From 3b524759072c6309ea6d4a2c7a7b2493e9040ae3 Mon Sep 17 00:00:00 2001 From: Renn F Date: Sat, 17 Oct 2026 05:11:01 +0200 Subject: [PATCH 1/2] release(1.1.1): evaluate body return patterns Version 1.1.1. Body based return_pattern rules now read the response body and evaluate. The Unreleased changelog section becomes 1.1.1. The engine stays at guard-core 4.4.0. --- CHANGELOG.md | 2 +- README.md | 4 ++-- build.gradle.kts | 2 +- docs/installation.md | 2 +- 4 files changed, 5 insertions(+), 5 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index ce52a3e..051a661 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -3,7 +3,7 @@ All notable changes to this project are documented in this file. The format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/). -## Unreleased +## [1.1.1] - 2026-10-17 ### Fixed diff --git a/README.md b/README.md index ed29312..658e681 100644 --- a/README.md +++ b/README.md @@ -26,7 +26,7 @@ ___ ## Status -`1.1.0`, released on Maven Central as `com.guard-core:ktor-guard:1.1.0`. ktor-guard is a true port of +`1.1.1`, released on Maven Central as `com.guard-core:ktor-guard:1.1.1`. ktor-guard is a true port of the guard adapter pattern (fastapi-guard's `SecurityMiddleware`, JVM-idiomized for Ktor 3.x): it wraps Ktor `ApplicationCall` into the guard-core-jvm facade protocols and drives the engine's security pipeline per request through suspend-native Ktor server plugin hooks. It contains no @@ -46,7 +46,7 @@ Published on Maven Central: ```kotlin dependencies { - implementation("com.guard-core:ktor-guard:1.1.0") + implementation("com.guard-core:ktor-guard:1.1.1") } ``` diff --git a/build.gradle.kts b/build.gradle.kts index 37d13fe..3b0be75 100644 --- a/build.gradle.kts +++ b/build.gradle.kts @@ -15,7 +15,7 @@ plugins { // standard practice for hyphenated domains. group = "com.guard-core" -version = "1.1.0" +version = "1.1.1" // Section 14.3 lockfile analog: every configuration resolves against the // committed gradle.lockfile. A dependency change without diff --git a/docs/installation.md b/docs/installation.md index 0ff2e98..0f02808 100644 --- a/docs/installation.md +++ b/docs/installation.md @@ -14,7 +14,7 @@ Published on Maven Central: ```kotlin dependencies { - implementation("com.guard-core:ktor-guard:1.1.0") + implementation("com.guard-core:ktor-guard:1.1.1") } ``` From d2e1c82cdb325d0ae84965ef4f429a677e4430dc Mon Sep 17 00:00:00 2001 From: Renn F Date: Sat, 17 Oct 2026 05:17:35 +0200 Subject: [PATCH 2/2] docs: state the current adapter and engine versions The docs index still said 1.0.0 and engine 4.3.3, and several install and build comments named the engine at 4.3.3. They now match guardCore 4.4.0 and this release. --- .github/workflows/ci.yml | 4 ++-- README.md | 6 +++--- docs/index.md | 4 ++-- docs/installation.md | 2 +- settings.gradle.kts | 8 ++++---- 5 files changed, 12 insertions(+), 12 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 4f342ab..e8ac0d3 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -13,7 +13,7 @@ concurrency: cancel-in-progress: true env: - # The engine ref ktor-guard pins (lockstep 4.3.3; settings.gradle.kts builds it from + # The engine ref ktor-guard pins (lockstep 4.4.0; settings.gradle.kts builds it from # source). Bump this and the settings comment together with a facade upgrade. GUARD_CORE_JVM_REF: 77116062fc7d88dcb610b1f588e2bc78e63848ad @@ -30,7 +30,7 @@ jobs: with: persist-credentials: false - # The engine dependency (com.guard-core:guard-core:4.3.3) is built from source through + # The engine dependency (com.guard-core:guard-core:4.4.0) is built from source through # the composite build wired in settings.gradle.kts; CI checks it out as a sibling. - name: Checkout guard-core-jvm engine (pinned) uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 diff --git a/README.md b/README.md index 658e681..099cd51 100644 --- a/README.md +++ b/README.md @@ -32,7 +32,7 @@ it wraps Ktor `ApplicationCall` into the guard-core-jvm facade protocols and dri security pipeline per request through suspend-native Ktor server plugin hooks. It contains no security logic of its own; every decision is the engine's. -- Engine: `com.guard-core:guard-core:4.3.3` (built from source through a composite build, see +- Engine: `com.guard-core:guard-core:4.4.0` (built from source through a composite build, see [Engine dependency](#engine-dependency)). - Ktor 3.x (built and tested against 3.6.0), Kotlin 2.4.21, JDK 17, suspend-native: the facade's suspend APIs are called directly (no runBlocking bridges on this adapter). @@ -50,7 +50,7 @@ dependencies { } ``` -It brings in the engine facade `com.guard-core:guard-core:4.3.3`. To build from source, see [Engine dependency](#engine-dependency) and [Development](#development). +It brings in the engine facade `com.guard-core:guard-core:4.4.0`. To build from source, see [Engine dependency](#engine-dependency) and [Development](#development). ## Usage @@ -168,7 +168,7 @@ ktor-guard contains no security logic; the engine lives in [Guard-Core/guard-core-jvm](https://github.com/Guard-Core/guard-core-jvm) and is built from source through a composite build (`includeBuild` + dependency substitution in `settings.gradle.kts`, the Gradle analog of the Rust path+version pattern). Declared coordinates -stay `com.guard-core:guard-core:4.3.3` (lockstep with the guard-core 4.3.3 release); substitution +stay `com.guard-core:guard-core:4.4.0` (lockstep with the guard-core 4.4.0 release); substitution redirects them to the included build until the artifacts publish to Maven Central. CI checks the engine out at the pinned ref as a sibling (`path: guard-core-jvm`); locally use diff --git a/docs/index.md b/docs/index.md index 1e57efe..6a71ae5 100644 --- a/docs/index.md +++ b/docs/index.md @@ -8,8 +8,8 @@ engine's security pipeline per request through suspend-native Ktor server plugin hooks. It contains no security logic of its own; every decision is the engine's. -- **Status**: 1.0.0, released (the first synchronized release) -- **Engine**: `com.guard-core:guard-core:4.3.3` (built from source through a +- **Status**: 1.1.1, released +- **Engine**: `com.guard-core:guard-core:4.4.0` (built from source through a composite build, see [Installation](installation.md)) - **Stack**: Ktor 3.x (built and tested against 3.6.0), Kotlin 2.4.21, JDK 17, suspend-native (the facade's suspend APIs are called directly) diff --git a/docs/installation.md b/docs/installation.md index 0f02808..bac1d0b 100644 --- a/docs/installation.md +++ b/docs/installation.md @@ -27,7 +27,7 @@ Consumers resolve the engine artifact `com.guard-core:guard-core` from Maven Cen local builds check out `Guard-Core/guard-core-jvm` at the pinned ref `7711606` as the sibling directory `./guard-core-jvm`, and `settings.gradle.kts` substitutes the declared coordinates with the included build's projects. The -declared dependency coordinates stay `com.guard-core:guard-core:4.3.3` +declared dependency coordinates stay `com.guard-core:guard-core:4.4.0` (lockstep version per the family versioning law). ```bash diff --git a/settings.gradle.kts b/settings.gradle.kts index a1d7daf..065f8af 100644 --- a/settings.gradle.kts +++ b/settings.gradle.kts @@ -6,7 +6,7 @@ pluginManagement { } // --------------------------------------------------------------------------- -// Engine dependency (com.guard-core:guard-core:4.3.3) via composite build. +// Engine dependency (com.guard-core:guard-core:4.4.0) via composite build. // // GUARD_CORE_USE_COMPOSITE (environment variable): // unset / "1" / "true" -> composite ON (default, dev + CI-with-pin). @@ -18,10 +18,10 @@ pluginManagement { // ktor-guard contains no security logic: the engine lives in // Guard-Core/guard-core-jvm and is built from source here through includeBuild // + dependency substitution (the Gradle analog of the Rust path+version -// pattern). Declared coordinates stay com.guard-core:guard-core:4.3.3 and -// com.guard-core:guard-core-engine:4.3.3 (groupId com.guard-core is the +// pattern). Declared coordinates stay com.guard-core:guard-core:4.4.0 and +// com.guard-core:guard-core-engine:4.4.0 (groupId com.guard-core is the // Central Portal namespace; Kotlin packages stay com.guardcore.*; lockstep -// with the guard-core 4.3.3 release); substitution redirects them to the +// with the guard-core 4.4.0 release); substitution redirects them to the // included build until the artifacts publish to Maven Central. // // Layout: the engine checkout sits as a sibling of this repo. CI checks it out