CHANGELOG.md

Changelog

All notable changes to Lockspire will be documented in this file.

The format is based on Keep a Changelog, and versions follow Semantic Versioning.

1.2.0 (2026-05-27)

Features

• harden host integration boundary (#40) (2e80589)

1.1.2 (2026-05-27)

Bug Fixes

• align support truth for CIBA and JAR (#36) (fc6baa6)

1.1.1 (2026-05-27)

Bug Fixes

• isolate test config for logout worker (#32) (ffd922a)

1.1.0 (2026-05-26)

Added

• Automatic DPoP-Nonce challenge and retry support across the shipped Lockspire-owned DPoP surfaces and the canonical Phoenix protected-route pipeline.
• Dynamic Client Registration and RFC 7592 management support for the existing logout propagation metadata fields.
• A narrow client_secret_jwt direct-client authentication slice on the shipped Lockspire-owned endpoints that already reuse the shared verifier.
• Shared remote-jwks_uri diagnostics plus mix lockspire.doctor remote-jwks and matching admin support surfaces for the shipped private_key_jwt and JARM remote-key story.

Changed

• The canonical advanced-setup support contract now aligns runtime behavior, admin wording, doctor output, and public docs for remote jwks_uri, mTLS setup, logout propagation, and the protected-route plug pipeline.
• The public support posture now reflects one near-complete embedded-provider story rather than an actively expanding feature roadmap; new milestones should be trigger-based and evidence-driven.

Fixed

• Release-truth docs now describe the shipped Phoenix protected-route plug pipeline and stop treating it as future work.

Features

• 91-01: add shared remote jwks diagnostics taxonomy (13064b7)
• 91-01: align jarm remote jwks diagnostics (0fbd363)
• 91-01: normalize private_key_jwt remote jwks incidents (93c71a5)
• 91-02: add remote jwks doctor surface (445f511)
• 91-02: surface remote jwks truth in admin client detail (a26dce5)

Bug Fixes

• phase-91: wire remote jwks operator diagnostics (ce8f313)

1.0.0 (2026-05-07)

Added

• Canonical Phoenix-first install and onboarding documentation.
• Executable onboarding proof for the generated host seam.
• Release-readiness CI, package metadata, changelog, and workflow scaffolding.

Changed

• The checked-in 1.0.0 release-candidate contract keeps mix.exs, .release-please-manifest.json, CHANGELOG.md, and the expected root tag lockspire-v1.0.0 on one embedded-library release story before authenticated publish proof begins.
• Hex-facing package metadata, release configuration, and changelog posture now describe one lockspire package and defer authenticated publish evidence to the protected hex-publish lane.

0.2.0 (2026-04-24)

Features

• 09-02: extend preview posture contract coverage (70107c8)

Bug Fixes

• 10-01: restore contributor gate proof (20d53f7)

0.1.2 (2026-04-24)

Bug Fixes

• release: make recovery lane publishable (cd5e40d)
• release: run hex tasks before docs (046a14c)

0.1.1 (2026-04-24)

Bug Fixes

• 08-01: harden trusted release lane contract (ed52b00)
• ci: bootstrap test db in fast lane (bcb2ce3)
• ci: provide postgres for fast checks (6b9d761)
• test: avoid brittle key detail id assertion (a550cbb)