6.0 → 0.7.0 - crates/vespera_core/Cargo.toml

Minor

• Docs: AGENTS.md key-component line counts refreshed and rows added for cron.rs, bounded.rs, cancel.rs and ParkingDispatch. No API change.
• CI: the observational branch-coverage job no longer fails when the pinned nightly's llvm-cov lcov export crashes; the coverage summary still runs. No API change.
• C ABI: vespera_dispatch_async now honours the async in-flight cap (shared with JNI dispatchAsync, default 4096, over the cap → inline 503), and C hosts can set runtime, limit, deadline and async-cap knobs with the new vespera_configure_* functions (VESPERA_ERR_TOO_LATE once fixed) instead of environment variables.
• vespera::cron::shutdown_and_wait can no longer report idle while a cron run is starting: a tick that wakes up as shutdown begins now backs out instead of launching its job.
• #[vespera::cron] jobs declared in src/lib.rs / src/main.rs or inside an inline mod now resolve to their real module path (previously crate::lib::job failed to compile and inline module segments were dropped), and a job declared after vespera! in a file that already has registered jobs is no longer skipped.
• Test-only: AsyncDispatchTest no longer races the orTimeout delayer thread. No API change.
• The Java bridge now forwards at most 1024 principal authorities and attributes (the Rust wire limit) and logs a one-time warning instead of every request of such a user failing with 400.
• CI: Miri now also runs the C ABI (feature ffi) unit tests, covering its raw-pointer and buffer round-trips. No API change.
• Documented that the virtual-thread poll-first dispatch runs the handler's first poll outside any Tokio task, and how to opt out with -Dvespera.virtualThread.pollFirst=false.
• WebFlux apps built as GraalVM native images now get the Spring Security reflection hints (new VesperaSecurityRuntimeHints, imported by both autoconfigurations), and the anonymous-principal check compares class names, so Spring Security's anonymousUser is never forwarded as an authenticated principal even when the token class cannot be loaded.
• The WebFlux proxy answers a streamed response that panics or fails before anything was committed with its own 500 (Rust status and headers such as Set-Cookie discarded, DispatchEvent.panicked set), aborts the connection once bytes were sent, and forwards form bodies a WebFilter such as Spring Security's CsrfWebFilter already read via getFormData() instead of an empty body.
• Releases whose attestation step did not complete (such as 0.6.0) can now be given provenance and SBOM attestations afterwards; verify them with --signer-workflow dev-five-git/vespera/.github/workflows/reattest.yml.
• The crate SBOMs now carry a CycloneDX serialNumber (a reproducible UUID of name, version and commit), which actions/attest requires — the 0.6.0 release attested provenance but its SBOM attestations were rejected as "Unsupported SBOM format". scripts/sbom.sh checks the field on every PR. No API change.
• VesperaBridge.java is brought back under the 1000-line file cap by moving its argument checks into a new package-private BridgeInputChecks class, native-library loading into VesperaNativeLoader and the virtual-thread pooled DIRECT dispatch into DirectModeDispatcher. No API change.
• The tracing feature's vespera.dispatch span now records the matched route template as route (e.g. /users/{id}) instead of the raw request path, so secrets in path segments no longer reach logs.

