v1.11.1

Changelog

• 55080b3 fix(SEC-7): strict refresh-token rotation with grace window (#268)

v1.11.0

Changelog

• f5a8d65 chore(deps): bump actions/checkout from 6 to 7 (#263)
• aa501e8 chore(deps): bump actions/upload-artifact from 4 to 7 (#258)
• cd4903b chore(deps): bump alpine from 3.24.0 to 3.24.1 (#262)
• 4386b6a chore(deps): bump github.com/gruntwork-io/terratest from 1.0.0 to 1.0.1 (#265)
• 568de18 chore(deps): bump golang.org/x/crypto from 0.52.0 to 0.53.0 (#259)
• 55603f8 chore(deps): bump golang.org/x/image from 0.41.0 to 0.42.0 (#261)
• d258686 chore(deps): bump golang.org/x/image from 0.42.0 to 0.43.0 (#264)
• 772e789 chore(deps): bump golang.org/x/net from 0.55.0 to 0.56.0 (#260)
• e92e687 feat(ci): add e2e test job and /health endpoint (#256)
• 7b2fabd fix(SEC-6): bound image decoding and import payloads, add security headers (#266)
• 92426a0 fix(SEC-7): harden refresh-token storage and session lifecycle (#267)

v1.10.2

Changelog

• 9779776 fix(SEC-5): enforce inventory item ownership on pack content write (#255)

v1.10.1

Changelog

• 35d1035 chore(deps): bump alpine from 3.23.4 to 3.24.0 (#253)
• b7ff129 chore(deps): bump github.com/quic-go/quic-go (#251)
• 57614da docs: refresh CLAUDE.md, agents.md and PATTERNS.md to current architecture (#250)
• 99fdacd fix(SEC): update API_SECRET in release workflow (#254)
• fa6524a fix: startup config hardening and JWT key-func centralisation (#252)

v1.10.0

Changelog

• 88c9d00 chore(deps): bump golang.org/x/crypto from 0.51.0 to 0.52.0 (#247)
• 8d3f101 chore(deps): bump golang.org/x/image from 0.40.0 to 0.41.0 (#246)
• 0ceb87c chore(deps): bump golang.org/x/net from 0.54.0 to 0.55.0 (#245)
• 3283769 chore(deps): bump golangci/golangci-lint-action from 9.2.0 to 9.2.1 (#244)
• 63e1167 feat(packs): anonymous LighterPack import endpoints (#248)

v1.9.1

Changelog

• e87c5bf fix: handle source-pack deletion race in duplicate endpoint (#242)

v1.9.0

Changelog

• 678baf2 feat: add duplicate pack endpoint (#241)

v1.8.2

Changelog

• d7899e0 chore(deps): bump alpine from 3.23.3 to 3.23.4 (#234)
• cde7cbe chore(deps): bump github.com/lib/pq from 1.11.2 to 1.12.1 (#229)
• ba6f52f chore(deps): bump github.com/lib/pq from 1.12.1 to 1.12.3 (#230)
• 0204a91 chore(deps): bump golang.org/x/crypto from 0.49.0 to 0.50.0 (#232)
• 88ddfff chore(deps): bump golang.org/x/image from 0.37.0 to 0.38.0 (#228)
• 2f616a4 chore(deps): bump golang.org/x/image from 0.38.0 to 0.39.0 (#231)
• 01fc18d chore(deps): bump golang.org/x/image from 0.39.0 to 0.40.0 (#238)
• f6ac11a chore(deps): bump golang.org/x/net from 0.52.0 to 0.53.0 (#233)
• a00dbe3 chore(deps): bump golang.org/x/net from 0.53.0 to 0.54.0 (#236)
• 01b9ee6 chore(deps): bump terratest from 0.56.0 to 1.0.0 (#239)
• a738d85 docs: Share App url (#226)

v1.8.1

Changelog

• 2397cc1 Fix EXIF orientation for iPhone photo uploads (#225)
• 6f9036f chore(deps): bump docker/login-action from 3 to 4 (#220)
• e524456 chore(deps): bump golang.org/x/image from 0.36.0 to 0.37.0 (#224)
• 202478b chore(deps): bump golang.org/x/net from 0.51.0 to 0.52.0 (#222)
• dd78092 chore(deps): bump golang.org/x/time from 0.14.0 to 0.15.0 (#221)

v1.8.0

Changelog

• 10c24de docs: update contribution workflow and consolidate code references (#218)
• 582bbce feat: add inventory merge endpoint (#219)
• 7996dab feat: add pack_count field to inventory items (#217)