Skip to content

chore(release): prepare v1.0.1 - #64

Merged
debba merged 1 commit into
mainfrom
release/v1.0.1
Nov 10, 2026
Merged

debba merged 1 commit into
mainfrom
release/v1.0.1

Conversation

@debba

@debba debba commented Nov 10, 2026 •

Copy link
Copy Markdown
Contributor

Prepare the stable v1.0.1 release with the NTLM authentication feature and dependency updates already merged since v1.0.0-beta.4 (#55, #56, #57, #58, #59 and #60).

Synchronize the Rust crate and lockfile, registry manifest and example, EXPLAIN npm package, UI package and lockfile; record the release in the changelog.

Resolve #63 by documenting an accepted maintenance-risk exception for RUSTSEC-2026-0441. The advisory reports that pin-utils is unmaintained and has no patched version. The dependency comes from sspi -> async-dnssd on macOS/iOS; this plugin selects the explicit NTLM implementation, which does not use DNS-SD. pin-utils remains in the transitive dependency graph. Revisit this exception when sspi or async-dnssd changes. Existing rkyv and rsa exceptions remain unchanged.

Validation completed locally: 231 Rust unit tests, 3 host-model conformance tests, 13 EXPLAIN tests with typecheck and ESM/IIFE/declaration builds, 5 UI tests with typecheck and build, formatting, Markdown lint, live registry manifest validation, synchronized version assertions and cargo audit with the documented advisory exceptions. Clippy passes; the optimized release build is running. The latest main CI also passed its live SQL Server integration suite; release CI must pass before merging.

GitNexus detect-changes reports no changed indexed symbols. Changes are limited to release metadata, changelog and audit configuration.

Closes #63.

@debba debba added the prerelease:stable Publish the next release on the stable channel label Nov 10, 2026
@kilo-code-bot

kilo-code-bot Bot commented Nov 10, 2026 •

Copy link
Copy Markdown

Code Review Summary

Status: No Issues Found | Recommendation: Merge

Release metadata bumps (Cargo.toml/lock, .tabularium, registry entry, EXPLAIN and UI packages), changelog entry and the new RUSTSEC-2026-0441 CI audit ignore are consistent with each other. Release asset URLs follow the existing naming pattern. Assumption: the release CI must pass (including the live SQL Server suite) before merge, as stated in the PR description.

Files Reviewed (9 files)
  • .github/workflows/ci.yml
  • .tabularium
  • CHANGELOG.md
  • Cargo.lock
  • Cargo.toml
  • docs/registry-entry.json
  • explain/package.json
  • ui/package-lock.json
  • ui/package.json

Reviewed by claude-sonnet-5.5 · Input: 250 · Output: 1.7K · Cached: 188.5K

@debba
debba merged commit 018e4f0 into main Nov 10, 2026
12 of 28 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

prerelease:stable Publish the next release on the stable channel

Projects

None yet

Development

Successfully merging this pull request may close these issues.

RUSTSEC-2026-0441: pin-utils is unmaintained

1 participant