From e34f3b45f350cc82790407f4dcf857832b6cc3e0 Mon Sep 17 00:00:00 2001 From: Renn F Date: Sat, 17 Oct 2026 05:09:51 +0200 Subject: [PATCH 1/2] release(1.2.0): stream responses and evaluate body return patterns Version 1.2.0. Responses stream unbuffered unless a body feature is active, so the guard no longer sets Content-Length on streamed responses, and body based return_pattern rules evaluate. The Unreleased changelog section becomes 1.2.0. The engine stays at guard-core 4.4.0. --- CHANGELOG.md | 2 +- README.md | 2 +- build.gradle.kts | 2 +- docs/installation.md | 2 +- 4 files changed, 4 insertions(+), 4 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index bab942f..4f78321 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,6 +1,6 @@ # Changelog -## Unreleased +## [1.2.0] - 2026-10-17 ### Fixed diff --git a/README.md b/README.md index d316d41..12988e7 100644 --- a/README.md +++ b/README.md @@ -39,7 +39,7 @@ Published on Maven Central: ```kotlin dependencies { - implementation("com.guard-core:spring-boot-guard:1.1.0") + implementation("com.guard-core:spring-boot-guard:1.2.0") } ``` diff --git a/build.gradle.kts b/build.gradle.kts index 50a3bcf..acd7ace 100644 --- a/build.gradle.kts +++ b/build.gradle.kts @@ -15,7 +15,7 @@ plugins { // standard practice for hyphenated domains. group = "com.guard-core" -version = "1.1.0" +version = "1.2.0" // Section 14.3 lockfile analog: every configuration resolves against the // committed gradle.lockfile. A dependency change without diff --git a/docs/installation.md b/docs/installation.md index 4ef11c9..a51b787 100644 --- a/docs/installation.md +++ b/docs/installation.md @@ -13,7 +13,7 @@ Published on Maven Central: ```kotlin dependencies { - implementation("com.guard-core:spring-boot-guard:1.1.0") + implementation("com.guard-core:spring-boot-guard:1.2.0") } ``` From 8fb941e32977620edac05444d72431a0bd9cc2d1 Mon Sep 17 00:00:00 2001 From: Renn F Date: Sat, 17 Oct 2026 05:16:58 +0200 Subject: [PATCH 2/2] docs: state the current adapter and engine versions The docs index still said 1.0.0 and engine 4.3.3, and several install and build comments named the engine at 4.3.3. They now match guardCore 4.4.0 and this release. --- README.md | 8 ++++---- build.gradle.kts | 2 +- docs/index.md | 4 ++-- docs/installation.md | 6 +++--- 4 files changed, 10 insertions(+), 10 deletions(-) diff --git a/README.md b/README.md index 12988e7..91ed560 100644 --- a/README.md +++ b/README.md @@ -43,7 +43,7 @@ dependencies { } ``` -It brings in the engine facade `com.guard-core:guard-core:4.3.3`. To build from source, see "Engine dependency" below, or consume the composite from a sibling checkout. +It brings in the engine facade `com.guard-core:guard-core:4.4.0`. To build from source, see "Engine dependency" below, or consume the composite from a sibling checkout. ## Kotlin and coroutines versions under Spring Boot dependency management @@ -164,10 +164,10 @@ logs the same "eager init not honored" warning as fastapi-guard. The engine artifact `com.guard-core:guard-core` (groupId is the Central Portal namespace; Kotlin packages stay `com.guardcore.*`) is on Maven Central for consumers. This repository's own build pins the engine from source instead: CI and local builds check out `Guard-Core/guard-core-jvm` at the pinned ref `7711606` as the sibling directory `./guard-core-jvm`, and `settings.gradle.kts` -substitutes the declared coordinates `com.guard-core:guard-core:4.3.3` / -`com.guard-core:guard-core-engine:4.3.3` with the included build's projects (the Gradle analog of +substitutes the declared coordinates `com.guard-core:guard-core:4.4.0` / +`com.guard-core:guard-core-engine:4.4.0` with the included build's projects (the Gradle analog of the Rust path+version pattern). The declared dependency coordinates stay -`com.guard-core:guard-core:4.3.3` (lockstep version per the family versioning law); consumers of a +`com.guard-core:guard-core:4.4.0` (lockstep version per the family versioning law); consumers of a published artifact resolve the real Maven artifact with no composite involved. Set `GUARD_CORE_USE_COMPOSITE=false` to build without the composite: the declared coordinates then diff --git a/build.gradle.kts b/build.gradle.kts index acd7ace..24b398a 100644 --- a/build.gradle.kts +++ b/build.gradle.kts @@ -34,7 +34,7 @@ kotlin { } dependencies { - // The engine facade: com.guard-core:guard-core:4.3.3, substituted with the + // The engine facade: com.guard-core:guard-core:4.4.0, substituted with the // pinned guard-core-jvm includeBuild checkout (settings.gradle.kts). api(libs.guard.core) implementation(platform(libs.netty.bom)) diff --git a/docs/index.md b/docs/index.md index 78daffc..6719374 100644 --- a/docs/index.md +++ b/docs/index.md @@ -7,8 +7,8 @@ pipeline runs per request, error responses come byte-exact from the facade response factory, and the `guard.*` property surface reaches every `SecurityConfig` field. -- **Status**: 1.0.0, released (the first synchronized release) -- **Engine**: `com.guard-core:guard-core:4.3.3` (built from source through a +- **Status**: 1.2.0, released +- **Engine**: `com.guard-core:guard-core:4.4.0` (built from source through a composite build, see [Installation](installation.md)) - **Parity**: the engine's [every-feature matrix](https://github.com/Guard-Core/guard-core-jvm/blob/master/docs/every-feature-matrix.md) diff --git a/docs/installation.md b/docs/installation.md index a51b787..b00b0d8 100644 --- a/docs/installation.md +++ b/docs/installation.md @@ -56,9 +56,9 @@ With `spring-boot-starter-parent` as the parent, set `2.4.21