From d005c868af54796615978473741cb0c575c6d5da Mon Sep 17 00:00:00 2001 From: chen21019 Date: Wed, 9 Sep 2026 19:05:59 +0800 Subject: [PATCH] docs: align current release coordinates --- README.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/README.md b/README.md index 160938d..dbe7362 100644 --- a/README.md +++ b/README.md @@ -8,7 +8,7 @@ PastureStack is an independent community effort to preserve, audit, and moderniz ## Project status -The `v0.3.0` maintenance layer is based on the preserved upstream `v0.2.2` boundary. It uses Go modules and the exact Go 1.27.0 toolchain, deterministic Release packaging, bounded JSON requests, HTTP resource timeouts, scoped Vault storage operations, neutral product naming, race tests, a 70% critical-path coverage gate, and a loopback local-key API integration test. Production deployment remains disabled until the matching Server integration has passed in an isolated VM. +The current `v0.3.1` maintenance release is based on the preserved upstream `v0.2.2` boundary and is consumed by PastureStack Server `v1.6.410`. It uses Go modules and the exact Go 1.27.0 toolchain, deterministic Release packaging, bounded JSON requests, HTTP resource timeouts, scoped Vault storage operations, neutral product naming, race tests, a 70% critical-path coverage gate, and a loopback local-key API integration test. The `none` backend is an insecure compatibility fixture and is disabled by default. It can be enabled only with `--allow-insecure-none-backend` or `ALLOW_INSECURE_NONE_BACKEND=true` for an explicitly reviewed legacy migration. The supported Server path uses the `localkey` backend on the loopback interface. @@ -24,7 +24,7 @@ make package make ci ``` -For the reviewed compatibility release, set `VERSION_OVERRIDE=v0.3.0` and `SOURCE_DATE_EPOCH=0`. Packaging produces `secret-delivery-api-0.3.0-linux-amd64.tar.xz`. PastureStack Server downloads the flat asset from its matching GitHub Release, verifies its SHA-256 digest, and installs the executable under the preserved `secrets-api` compatibility name. Operators do not need to host an artifact mirror. +For the reviewed compatibility release, set `VERSION_OVERRIDE=v0.3.1` and `SOURCE_DATE_EPOCH=0`. Packaging produces `secret-delivery-api-0.3.1-linux-amd64.tar.xz`. PastureStack Server downloads the flat asset from its matching GitHub Release, verifies its SHA-256 digest, and installs the executable under the preserved `secrets-api` compatibility name. Operators do not need to host an artifact mirror. See [COMPATIBILITY.md](COMPATIBILITY.md), [SECURITY.md](SECURITY.md), [ORIGIN.md](ORIGIN.md), and [THIRD-PARTY-NOTICES.md](THIRD-PARTY-NOTICES.md).