vespera_inprocess@0.6.0 → 0.7.0 - crates/vespera_inprocess/Cargo.toml

Minor

• Docs: AGENTS.md key-component line counts refreshed and rows added for cron.rs, bounded.rs, cancel.rs and ParkingDispatch. No API change.
• CI: the observational branch-coverage job no longer fails when the pinned nightly's llvm-cov lcov export crashes; the coverage summary still runs. No API change.
• C ABI: vespera_dispatch_async now honours the async in-flight cap (shared with JNI dispatchAsync, default 4096, over the cap → inline 503), and C hosts can set runtime, limit, deadline and async-cap knobs with the new vespera_configure_* functions (VESPERA_ERR_TOO_LATE once fixed) instead of environment variables.
• vespera::cron::shutdown_and_wait can no longer report idle while a cron run is starting: a tick that wakes up as shutdown begins now backs out instead of launching its job.
• #[vespera::cron] jobs declared in src/lib.rs / src/main.rs or inside an inline mod now resolve to their real module path (previously crate::lib::job failed to compile and inline module segments were dropped), and a job declared after vespera! in a file that already has registered jobs is no longer skipped.
• Test-only: AsyncDispatchTest no longer races the orTimeout delayer thread. No API change.
• The Java bridge now forwards at most 1024 principal authorities and attributes (the Rust wire limit) and logs a one-time warning instead of every request of such a user failing with 400.
• CI: Miri now also runs the C ABI (feature ffi) unit tests, covering its raw-pointer and buffer round-trips. No API change.
• Documented that the virtual-thread poll-first dispatch runs the handler's first poll outside any Tokio task, and how to opt out with -Dvespera.virtualThread.pollFirst=false.
• WebFlux apps built as GraalVM native images now get the Spring Security reflection hints (new VesperaSecurityRuntimeHints, imported by both autoconfigurations), and the anonymous-principal check compares class names, so Spring Security's anonymousUser is never forwarded as an authenticated principal even when the token class cannot be loaded.
• The WebFlux proxy answers a streamed response that panics or fails before anything was committed with its own 500 (Rust status and headers such as Set-Cookie discarded, DispatchEvent.panicked set), aborts the connection once bytes were sent, and forwards form bodies a WebFilter such as Spring Security's CsrfWebFilter already read via getFormData() instead of an empty body.
• Releases whose attestation step did not complete (such as 0.6.0) can now be given provenance and SBOM attestations afterwards; verify them with --signer-workflow dev-five-git/vespera/.github/workflows/reattest.yml.
• The crate SBOMs now carry a CycloneDX serialNumber (a reproducible UUID of name, version and commit), which actions/attest requires — the 0.6.0 release attested provenance but its SBOM attestations were rejected as "Unsupported SBOM format". scripts/sbom.sh checks the field on every PR. No API change.
• VesperaBridge.java is brought back under the 1000-line file cap by moving its argument checks into a new package-private BridgeInputChecks class, native-library loading into VesperaNativeLoader and the virtual-thread pooled DIRECT dispatch into DirectModeDispatcher. No API change.
• The tracing feature's vespera.dispatch span now records the matched route template as route (e.g. /users/{id}) instead of the raw request path, so secrets in path segments no longer reach logs.

vespera_jni@0.6.0 → 0.7.0 - crates/vespera_jni/Cargo.toml

Minor

• Docs: AGENTS.md key-component line counts refreshed and rows added for cron.rs, bounded.rs, cancel.rs and ParkingDispatch. No API change.
• CI: the observational branch-coverage job no longer fails when the pinned nightly's llvm-cov lcov export crashes; the coverage summary still runs. No API change.
• C ABI: vespera_dispatch_async now honours the async in-flight cap (shared with JNI dispatchAsync, default 4096, over the cap → inline 503), and C hosts can set runtime, limit, deadline and async-cap knobs with the new vespera_configure_* functions (VESPERA_ERR_TOO_LATE once fixed) instead of environment variables.
• vespera::cron::shutdown_and_wait can no longer report idle while a cron run is starting: a tick that wakes up as shutdown begins now backs out instead of launching its job.
• #[vespera::cron] jobs declared in src/lib.rs / src/main.rs or inside an inline mod now resolve to their real module path (previously crate::lib::job failed to compile and inline module segments were dropped), and a job declared after vespera! in a file that already has registered jobs is no longer skipped.
• Test-only: AsyncDispatchTest no longer races the orTimeout delayer thread. No API change.
• The Java bridge now forwards at most 1024 principal authorities and attributes (the Rust wire limit) and logs a one-time warning instead of every request of such a user failing with 400.
• CI: Miri now also runs the C ABI (feature ffi) unit tests, covering its raw-pointer and buffer round-trips. No API change.
• Documented that the virtual-thread poll-first dispatch runs the handler's first poll outside any Tokio task, and how to opt out with -Dvespera.virtualThread.pollFirst=false.
• WebFlux apps built as GraalVM native images now get the Spring Security reflection hints (new VesperaSecurityRuntimeHints, imported by both autoconfigurations), and the anonymous-principal check compares class names, so Spring Security's anonymousUser is never forwarded as an authenticated principal even when the token class cannot be loaded.
• The WebFlux proxy answers a streamed response that panics or fails before anything was committed with its own 500 (Rust status and headers such as Set-Cookie discarded, DispatchEvent.panicked set), aborts the connection once bytes were sent, and forwards form bodies a WebFilter such as Spring Security's CsrfWebFilter already read via getFormData() instead of an empty body.
• Releases whose attestation step did not complete (such as 0.6.0) can now be given provenance and SBOM attestations afterwards; verify them with --signer-workflow dev-five-git/vespera/.github/workflows/reattest.yml.
• The crate SBOMs now carry a CycloneDX serialNumber (a reproducible UUID of name, version and commit), which actions/attest requires — the 0.6.0 release attested provenance but its SBOM attestations were rejected as "Unsupported SBOM format". scripts/sbom.sh checks the field on every PR. No API change.
• VesperaBridge.java is brought back under the 1000-line file cap by moving its argument checks into a new package-private BridgeInputChecks class, native-library loading into VesperaNativeLoader and the virtual-thread pooled DIRECT dispatch into DirectModeDispatcher. No API change.
• The tracing feature's vespera.dispatch span now records the matched route template as route (e.g. /users/{id}) instead of the raw request path, so secrets in path segments no longer reach logs.

vespera_macro@0.6.0 → 0.7.0 - crates/vespera_macro/Cargo.toml

Minor

• Docs: AGENTS.md key-component line counts refreshed and rows added for cron.rs, bounded.rs, cancel.rs and ParkingDispatch. No API change.
• CI: the observational branch-coverage job no longer fails when the pinned nightly's llvm-cov lcov export crashes; the coverage summary still runs. No API change.
• C ABI: vespera_dispatch_async now honours the async in-flight cap (shared with JNI dispatchAsync, default 4096, over the cap → inline 503), and C hosts can set runtime, limit, deadline and async-cap knobs with the new vespera_configure_* functions (VESPERA_ERR_TOO_LATE once fixed) instead of environment variables.
• vespera::cron::shutdown_and_wait can no longer report idle while a cron run is starting: a tick that wakes up as shutdown begins now backs out instead of launching its job.
• #[vespera::cron] jobs declared in src/lib.rs / src/main.rs or inside an inline mod now resolve to their real module path (previously crate::lib::job failed to compile and inline module segments were dropped), and a job declared after vespera! in a file that already has registered jobs is no longer skipped.
• Test-only: AsyncDispatchTest no longer races the orTimeout delayer thread. No API change.
• The Java bridge now forwards at most 1024 principal authorities and attributes (the Rust wire limit) and logs a one-time warning instead of every request of such a user failing with 400.
• CI: Miri now also runs the C ABI (feature ffi) unit tests, covering its raw-pointer and buffer round-trips. No API change.
• Documented that the virtual-thread poll-first dispatch runs the handler's first poll outside any Tokio task, and how to opt out with -Dvespera.virtualThread.pollFirst=false.
• WebFlux apps built as GraalVM native images now get the Spring Security reflection hints (new VesperaSecurityRuntimeHints, imported by both autoconfigurations), and the anonymous-principal check compares class names, so Spring Security's anonymousUser is never forwarded as an authenticated principal even when the token class cannot be loaded.
• The WebFlux proxy answers a streamed response that panics or fails before anything was committed with its own 500 (Rust status and headers such as Set-Cookie discarded, DispatchEvent.panicked set), aborts the connection once bytes were sent, and forwards form bodies a WebFilter such as Spring Security's CsrfWebFilter already read via getFormData() instead of an empty body.
• Releases whose attestation step did not complete (such as 0.6.0) can now be given provenance and SBOM attestations afterwards; verify them with --signer-workflow dev-five-git/vespera/.github/workflows/reattest.yml.
• The crate SBOMs now carry a CycloneDX serialNumber (a reproducible UUID of name, version and commit), which actions/attest requires — the 0.6.0 release attested provenance but its SBOM attestations were rejected as "Unsupported SBOM format". scripts/sbom.sh checks the field on every PR. No API change.
• VesperaBridge.java is brought back under the 1000-line file cap by moving its argument checks into a new package-private BridgeInputChecks class, native-library loading into VesperaNativeLoader and the virtual-thread pooled DIRECT dispatch into DirectModeDispatcher. No API change.
• The tracing feature's vespera.dispatch span now records the matched route template as route (e.g. /users/{id}) instead of the raw request path, so secrets in path segments no longer reach logs.

