Skip to content

Release 0.3.0 - #152

Merged
danielmarv merged 1 commit into
mainfrom
release-0.3.0
Oct 29, 2026
Merged

danielmarv merged 1 commit into
mainfrom
release-0.3.0

Conversation

@danielmarv

@danielmarv danielmarv commented Oct 29, 2026 •

Copy link
Copy Markdown
Collaborator

Prepares Record Store 0.3.0. Once this is merged, tag the merge commit v0.3.0 (signed) and push the tag; release.yml does the rest.

Why a minor release

  • Behaviour change: a server.mode of cluster or control now fails the deployment_mode start-up check unless server.unsupported_cluster_mode acknowledges it (3267003). Standalone deployments are unaffected. Before 1.0 that needs at least a minor bump.
  • Compatibility and Support page published.
  • Security: dependency fixes that cleared the Rust and npm audits since 0.2.1. These cover rustls / rustls-webpki / webpki-roots / quinn-proto, ctutils, tokio, Next.js 16.4.2, sharp and source-map-js.

No on-disk format or schema change: 0.2.x ↔ 0.3.0 is a binary swap.

What changed here

  • Cargo.toml and console/package.json → 0.3.0, with both lockfiles refreshed. release-version.sh v0.3.0 passes.
  • CHANGELOG.md: the Unreleased entries become [0.3.0]. Added an intro, an Upgrading section (including the rollback caveat that 0.2.1 refuses a config file containing unsupported_cluster_mode) and a Security section. The compare links now include 0.2.0, 0.2.1 and 0.3.0.
  • Every current-version example in docs/, deploy/ (Compose defaults, Helm chart version/appVersion, nfpm, package script) and the issue templates → 0.3.0.
  • SECURITY.md supported-versions table → 0.3.0. It still named 0.1.3.

Deliberately left: container-images.md's "once 0.2.0 exists… a fix ships as 0.2.1" example, and verifying-releases.md's "from 0.2.0 onwards" (attestation start).

Checked locally

  • .github/scripts/release-version.sh v0.3.0 → version=0.3.0
  • release-notes.sh renders the 0.3.0 section
  • npm audit --omit=dev --audit-level=high (SEC-AUDIT-NPM) → 0 vulnerabilities
  • tests/rust-audit.sh (SEC-AUDIT-RUST) → clean

Before tagging

  • CI green on this PR
  • Gates → Run workflow → candidate on the merge commit is READY
  • If the merge lands on a later day, update the date in ## [0.3.0] - 2026-10-29

A minor release: the compatibility promise, the start-up refusal of
clustered modes nobody acknowledged, and the dependency security fixes
that cleared the Rust and npm audits since 0.2.1. No on-disk format or
schema change, so 0.2.x moves to 0.3.0 and back by swapping the binary.

The workspace, the console, both lockfiles, the chart and every
current-version example move to 0.3.0. Kept as they were: the
container-images page's example of a fix superseding a published tag,
and attestation starting at 0.2.0. SECURITY.md still named 0.1.3 as the
supported release, and the changelog's compare links stopped at 0.1.3;
both now reach 0.3.0.
@danielmarv
danielmarv merged commit 330c6a4 into main Oct 29, 2026
43 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant