Tags give the ability to mark specific points in history as being important
-
v1.13.0
bac509e8 · ·Development tooling and a security fix. No change to the library's public API. - All make targets now run inside a pinned dev image (Go 1.26.6) that also carries the linter and the security scanners, so a local run and CI use the exact same toolchain. CI runs `make lint`, `make test-coverage`, `make sec` (govulncheck + semgrep) and `make generate` (codegen-drift gate) in that image, through the generic code-workflow rather than the Go-specific one. - Bumped `github.com/getkin/kin-openapi` from v0.135.0 to v0.144.0, which fixes a reachable vulnerability (GO-2026-6112) govulncheck flagged in `openapi3filter`. The bump drops several transitive dependencies but does not change this library's API. - Marked five semgrep findings as false positives with a bare `// nosemgrep` and a one-line rationale each: the static-file traversal guard uses `filepath.Clean` as one layer of a multi-layer check, three `path.Clean` calls normalize URL paths for a skip-list lookup rather than sanitizing a filesystem path, and the unix-socket websocket bridge wires origin policy to config, not a hardcoded check.
-
-
-
v1.11.1
be4966e9 · ·aichteeteapee v1.11.1 — pin CI toolchain to go1.26.6 setup-go reused a cached go1.26.5 with five stdlib CVEs fixed in go1.26.6, so govulncheck failed the Security Scan and gated the badges + GitHub Release for v1.11.0. Pinning go_version 1.26.6 scans the patched stdlib. No code change.
-
v1.11.0
3d165230 · ·aichteeteapee v1.11.0 — BaseResponseWriter flushes through middleware BaseResponseWriter now implements http.Flusher + Unwrap, so streamed (SSE) responses flush through the Logger/Timeout middleware chain instead of buffering. Bumps ctxerrors to v0.7.1 and ctxscope to v1.0.3.
-
v1.10.4
bbc86b53 · ·aichteeteapee v1.10.4 — docs describe ctxscope The README's Logging section and docs/middleware.md still named common-go/scope and scope.GetLogger, which v1.10.3 stopped using and common-go v0.4.0 removed. Both now describe ctxscope. No code changed.
-
v1.10.3
24b0424f · ·aichteeteapee v1.10.3 — log scope from ctxscope Log scope now comes from github.com/psyb0t/ctxscope rather than github.com/psyb0t/common-go/scope. Same API, new package name. common-go is still a dependency for cache, errors, slogging and types. No exported signature mentions a scope type, so the public API is unchanged.
-
v1.10.2
bfdfb466 · ·aichteeteapee v1.10.2 — imported-by badge, refreshed weekly CI only; the library is unchanged. The README gains a count of importing packages linking to the repositories behind it. Blast radius, not adoption: the number is what tells you how much breaks when an exported name moves.
-
-
-
-
-
-
-
-
-
-
-
-