vespera-bridge@0.6.0 → 0.7.0 - libs/vespera-bridge/build.gradle.kts

Minor

• Docs: AGENTS.md key-component line counts refreshed and rows added for cron.rs, bounded.rs, cancel.rs and ParkingDispatch. No API change.
• CI: the observational branch-coverage job no longer fails when the pinned nightly's llvm-cov lcov export crashes; the coverage summary still runs. No API change.
• C ABI: vespera_dispatch_async now honours the async in-flight cap (shared with JNI dispatchAsync, default 4096, over the cap → inline 503), and C hosts can set runtime, limit, deadline and async-cap knobs with the new vespera_configure_* functions (VESPERA_ERR_TOO_LATE once fixed) instead of environment variables.
• vespera::cron::shutdown_and_wait can no longer report idle while a cron run is starting: a tick that wakes up as shutdown begins now backs out instead of launching its job.
• #[vespera::cron] jobs declared in src/lib.rs / src/main.rs or inside an inline mod now resolve to their real module path (previously crate::lib::job failed to compile and inline module segments were dropped), and a job declared after vespera! in a file that already has registered jobs is no longer skipped.
• Test-only: AsyncDispatchTest no longer races the orTimeout delayer thread. No API change.
• The Java bridge now forwards at most 1024 principal authorities and attributes (the Rust wire limit) and logs a one-time warning instead of every request of such a user failing with 400.
• CI: Miri now also runs the C ABI (feature ffi) unit tests, covering its raw-pointer and buffer round-trips. No API change.
• Documented that the virtual-thread poll-first dispatch runs the handler's first poll outside any Tokio task, and how to opt out with -Dvespera.virtualThread.pollFirst=false.
• WebFlux apps built as GraalVM native images now get the Spring Security reflection hints (new VesperaSecurityRuntimeHints, imported by both autoconfigurations), and the anonymous-principal check compares class names, so Spring Security's anonymousUser is never forwarded as an authenticated principal even when the token class cannot be loaded.
• The WebFlux proxy answers a streamed response that panics or fails before anything was committed with its own 500 (Rust status and headers such as Set-Cookie discarded, DispatchEvent.panicked set), aborts the connection once bytes were sent, and forwards form bodies a WebFilter such as Spring Security's CsrfWebFilter already read via getFormData() instead of an empty body.
• Releases whose attestation step did not complete (such as 0.6.0) can now be given provenance and SBOM attestations afterwards; verify them with --signer-workflow dev-five-git/vespera/.github/workflows/reattest.yml.
• The crate SBOMs now carry a CycloneDX serialNumber (a reproducible UUID of name, version and commit), which actions/attest requires — the 0.6.0 release attested provenance but its SBOM attestations were rejected as "Unsupported SBOM format". scripts/sbom.sh checks the field on every PR. No API change.
• VesperaBridge.java is brought back under the 1000-line file cap by moving its argument checks into a new package-private BridgeInputChecks class, native-library loading into VesperaNativeLoader and the virtual-thread pooled DIRECT dispatch into DirectModeDispatcher. No API change.
• The tracing feature's vespera.dispatch span now records the matched route template as route (e.g. /users/{id}) instead of the raw request path, so secrets in path segments no longer reach logs.

vespera-bridge-gradle-plugin@0.6.0 → 0.7.0 - libs/vespera-bridge-gradle-plugin/build.gradle.kts

Minor

• Docs: AGENTS.md key-component line counts refreshed and rows added for cron.rs, bounded.rs, cancel.rs and ParkingDispatch. No API change.
• CI: the observational branch-coverage job no longer fails when the pinned nightly's llvm-cov lcov export crashes; the coverage summary still runs. No API change.
• C ABI: vespera_dispatch_async now honours the async in-flight cap (shared with JNI dispatchAsync, default 4096, over the cap → inline 503), and C hosts can set runtime, limit, deadline and async-cap knobs with the new vespera_configure_* functions (VESPERA_ERR_TOO_LATE once fixed) instead of environment variables.
• vespera::cron::shutdown_and_wait can no longer report idle while a cron run is starting: a tick that wakes up as shutdown begins now backs out instead of launching its job.
• #[vespera::cron] jobs declared in src/lib.rs / src/main.rs or inside an inline mod now resolve to their real module path (previously crate::lib::job failed to compile and inline module segments were dropped), and a job declared after vespera! in a file that already has registered jobs is no longer skipped.
• Test-only: AsyncDispatchTest no longer races the orTimeout delayer thread. No API change.
• The Java bridge now forwards at most 1024 principal authorities and attributes (the Rust wire limit) and logs a one-time warning instead of every request of such a user failing with 400.
• CI: Miri now also runs the C ABI (feature ffi) unit tests, covering its raw-pointer and buffer round-trips. No API change.
• Documented that the virtual-thread poll-first dispatch runs the handler's first poll outside any Tokio task, and how to opt out with -Dvespera.virtualThread.pollFirst=false.
• WebFlux apps built as GraalVM native images now get the Spring Security reflection hints (new VesperaSecurityRuntimeHints, imported by both autoconfigurations), and the anonymous-principal check compares class names, so Spring Security's anonymousUser is never forwarded as an authenticated principal even when the token class cannot be loaded.
• The WebFlux proxy answers a streamed response that panics or fails before anything was committed with its own 500 (Rust status and headers such as Set-Cookie discarded, DispatchEvent.panicked set), aborts the connection once bytes were sent, and forwards form bodies a WebFilter such as Spring Security's CsrfWebFilter already read via getFormData() instead of an empty body.
• Releases whose attestation step did not complete (such as 0.6.0) can now be given provenance and SBOM attestations afterwards; verify them with --signer-workflow dev-five-git/vespera/.github/workflows/reattest.yml.
• The crate SBOMs now carry a CycloneDX serialNumber (a reproducible UUID of name, version and commit), which actions/attest requires — the 0.6.0 release attested provenance but its SBOM attestations were rejected as "Unsupported SBOM format". scripts/sbom.sh checks the field on every PR. No API change.
• VesperaBridge.java is brought back under the 1000-line file cap by moving its argument checks into a new package-private BridgeInputChecks class, native-library loading into VesperaNativeLoader and the virtual-thread pooled DIRECT dispatch into DirectModeDispatcher. No API change.
• The tracing feature's vespera.dispatch span now records the matched route template as route (e.g. /users/{id}) instead of the raw request path, so secrets in path segments no longer reach logs.