v0.29.0

Changelog

• 8e2a673 Introduce Keyring: single deep module for envelope encryption (#124)
• 9e1c3e8 chore(release): prepare v0.29.0 (#140)
• ad54244 fix(deps): patch Dependabot alerts (#125)
• 144e7cd refactor!: drop MySQL support, standardize on PostgreSQL (#122)
• 85162fa refactor(auth): deepen Client + Token domain, delete shallow auth/service package (#138)
• f750999 refactor(auth/http): collapse audit wiring behind an Authorizer (#126)
• 0fc324b refactor(http): deepen cursor pagination behind Paginate helper (#139)
• 776dd80 refactor(test): remove database driver selection (#123)
• c8d39c2 refactor: collapse internal/crypto into keyring package (#133)
• c5a61e5 refactor: deepen Keyring seam and remove dead weight (#128)
• 97aecea refactor: deepen keyring seam, transit domain, and audit signing (#127)
• bb84bdb refactor: deepen module seams — inline SHA256, add NullSigner, move repository interfaces to domain (#137)
• c142e3d refactor: deepen three architectural seams across auth and metrics (#129)
• 3940458 refactor: extract metrics into usecase decorator layer (#130)
• cef8d84 refactor: fold Algorithm into TransitKey and unify Algorithm type (#132)
• 91d060f refactor: replace metrics decorator chain with HTTP middleware and Track helper (#136)
• f98125f refactor: replace sync.Once+sync.Map boilerplate with generic once[T] helper (#134)
• 56da378 refactor: unify rate limiter stores behind a generic seam (#131)
• d376052 test(keyring): add unit test surface for production Keyring implementation (#135)

v0.28.0

Changelog

• 66aeb90 feat(auth): Add client secret rotation with automatic token revocation
• 50d1e9d feat(auth): Implement strict capability validation for policies (#111)
• df94395 feat(auth): fix rate limiter goroutine lifecycle and resource leaks (#112)
• 6f6eb2b feat(auth): implement audit log filtering by client_id (#118)
• 311de44 feat(config): Make Metrics Server timeouts configurable (#114)
• e91a4f2 feat(database): Expose DB connection max idle time configuration (#113)
• 6d63f2b feat(tokenization): add individual key retrieval API by name (#116)
• bea48a1 feat(tokenization): delete tokenization keys by name (#117)
• d5316a9 feat(tokenization): implement atomic batch tokenize and detokenize endpoints (#119)
• b5665a6 feat(transit): add individual key retrieval API (#115)
• 2d6b9c1 feat(transit): change transit key deletion to use name instead of UUID (#120)
• b8cf165 release: v0.28.0 and configurable tokenization batch limit (#121)

v0.27.0

Changelog

• 176b801 conductor(setup): Add conductor setup files (#103)
• 4f6920f docs(release): Prepare documentation for v0.27.0 (#110)
• d0b208b feat(auth): implement token revocation and purge mechanism (#106)
• ffe9896 feat(http): Implement HTTP request body size limit middleware (#105)
• c113137 feat(secrets): Implement global secret value size limit (#107)
• 093f398 feat(secrets): Implement strict secret path validation (#109)
• e3018fe feat(transit): implement AEAD context support in transit engine (#104)
• 49800af refactor: improve tokenization module (#102)
• fa206cf refactor: remove dead code and optimize slice allocation in transit module (#101)

v0.26.0

Changelog

• 6de0a36 feat: add purge commands for transit and tokenization keys (#99)

v0.25.0

Changelog

• c715979 chore: add security scanning tools to CI and development workflow (#93)
• d5751e7 feat: add secret purge command and improve server configuration (#95)
• 5ffa980 feat: implement cursor-based pagination (#96)
• 6fb09bc refactor(test): separate integration tests (#94)

v0.24.0

Changelog

• 9548b21 feat(tokenization): introduce secure deterministic tokenization (#92)

v0.23.0

Changelog

• 6cf8d0f feat(config): add configuration validation (#82)
• 21f8d4e refactor(cli): standardize command implementation and reduce boilerplate (#80)
• f79bd7c refactor(crypto): move KMSService to domain and improve key security (#83)
• be85b72 refactor(database): improve transaction management and connection pool settings (#84)
• ee3ba7b refactor(http): improve middleware, metrics server, and error wrapping (#85)
• f058368 refactor(httputil): improve error handling (#86)
• e6211ec refactor(internal): inject context into DI container (#81)
• 84dd6e5 refactor(tokenization): remove unused TxManager and improve test utilities (#88)
• 87aecb8 refactor(transit): improve security, atomicity, and validation rules (#89)
• c64abf6 refactor: improve metrics provider, secret security and domain logic (#87)
• c877a54 release: v0.23.0 (#91)

v0.22.1

Changelog

• e31e82c fix(build): Correct build metadata injection in Goreleaser (#79)

v0.22.0

Changelog

• 0569366 feat: Release v0.22.0 (#78)

v0.21.0

Changelog

• 19788b8 feat(cli): Release v0.21.0 and refactor command structure (#77)