diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 4f342ab..e8ac0d3 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -13,7 +13,7 @@ concurrency: cancel-in-progress: true env: - # The engine ref ktor-guard pins (lockstep 4.3.3; settings.gradle.kts builds it from + # The engine ref ktor-guard pins (lockstep 4.4.0; settings.gradle.kts builds it from # source). Bump this and the settings comment together with a facade upgrade. GUARD_CORE_JVM_REF: 77116062fc7d88dcb610b1f588e2bc78e63848ad @@ -30,7 +30,7 @@ jobs: with: persist-credentials: false - # The engine dependency (com.guard-core:guard-core:4.3.3) is built from source through + # The engine dependency (com.guard-core:guard-core:4.4.0) is built from source through # the composite build wired in settings.gradle.kts; CI checks it out as a sibling. - name: Checkout guard-core-jvm engine (pinned) uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 diff --git a/CHANGELOG.md b/CHANGELOG.md index ce52a3e..051a661 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -3,7 +3,7 @@ All notable changes to this project are documented in this file. The format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/). -## Unreleased +## [1.1.1] - 2026-10-17 ### Fixed diff --git a/README.md b/README.md index ed29312..099cd51 100644 --- a/README.md +++ b/README.md @@ -26,13 +26,13 @@ ___ ## Status -`1.1.0`, released on Maven Central as `com.guard-core:ktor-guard:1.1.0`. ktor-guard is a true port of +`1.1.1`, released on Maven Central as `com.guard-core:ktor-guard:1.1.1`. ktor-guard is a true port of the guard adapter pattern (fastapi-guard's `SecurityMiddleware`, JVM-idiomized for Ktor 3.x): it wraps Ktor `ApplicationCall` into the guard-core-jvm facade protocols and drives the engine's security pipeline per request through suspend-native Ktor server plugin hooks. It contains no security logic of its own; every decision is the engine's. -- Engine: `com.guard-core:guard-core:4.3.3` (built from source through a composite build, see +- Engine: `com.guard-core:guard-core:4.4.0` (built from source through a composite build, see [Engine dependency](#engine-dependency)). - Ktor 3.x (built and tested against 3.6.0), Kotlin 2.4.21, JDK 17, suspend-native: the facade's suspend APIs are called directly (no runBlocking bridges on this adapter). @@ -46,11 +46,11 @@ Published on Maven Central: ```kotlin dependencies { - implementation("com.guard-core:ktor-guard:1.1.0") + implementation("com.guard-core:ktor-guard:1.1.1") } ``` -It brings in the engine facade `com.guard-core:guard-core:4.3.3`. To build from source, see [Engine dependency](#engine-dependency) and [Development](#development). +It brings in the engine facade `com.guard-core:guard-core:4.4.0`. To build from source, see [Engine dependency](#engine-dependency) and [Development](#development). ## Usage @@ -168,7 +168,7 @@ ktor-guard contains no security logic; the engine lives in [Guard-Core/guard-core-jvm](https://github.com/Guard-Core/guard-core-jvm) and is built from source through a composite build (`includeBuild` + dependency substitution in `settings.gradle.kts`, the Gradle analog of the Rust path+version pattern). Declared coordinates -stay `com.guard-core:guard-core:4.3.3` (lockstep with the guard-core 4.3.3 release); substitution +stay `com.guard-core:guard-core:4.4.0` (lockstep with the guard-core 4.4.0 release); substitution redirects them to the included build until the artifacts publish to Maven Central. CI checks the engine out at the pinned ref as a sibling (`path: guard-core-jvm`); locally use diff --git a/build.gradle.kts b/build.gradle.kts index 37d13fe..3b0be75 100644 --- a/build.gradle.kts +++ b/build.gradle.kts @@ -15,7 +15,7 @@ plugins { // standard practice for hyphenated domains. group = "com.guard-core" -version = "1.1.0" +version = "1.1.1" // Section 14.3 lockfile analog: every configuration resolves against the // committed gradle.lockfile. A dependency change without diff --git a/docs/index.md b/docs/index.md index 1e57efe..6a71ae5 100644 --- a/docs/index.md +++ b/docs/index.md @@ -8,8 +8,8 @@ engine's security pipeline per request through suspend-native Ktor server plugin hooks. It contains no security logic of its own; every decision is the engine's. -- **Status**: 1.0.0, released (the first synchronized release) -- **Engine**: `com.guard-core:guard-core:4.3.3` (built from source through a +- **Status**: 1.1.1, released +- **Engine**: `com.guard-core:guard-core:4.4.0` (built from source through a composite build, see [Installation](installation.md)) - **Stack**: Ktor 3.x (built and tested against 3.6.0), Kotlin 2.4.21, JDK 17, suspend-native (the facade's suspend APIs are called directly) diff --git a/docs/installation.md b/docs/installation.md index 0ff2e98..bac1d0b 100644 --- a/docs/installation.md +++ b/docs/installation.md @@ -14,7 +14,7 @@ Published on Maven Central: ```kotlin dependencies { - implementation("com.guard-core:ktor-guard:1.1.0") + implementation("com.guard-core:ktor-guard:1.1.1") } ``` @@ -27,7 +27,7 @@ Consumers resolve the engine artifact `com.guard-core:guard-core` from Maven Cen local builds check out `Guard-Core/guard-core-jvm` at the pinned ref `7711606` as the sibling directory `./guard-core-jvm`, and `settings.gradle.kts` substitutes the declared coordinates with the included build's projects. The -declared dependency coordinates stay `com.guard-core:guard-core:4.3.3` +declared dependency coordinates stay `com.guard-core:guard-core:4.4.0` (lockstep version per the family versioning law). ```bash diff --git a/settings.gradle.kts b/settings.gradle.kts index a1d7daf..065f8af 100644 --- a/settings.gradle.kts +++ b/settings.gradle.kts @@ -6,7 +6,7 @@ pluginManagement { } // --------------------------------------------------------------------------- -// Engine dependency (com.guard-core:guard-core:4.3.3) via composite build. +// Engine dependency (com.guard-core:guard-core:4.4.0) via composite build. // // GUARD_CORE_USE_COMPOSITE (environment variable): // unset / "1" / "true" -> composite ON (default, dev + CI-with-pin). @@ -18,10 +18,10 @@ pluginManagement { // ktor-guard contains no security logic: the engine lives in // Guard-Core/guard-core-jvm and is built from source here through includeBuild // + dependency substitution (the Gradle analog of the Rust path+version -// pattern). Declared coordinates stay com.guard-core:guard-core:4.3.3 and -// com.guard-core:guard-core-engine:4.3.3 (groupId com.guard-core is the +// pattern). Declared coordinates stay com.guard-core:guard-core:4.4.0 and +// com.guard-core:guard-core-engine:4.4.0 (groupId com.guard-core is the // Central Portal namespace; Kotlin packages stay com.guardcore.*; lockstep -// with the guard-core 4.3.3 release); substitution redirects them to the +// with the guard-core 4.4.0 release); substitution redirects them to the // included build until the artifacts publish to Maven Central. // // Layout: the engine checkout sits as a sibling of this repo. CI checks it out