Skip to content

release 0.9.0: the A0 re-seal, and what this release does not change - #20

Merged
rgfaber merged 2 commits into
mainfrom
titan/a0-release
Oct 29, 2026
Merged

rgfaber merged 2 commits into
mainfrom
titan/a0-release

Conversation

@rgfaber

@rgfaber rgfaber commented Oct 29, 2026

Copy link
Copy Markdown
Contributor

Refs macula-php#17, macula-php#19.

Proposed tag: v0.9.0 (the roll the Supervisor set; no 0.8.x backport). The last tag is v0.9.0-rc.6, and Composer takes the version from the tag, so no manifest bump is needed.

  • CHANGELOG: the A0 pin and the structural-floor change that was in Unreleased go into the 0.9.0 section under "Changed since this entry was written", because the section is dated 19 October and rewriting that date would rewrite the flag-day record.
  • A "What this release does not change" subsection: sealing is the default where the provider names a key and only there, and a procedure served with no policy is advertised open — verified in src/Pool.php:304-310, where ?ServePolicy $policy = null reaches libmacula as nil, which serves any caller (macula-php#19 has the stream half).
  • README: the sealing row now says what a sealed_required refusal does to a caller.

No tag, no publish.

libmacula is pinned to macula-go v0.29.0, the release that carries the A0
contract: a call a keyed provider refuses sealed_required is resealed to the key
in the refusal's signed tbs and answered, instead of the caller failing on a
stale keyless candidate.

The 0.9.0 section already existed and was never tagged, so the entry goes there,
under "Changed since this entry was written", with the structural-floor change
that was sitting in Unreleased. What this release does not change is stated too:
sealing is the default where the provider names a key and only there, and a
procedure served with no policy is advertised open (macula-php#19).

Refs macula-php#17, macula-php#19.
…eeds an opt-in

Review of #20:
- the 0.9.0 intro still said libmacula is macula-go v0.27.0 while the pin and the
  entry below say v0.29.0, and the heading was dated 19 October on a release
  first tagged now. The intro names v0.29.0 with the flag-day version as history,
  and the heading carries the day it is released.
- kemAdvertise is false by default (src/Pool.php:48), so two pools on default
  arguments talk in the clear. Without that the note reads as more than it does.
- the unary half of the open default is filed as macula-php#21 and named beside
  macula-php#19 in the note.

Refs macula-php#17, macula-php#19, macula-php#21.
@rgfaber
rgfaber merged commit fb6adfc into main Oct 29, 2026
5 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant