0.7.1 (2026-08-03)
- ci: make the docker dependency cache work and unbreak Dockerfile.bins (99b2b9a)
- ci: make the docker dependency cache work and unbreak Dockerfile.bins (a49e04d), closes #265 #266
- db: pin profile DID matching with lone non-key fixture and boundary matrix (b4016dc), closes #298
- node: add a shared owner/name slug validator (#272) (51d82de)
- node: bound the slug owner by NAME_MAX, not the DID limit (#272) (27b0495)
- node: fail a sync row terminally when a non-directory holds the owner path (2e664b7)
- node: make a stalled sync queue visible, and fix two test claims (9aa4c17)
- node: move the attempted_at migration to v17, clear of two open branches (fbc5868)
- node: prove the mirror path is inside repos_dir before running git (#272) (3ca9473)
- node: reject a malformed slug at the notify boundary (#272) (c587a40)
- node: reset a peer's reachability gate when an announce changes its http_url (#270) (1964f88)
- node: reset a peer's reachability gate when an announce changes its http_url (#270) (e2560ee)
- node: stamp every dequeued sync row so a stuck one yields the batch (6e64d0d)
- node: stop a peer-supplied repo slug from escaping repos_dir (#272) (c70b1df)
- node: validate the queued slug before the worker derives a path (#272) (9f00e24)
- review: correct two comment claims and guard two more wrong shapes (#270) (811ad50)
- review: stop the dequeue overclaiming, and pin the starvation premise (457be11)
- strict DID matching in get_profile (acb4714)
- strict DID matching in get_profile (13b565b)
- target stored did on profile update aliases (9836c3a)
0.7.0 (2026-07-22)
- gl: actually verify certificate signatures in gl cert show (b0a2ed8)
- gl: doctor warns when a shell alias shadows the gl binary (0765c42)
- gl: address review findings — non-fatal DID check, exact-host loopback, detached HEAD, multi-URL remotes, command-aware unalias (3fa38dc)
- gl: anchor cert --verify to a trusted issuer; pin canonical payload form (c681af7)
- gl: detect gitlawb remotes beyond origin in gl status (2d88937)
- gl: doctor treats a reachable local node as configuration, not failure (94c61f7)
- gl: make gl init's push guidance match the repo's actual state (cb42a48)
- warn about the oh-my-zsh gl alias at install time (e3df51d)
0.6.0 (2026-07-22)
- core: honor wildcard capabilities in Ucan::can, matching is_attenuated_by (#200) (b6877a6)
- gl: point doctor's version check at Gitlawb/node, not the frozen Gitlawb/releases repo (#198) (98d728c)
- node: carry full owner DID on ref-update wire event (#144) (#145) (69a62e5)
- node: gate /hooks and sibling read surfaces leaking private repo metadata (#94) (#113) (ee8d7c0)
- strip Cf bidi/format controls in terminal-bound error sanitizers (#183) (#188) (b07d41e)
0.5.1 (2026-07-10)
- bounties: add tests for claim_bounty repo-read gate (#160) (#169) (6bafaa6)
- deps: bump crossbeam-epoch to 0.9.20 for RUSTSEC-2026-0204 (#162) (#163) (67ad2b8)
- node,git: bound a hung served git with a total-duration timeout (#62) (#165) (cd67718)
- node: bound list_ref_certificates with LIMIT and add upsert to prevent unbounded growth (#147) (#149) (6b5e5bc)
- node: gate POST /api/v1/sync/trigger and rate-limit the peer-sync routes (#82) (#161) (d00d89a)
- node: rate-limit repo/agent creation per client IP to stop DID-farm spam floods (#180) (dfcaa22)
- release: build aarch64-musl natively on arm64 runners, replace retired macos-13 (#155) (6cff528)
- visibility: gate repo-scoped read surfaces on visibility (#120) (#157) (26bc3f6)
0.5.0 (2026-07-05)
- gl: sign the CLI's /ipfs/pins reads under the #134 auth gate (#146) (20d6848)
- node,git-remote: gate receive-pack advertisement, sign client fetch/push (#119) (6f36fc0)
- node,gossip: route gossip HTTP through the no-redirect client (#93) (#140) (563c456)
- node: close two spam-vector root causes (trust upsert + ungated push) (#152) (2df6ff9)
- node: gate GET /ipfs/{cid} on reachable allowed-set, not deny-set (#126) (#133) (466a550)
- node: gate the ref-updates feeds on read visibility (#112, #114) (#143) (4891db3)
- node: prefer canonical repo row over mirror row in get_repo (#124) (#141) (6c95592)
- remote: include HTTP error response body (#137) (09a0cb2)
- repos: log the cause when repo create fails (#103) (2620e97)
0.4.0 (2026-06-30)
- agent profiles (display name, bio, avatar, social links) (#23) (09a3397)
- db: versioned schema migrations with idempotent backfill (#21) (927e4d0)
- encrypted replication for private subtrees (B1/B2/B3) for #18 (#36) (5ff7af8)
- git-remote-gitlawb: add --version and --help flags (#30) (3a401eb)
- gitlawb-attest: External Attestation v1 for ref-update certs (#20) (924bccd)
- node: blind recipient identities at rest and gate B1 by repo readability (#40) (abdc775)
- node: enforce per-route authorization across the REST and GraphQL surface (#87) (2202b00)
- node: graceful shutdown + Prometheus metrics endpoint (#22) (2ce4da9)
- node: iCaptcha proof-of-intelligence gate on create_repo + register (#108) (adc20f9)
- node: iCaptcha-aware repo propagation gate with quarantine (#125) (8b9ceec)
- node: owner-only push enforcement behind GITLAWB_ENFORCE_OWNER_PUSH (#31) (#68) (0a15e76)
- node: peer partial-mirrors for repos with private subtrees (#35) (e365a57)
- node: pin the per-push object delta instead of re-enumerating the whole repo (#90) (1af4fdf)
- node: replication enforcement (Phase 2) for #18 (#34) (8680d0f)
- node: signature-gated agent self-deregister (#29) (#63) (ff492b4)
- node: subtree content withholding (Phase 3) for #18 (#28) (61b3830)
- path-scoped repository visibility (Phase 1) for #18 (#25) (6abaf1d)
- per-DID rate limiting on creation endpoints (10/hour) (#13) (b12c6bc)
- sync: auto-register as replica with origin after successful mirror (#56) (c03c9af)
- api: blob endpoint returns 400/404 instead of 500 on bad paths (#37) (b61a1bd)
- core: route seed access through the zeroizing wrapper (#41) (#64) (c9f43b0)
- core: zeroize the derived X25519 secret (#65) (#91) (2f6611a)
- gl: paginate gl-clone Arweave recovery and make /encrypted-blobs parsing schema-strict (#49) (#70) (2153b0b)
- infra: drop fly idle_timeout 600 -> 120 (#38) (a2217bf)
- node: anchor the real old_sha and issue a per-ref certificate (#72) (6809201)
- node: close under-withholding via full ref scope and full-history classification (#42) (#84) (3e1e904)
- node: dedupe mirror and canonical repo rows on list surfaces (#6) (#73) (3e8e333)
- node: enforce path-scoped visibility on the REST read API (#52) (e37ea7f)
- node: fail closed when a recipient DID can't be resolved (#47) (#67) (abc9ad0)
- node: gate fork_repo on per-caller path-scoped visibility (#98) (#109) (6ae316c)
- node: gate GET /ipfs/{cid} on per-caller path-scoped visibility (#110) (#128) (174f25a)
- node: gate repo-listing and stats surfaces on visibility (#97, #99, #101, #104) (#111) (828dd27)
- node: make Tigris repo hydration resilient to corrupt archives & failed writes (#54) (7a99d0f)
- node: preserve promisor mirror mode on unknown withheld-paths lookup (#48) (#69) (96fcfdb)
- node: reap leaked git child processes (#53) (#61) (803d83e)
- node: reject malformed path globs with non-trailing or empty-segment wildcards (#74) (#75) (3d880cd)
- node: skip withheld-walk when no path-scoped rule can withhold (#60) (338ff83)
- release: give crates explicit versions for release-please (#129) (788a868)
- release: use simple release-type + generic Cargo.toml updaters (#130) (12bfb1b)
- security: gate webhook creation through the public-host validator (#81) (#92) (f28fa02)
- security: reject non-public peer URLs + prune poisoned peers (#78) (a8cc33a)