Reġistru tal-bidliet

Maħruġ fil-15 ta' Lulju 2026

• +Iżżid metadata ta' cache, prokura u respons-digest ibbażati fuq standards opt-in
• +Jipprova tagħbija mill-ġdid ta' snapshot live awtentikata, rollback, kontrolli tal-integrità, u persistenza tal-bidu mill-ġdid
• +Iżżid evidenza riproduċibbli FIPS-backend u ebusija ta' runtime nattiva wiesgħa

Maħruġ fl-14 ta' Lulju 2026

• +Iżid għeluq gradwali u limitat tal-konnessjonijiet u trasferiment mingħajr waqfien wara verifika li l-proċess il-ġdid ikun lest
• +Iżid attivazzjoni stretta tas-sokits systemd b'validazzjoni eżatta tas-sokits tas-smigħ li ntirtu
• +Ilesti t-tisħiħ tal-parser HTTP/1 u jsaħħaħ il-ġestjoni taċ-ċiklu tal-ħajja tas-servizzi fl-isfond

Maħruġ fit-13 ta’ Lulju, 2026

• +Iżżid profili tas-sigurtà tar-rispons HTTP fakultattivi u CORS validati konxji tat-talba
• +Stabbilizza l-eżempji tal-politika Wasm runnable u t-testijiet meħtieġa mill-bieb tar-rilaxx
• +Issaħħaħ l-intestaturi tal-identità mgħoddija, l-analiżi tal-header, u l-gwida mill-ġdid għal-limiti tal-kapaċità

Maħruġ fit-12 ta' Lulju, 2026

• +Iżżid eżempji ta' migrazzjoni li jistgħu jitħaddmu għal iRules, OpenResty, HAProxy/SPOE, u impjiegi ta' politika ta' stil VCL
• +Iżid it-trasport ACME limitat, l-iskedar ARI, id-dijanjostika taċ-ċiklu tal-ħajja, u l-aċċettazzjoni ta’ termini espliċiti
• +Jibbies kont ACME li jistgħu jiġu rkuprati u transazzjonijiet taċ-ċertifikati, konfini tal-ħażna, u pubblikazzjoni ta' snapshot

Maħruġ fil-11 ta’ Lulju 2026

• +Jibda l-konfini fakultattiv WASI Preview 1 b’permessi espliċiti għall-arloġġ u l-każwalità, filwaqt li l-importazzjonijiet jiġu miċħuda b’mod awtomatiku
• +Jirrestawra l-GeoIP għal klijenti fdati u jappoġġja d-databases ikkombinati tal-pajjiż u ASN ta’ CIRCL
• +Isaħħaħ il-protezzjoni SSRF u l-ikkupjar tal-flussi, snapshots awtentikati, TLS, PHP-FPM, is-servizz statiku u l-limiti tar-riżorsi Wasm

Maħruġ fl-10 ta’ Lulju 2026

• +Iżid il-preview fakultattiv tal-ABI Proxy-Wasm b’validazzjoni espliċita tal-ispazju tal-ismijiet tas-sejħiet tal-host
• +Jiċħad b’mod deterministiku sejħiet tal-preview mhux appoġġjati qabel ma jaslu għand upstream
• +Isaħħaħ ir-routing strett tal-host, l-ammissjoni limitata, il-fiduċja fil-konfigurazzjoni, il-ħażna tal-cache, GeoIP u l-kompressjoni

Maħruġ fid-9 ta’ Lulju 2026

• +Iżid identitajiet espliċiti ta’ WebAssembly module ikkompilati skont plugin digest, ABI, hook feature surface u verżjoni Fluxheim
• +Iżid baġits ta’ ammissjoni cache-hook għal kull vhost taħt il-limitu cache-hook fuq livell ta’ proċess
• +Jestendi Wasm metrics limitati, viżibbiltà tal-admin status u kopertura cross-family live-chain regression

Maħruġ fit-8 ta’ Lulju 2026

• +Iżid host calls limitati għall-komponenti cache-key għal varjanti tal-klassi tal-apparat mobile u desktop
• +Iżid cache-store TTL, tag u stored-header metadata fissi mingħajr mutazzjoni arbitrarja ta’ response-header
• +Iżid kopertura live listener għall-iżolament tal-varjanti, range-cache slices, skadenza TTL u limiti fail-closed tal-metadata

Maħruġ fis-7 ta’ Lulju 2026

• +Iżid Wasm hooks live u nattivi HTTP/1 għal cache-lookup u cache-store taħt il-preview ABI limitata fluxheim_policy_v1
• +Iżid riżultati tal-cache għal continue, pass, bypass, skip-store u deny mingħajr ma jesponi raw cache keys, TTLs, tags jew metadata maħżuna
• +Jifred il-limiti ta’ ammissjoni tal-cache-hook u jżomm l-aggregazzjoni cache-store bir-regola most-restrictive-wins

Maħruġ fis-6 ta’ Lulju 2026

• +Iżid native HTTP/1 route-decision Wasm hooks live taħt il-preview ABI limitata fluxheim_policy_v1
• +Iżid għażla simbolika ta’ friegħi konfigurati għal rotot canary u mirror mingħajr aċċess upstream dinamiku jew shadow-target
• +Iżomm l-infurzar ta’ Fluxheim ACL, rate-limit, concurrency, body-limit, redirect u header-policy wara l-għażla tar-rotta

Maħruġ fil-5 ta’ Lulju 2026

• +Iżid Wasm hooks native HTTP/1 live għal request-header u response-header għal attachments vhost u route
• +Iżomm il-header-hook ABI simboliku b’mutazzjonijiet sintetiċi permessi flok aċċess mhux ipproċessat għal headers jew body
• +Japplika Wasm header-hooks fuq livell vhost u fallback response header policy għal tweġibiet PHP-FPM fallback

Maħruġ fl-4 ta’ Lulju 2026

• +Jgħaqqad live native HTTP/1 access-decision hooks b’ordni ta’ prijorità, kompożizzjoni first-deny-wins u mġiba fail-closed
• +Jinforza limiti ta’ ammissjoni tal-eżekuzzjoni fuq livell ta’ proċess, plugin u attachment

Maħruġ fit-3 ta’ Lulju 2026

• +Iżid il-crate tal-workspace fluxheim-wasm bħala fakultattiv
• +il-feature gates wasm, wasm-proxy-abi u wasm-wasi huma mitfija b’mod predefinit u inkompatibbli ma’ privacy-mode
• +Fajls tal-plugins Wasm jitgħabbew biss minn roots assoluti approvati; symlinks, fajls mhux regolari u moduli kbar wisq jiġu miċħuda
• +Manifesti tipizzati tal-plugins Wasm jivvalidaw ABI, fażi, fail-mode, path u limiti tas-sandbox qabel it-tagħbija
• +Iżid eżekuzzjoni Wasmtime limitata b’limiti għal fuel, memorja, tabella, istanza, compile-timeout, compile-worker u watchdog għal kull sejħa
• +Iżid kopertura smoke reali tas-sandbox Wasm għal eżekuzzjoni b’suċċess, traps, ċaħda tat-tkabbir tat-tabella u ċaħda ta’ manifest fail-open mhux sigur

Maħruġ fit-30 ta’ Ġunju 2026

• +Jibdel l-isem tas-saff temporanju tal-proxy nattiv għal native_proxy u jneħħi l-esportazzjoni mill-ġdid antika tal-kompatibbiltà tal-proxy mill-builds normali.
• +Imexxi d-DTOs tat-talbiet u r-riżultati amministrattivi tal-load balancer lejn il-crate fluxheim-load-balancer.
• +Iħassar l-adapters tal-għerq inattivi ta’ żmien Pingora u kodiċi qadim u diżattivat tat-testijiet tar-runtime li l-builds normali m’għadhomx jużaw.
• +Jikkonsolida l-ħażna tal-konfigurazzjoni tal-proxy nattiv sabiex ir-reloads jaġġornaw l-istess snapshot użat mill-mogħdijiet amministrattivi tal-cache u tal-load balancer.
• +Iżid kopertura ta’ regressjoni għall-overflow ta’ body chunked nattiv HTTP/1 u jorbot l-images tat-testijiet tal-osservabbiltà ma’ tags deterministiċi.

Maħruġ fit-30 ta’ Ġunju 2026

• +Iżomm it-runtime normali fuq il-mogħdijiet Fluxheim-owned listener, TLS, HTTP/1, HTTP/2, WebSocket, cache, load-balancer, admin, metrics, stream, u background service
• +Iċċaqlaq auth, metrics, OpenBao cache, discovery, load-balancer cookie, u TLS private-key secret buffers lejn it-sanitization crate
• +Jibbies PHP-FPM/static fallback routing, indiġenu disk-cache purge qfil, same-key disk-cache serialization mutazzjoni, u nattiva HTTP/2 upstream authority immaniġġjar
• +Iżżid l-appoġġ peer-fill shared-secret u teħtieġha għal non-loopback plaintext peer-fill URLs
• +Jestendi l-kopertura tat-test privacy, observability, WordPress, load-balancer, smoke-image, randomized-port, u release-gate għal-linja stabilization

Maħruġ fit-29 ta’ Ġunju 2026

• +Tneħħi l-aħħar Pingora runtime/listener/TLS adapter crates minn Fluxheim build profiles normali
• +Iżomm il-proxy nattiv HTTP/1 u HTTP/2 runtime bħala l-mogħdija normali għall-konfigurazzjonijiet appoġġjati route, cache, load-balancer, TLS, WebSocket, admin, u metrics.
• +Wajers indiġeni admin cache purge, stale disk-cache purge, cache tfittxija oġġett, u live load-balancer stats/mutation handlers għal Fluxheim-owned runtime mankijiet
• +Aġġornamenti dependency-policy rilaxx xtiebi hekk default normali, sħiħ, tarf, PHP, privatezza, RPM, sors, u kontenituri builds ifallu jekk jikkompilaw Pingora crates
• +Jibbies il-previżjonijiet u t-tindif nattiv ta' admin cache b'tqabbil ta' host normalizzat, previews ta' regex-route, evitazzjoni tal-illokkjar tal-purge stale, stat ta' konfigurazzjoni fail-closed live, u kuntesti tal-bini route-proxy ittajpjat

Maħruġ fit-29 ta’ Ġunju 2026

• +Iżżid parità nattiva proxy-cache għall-memorja, disk tas-sistema tal-fajls, storage-bin, disk encrypted, OpenBao Transit, u memory+disk tiering
• +Jappoġġja l-varjanti Vary u request-header, sserving obsolet, serraturi tal-cache, range slice cache, peer-fill, u baġits għall-protezzjoni tal-oriġini
• +Jibbies l-ammissjoni tal-cache għal Authorization, HEAD bypass, upstream Age stripping, aritmetika tal-iskadenza kkontrollata, u only-if-cached miss
• +Iżżid il-parità tat-tindif tal-cache nattiva għall-indiċijiet tal-memorja u tad-disk flimkien mal-purges eżatti, bl-ingrossa, tal-prefiss, tat-tikketta, tal-wildcard, route-scope, u s-slee.
• +Iżżid l-osservabilità nattiva tal-cache għall-counters proxy, gauges tal-memorja/disk, istogrammi tat-tiftix tal-cache, u IDs span traceparent riġenerati

Maħruġ fit-28 ta’ Ġunju 2026

• +Adds native runtime dispatch for proxy, admin, metrics, stream, UDP, and load-balancer refresh tasks
• +Adds metrics token-file loading with zeroizing storage and constant-time bearer-token checks
• +Adds native HTTP/1 proxy runtime startup for plaintext, rustls, OpenSSL, and trusted downstream PROXY protocol listeners
• +Jirrotta konnessjonijiet downstream HTTP/2 TLS magħżula lejn l-adapter multi-stream nattiv
• +Isaħħaħ upgrades WebSocket nattivi, fallimenti stream-local ta’ HTTP/2, rate-limit sharding u ħażna zeroizing tal-ġisem tat-talba

Maħruġ fl-24 ta’ Ġunju 2026

• +Moves cache request policy and local-static cache keys into the Pingora-independent fluxheim-cache crate
• +Moves PHP-FPM parsing, params, path mapping, static offload, error-page policy, and keep-alive pooling into fluxheim-php-fpm
• +Adds native memory local-static cache adapters for route and vhost static-web serving
• +Adds native upstream PROXY protocol v1/v2 send support and native Host router construction
• +Adds native runtime manifest and launch-plan evidence for services, listeners, background tasks, and policy rows

Maħruġ fit-23 ta’ Ġunju 2026

• +Imexxi plaintext upstream HTTP/2 forwarding ġo the HTTP/1 nattiv proxy path għal h2c/prior-knowledge origins
• +Iżid pooled nattiv upstream H2 connections b’ limitat stream capacity u metodu-sikur retry wara pre-rispons pooled-handle failure
• +Jappoġġja TLS ALPN-negotiated upstream HTTP/2 b’ existing upstream TLS/SNI/CA politika
• +Iżżid espliċita, diżattivata b'mod awtomatiku h2c Aġġornament ta' riżerva għall-oriġini http1-and-http2 tat-test sempliċi
• +Jillimita nattiv upstream H2 handshakes, stream-slot waits, keepalive pings, u setup timeouts

Maħruġ fit-23 ta’ Ġunju 2026

• +Imexxi inherited globali/vhost kompressjoni politika ġo the HTTP/1 nattiv proxy u rotta proxy
• +Jgħaqqad root/vhost/rotta header-politika inheritance ġo nattiv rotta proxy construction
• +Imexxi sikur forwarded-client-IP ownership, trusted-chain append, regex rewrites, ACLs, concurrency, u rate limiti onto the nattiv path
• +Iżid nattiv ACME HTTP-01 challenge servizz, mirroring tat-traffiku, auth-talba, u rotta-scoped gRPC validation

Maħruġ fil-21 ta’ Ġunju 2026

• +Moves route-level native response compression onto the HTTP/1 route proxy through fluxheim-compression
• +Moves proxy.error_pages onto native HTTP/1 proxy fallback paġni backed by fluxheim-web

Maħruġ fil-21 ta’ Ġunju 2026

• +Adds native HTTP/1 route static-web serving backed by fluxheim-web
• +Adds route request-header mutation, response rewrites, static upstream round-robin, and static upstream weights to the native route proxy

Maħruġ fil-21 ta’ Ġunju 2026

• +Adds native route redirect actions with safe {uri}, {path}, and {query} expansion
• +Moves route body limits and response-header overlays onto native HTTP/1 route proxy responses

Maħruġ fil-21 ta’ Ġunju 2026

• +Adds native HTTP/1 route-proxy execution for exact, prefix, and fallback routes with method filters and safe rewrite handling
• +Adds native-http1-proxy-candidate ringieli għal evidenza ta 'qtugħ ta' runtime sabiex l-imblokkaturi tal-kompatibilità li fadal huma espliċiti

Maħruġ fl-20 ta’ Ġunju 2026

• +Jippromwovi the HTTP/2 nattiv downstream safety preview to cutover-ready wara focused parity tests
• +Jagħmel the representative runtime nattiv cutover report blocker-free għal simple HTTP/1, HTTP/2, admin, metriki, stream, u UDP configurations

Maħruġ fl-20 ta’ Ġunju 2026

• +Cuts stream and UDP proxy service startup over to Fluxheim-owned native task boundaries
• +Adds cancellation-safe native shutdown waiting and abort-on-cancel background task joins

Maħruġ fl-20 ta’ Ġunju 2026

• +Starts native admin and metrics serving behind Fluxheim-owned server primitives
• +Iwebbes nattiv background handles so dropped critical handles abort instead of silently detaching tasks

Maħruġ fl-20 ta’ Ġunju 2026

• +Adds NativeBackgroundSupervisor għal Fluxheim-owned kompitu fl-isfond orchestration
• +Adds critical task watchdog support and hardens shutdown delivery edge cases

Maħruġ fl-20 ta’ Ġunju 2026

• +Adds native runtime cutover evidence gates and fluxheim-config-tester --runtime-cutover
• +Moves remaining Pingora exception targets to a documented multi-release exit plan while keeping policy gates active

Maħruġ fid-19 ta’ Ġunju 2026

• +Adds explicit pingora-compat feature gating għal the remaining compatibility runtime boundary
• +Moves rustls/OpenSSL downstream TLS SNI, certificate storage, reload, PEM parsing, and native HTTP/1 TLS listener previews into Fluxheim-owned code

Maħruġ fid-19 ta’ Ġunju 2026

• +Ikompli the Pingora-exit slice by shrinking the remaining root compatibility surface għal proxy, cache, u runtime paths
• +Jaqsam nattiv saħħa kontrolli ġo HTTP/gRPC, database, exec, u TCP/TLS transport helper modules b’ stricter probe bounds

Maħruġ fid-19 ta’ Ġunju 2026

• +Ineħħi the direct Pingora dependency minn fluxheim-load-balancer
• +Iżid Fluxheim-owned limitat HTTP/1.1 u h2 gRPC saħħa kontrolli attivi b’ politika coverage to prevent Pingora reintroduction

Maħruġ fid-19 ta’ Ġunju 2026

• +Iżid HTTP/1 nattiv.1 proxy cutover readiness planning on ServerPlan
• +Ifalli closed għal compatibility-biss proxy features such as auth subrequests, mirroring, redirects, strip/rewrite transforms, u advanced load-balancer politika

Maħruġ fit-18 ta’ Ġunju 2026

• +Iżid a Fluxheim-owned HTTP/2 nattiv upstream client primitive b’ limitat headers, bodies, trailers, u deadlines
• +Iżid h2 client/server tests għal trailer preservation, oversized responses, stream resets, u flow-kontroll timeout behavior

Maħruġ fit-18 ta’ Ġunju 2026

• +Iżid nattiv rustls/OpenSSL upstream TLS u mTLS support to the staged HTTP/1.1 proxy path
• +Iżid ordered static upstream failover għal metodu sikurs plus limitat no-follow TLS material reads u hostname-politika coverage

Maħruġ fit-18 ta’ Ġunju 2026

• +Iżid limitat HTTP/1 nattiv.1 upstream connection pooling għal sikur content-length u no-body origin responses
• +Iżid keepalive pool sizing, upstream idle timeout handling, conservative no-reuse guards, u real socket reuse/expiry tests

Maħruġ fit-18 ta’ Ġunju 2026

• +Iżid reusable HTTP/2 nattiv connection primitives b’ limitat talba-body collection u rispons trailer support
• +Iwebbes HTTP/2 rispons lifetime, handler timeout, DATA capacity handling, prohibited headers/trailers, u talba-body zeroization

Maħruġ fis-17 ta’ Ġunju 2026

• +Iżid the HTTP/2 nattiv runtime preview gate u h2 stack probe b’ limitat headers, URI, body, streams, frames, buffers, u rapid reset politika
• +Iżid HTTP/2 preview smoke coverage u extends HTTP/1 nattiv behavior coverage għal HTTP/1.0 keep-alive/close semantics

Maħruġ fis-17 ta’ Ġunju 2026

• +Iżid the limitat HTTP/1 nattiv upstream client u staged proxy nattiv handler għal plain static upstreams
• +Iżid proxy nattiv candidate inventory, Fluxheim-owned proxy headers, privacy-mode behavior, u fail-closed eligibility għal unsupported politika layers

Maħruġ fis-17 ta’ Ġunju 2026

• +Iżid the HTTP/1 nattiv connection/listener runtime over Tokio IO u staged nattiv static-fajl adapter
• +Jimmappja server limiti ġo HTTP/1 nattiv politika u adds socket tests għal keep-alive, body framing, shutdown, fajl statikus, slow clients, u connection caps

Maħruġ fis-17 ta’ Ġunju 2026

• +Iżid Fluxheim-owned HTTP/1.0/HTTP/1.1 talba-head parsing, talba-body framing classification, Host validation, persistence handling, u chunked decoding
• +Iżid downstream HTTP/1 politika defaults u imwebbes nattiv parser boundaries għal futuri runtime cutover work

Maħruġ fis-16 ta’ Ġunju 2026

• +Moves server bootstrap planning, listener inventory, service intent, background-task intent, HTTP/2 policy, PROXY protocol policy, and private Unix socket planning into fluxheim-server
• +Iżomm the current runtime as an explicit compatibility adapter waqt li nattiv server/listener work continues

Maħruġ fis-16 ta’ Ġunju 2026

• +Adds fluxheim-tls as the downstream TLS listener planning u provider-politika boundary
• +Moves TLS listener plans, SNI selection, wildcard matching, ALPN/cipher/curve policy, and rustls/OpenSSL provider checks into the TLS crate
• +Iwebbes TLS feature gates, SNI fallback behavior, PROXY v2 signature validation, u trusted PROXY CIDR validation

Maħruġ fis-16 ta’ Ġunju 2026

• +Iżid the first dedicated fluxheim-headers boundary għal header politika helpers
• +Imexxi rewrite algorithms, forwarded-header handling, hop-by-hop talba politika, u repeated-header joining ġo Fluxheim-owned header code
• +Imexxi stream PROXY protocol byte parsers ġo fluxheim-protocol and tightens privacy/proxy CIDR validation

Maħruġ fil-15 ta’ Ġunju 2026

• +Imexxi shared kompitu fl-isfond lifecycle primitives ġo fluxheim-runtime
• +Moves OTLP metrics export, ACME certificate reload control, admin snapshot validation state, and rollback decisions into Fluxheim-owned runtime/snapshot code
• +Iwebbes the lokali ċertifikat reload kontroll socket u privat backend filtering

Maħruġ fil-15 ta’ Ġunju 2026

• +Adds fluxheim-stream as the internal TCP stream proxy runtime boundary
• +Imexxi stream upstream selection, PROXY protocol parsing/writing, sors politika, DNS-rebinding guards, byte accounting, u timeout handling behind Fluxheim-owned stream code

Maħruġ fl-14 ta’ Ġunju 2026

• +Moves cache key identity, object envelopes, disk index management, storage-bin helpers, tag handling, and cache storage interfaces into fluxheim-cache
• +Iżżid it-testijiet u l-gradi tar-rilaxx li jinfurzaw il-miri tat-tneħħija tad-dipendenza ta' Pingora waqt ġirjiet normali ta' cargo test

Maħruġ fl-14 ta’ Ġunju 2026

• +Jibda the first concrete 1.6.x implementation ħarġa wara the foundation tag
• +Removes pingora-load-balancing/pingora-ketama from full and load-balancer image profiles, restores 1.6 load-balancer image builds, and moves TCP health checks plus request-key extraction behind Fluxheim-owned boundaries

Maħruġ fl-14 ta’ Ġunju 2026

• +Bdiet il-linja tal-pedament tal-ħruġ tal-Pingora 1.6.x filwaqt li żammet l-imġieba tar-runtime mhux mibdula
• +Żied modularity politika validation, legacy oversized-fajl exceptions, runtime baseline capture, u performance evidence capture
• +Żied ħarġa-gated Pingora dependency exceptions, runtime parity fixtures, u the extraction dependency graph
• +Added initial fluxheim-runtime and fluxheim-server boundary crates plus typed politika proof primitives

Ġunju 2026

• +Introduced the enterprise HTTP/TCP load-balancer line with focused binaries, images, runtime member and weight controls, persistence, health checks, queueing, and migration docs
• +Expanded Fluxheim-owned runtime boundaries across HTTP, stream proxying, load balancing, background tasks, cache interfaces, observability, config, and shared crates
• +Żied ġestit affinity cookies, service discovery, active u protocol-aware saħħa kontrolli, restart-persistent state, u runtime backend mutation kontrolli
• +Added UDP beta guardrails, cache origin-protection budgets, ARM/Linux and macOS developer assets, config tester archives, and broad proxy/cache/PHP-FPM security hardening

Maħruġ fil-25 ta’ Mejju 2026

• +Production proxy parity release with trusted-proxy-aware ACLs, local rate limits, concurrency limits, bounded queues, and edge policy metrics
• +gzip, Zstandard, and Brotli response compression with vhost/route overrides and cache-safe Vary handling
• +Load-balancer resilience, TLS/protocol parity, PROXY protocol v1/v2, upstream mTLS, HTTP/2 kontrolli, u gRPC pass-through

Maħruġ fit-23 ta’ Mejju 2026

• +Managed php-fpm process supervision under the existing php-fpm feature, while external php-fpm remains the default
• +Respawn watchdog, limitat backoff, SIGTERM-qabel-SIGKILL teardown, sanitized environment, u privat generated pool state
• +Auditable [vhosts.php.fpm] mode = "managed" config surface għal privat sockets, worker għadd, process manager modes, slowlog, temp paths, u pool fajls
• +Expanded WordPress PHP-FPM smoke coverage across external, ġestit-static, ġestit-dynamic, ġestit-ondemand, u ġestit-respawn modes
• +Recommended Wolfi PHP image now installs php-8.5-fpm and uses managed php-fpm container config by default

Maħruġ fit-23 ta’ Mejju 2026

• +FIPS/ISO-required configs fail closed for unsupported internal cryptography, managed ACME, and local cache encryption
• +Provider-backed admin auth, numeric-local-loopback OTLP exception, and OpenBao Transit cache encryption evidence boundary
• +New compliance evidence template and release evidence package sections for regulated reviews

Maħruġ fit-22 ta’ Mejju 2026

• +Rustls/AWS-LC backend kandidat kapaċi FIPS permezz tls-rustls-fips
• +FIPS u ISO/IEC 19790 rustls profil aliases, config examples, diagnostics, u validation script

Maħruġ fil-21 ta’ Mejju 2026

• +Validazzjoni TLS OpenSSL FIPS/ISO kapaċi permezz tls-openssl-fips u provider diagnostics
• +FIPS deployment guide, config fixtures, validation script, ħarġa evidence, u OWASP Top 10 2025 baseline

Maħruġ fl-20 ta’ Mejju 2026

• +PHP-FPM keepalive pooling, upstream retry/failover, u talba body diska spooling għal safer operation under load
• +WordPress routing/cache preset plus PHP application recipes for common framework and forum deployments
• +PHP metriki u OpenTelemetry attributes, X-Accel-Redirect, X-Sendfile, u X-Accel-Expires support

Maħruġ fit-18 ta’ Mejju 2026

• +fluxheim-acme standalone companion binary għal ċertifikat renewal, status, u ACME reload socket signalling
• +fluxheim-config-tester standalone binary għal validating configs in CI u kontenitur entrypoints mingħajr starting the gateway
• +ACME reload Unix socket — live ċertifikat pickup mingħajr gateway restart
• +Profil ġdid tal-bini profile-php — proxy + web + php-fpm + tls-rustls + security
• +Security hardening improvements across the request pipeline

Maħruġ fis-16 ta’ Mejju 2026

• +Opt-in PHP-FPM FastCGI bridge for WordPress-style front-controller applications
• +Strett script resolution u limitat FastCGI talba/rispons handling
• +Browser-validated WordPress proxy/PHP cookie compatibility fixes
• +PHP-FPM can isservi static assets minn same root waqt li routing PHP to FPM
• +New php-fpm Cargo feature (implies prokura and web)

Maħruġ fl-14 ta’ Mejju 2026

• +Shared ingress/TLS feature-graph split — focused cache and proxy profiles are now TLS/ACME-capable
• +New profile-cache-edge — cache without static web module
• +New profile-proxy-edge — focused reverse proxy edge
• +Official focused container images for cache and proxy profiles

Mejju 2026

2026

• + TLS politika profili
• + Multi-certificate rustls SNI
• + ACME ġestit ċertifikat issuance u renewal
• + EAB-capable issuers (Actalis u others)
• + File-backed TLS sigrieti
• + acme-init ggwidata għodda bootstrap emittent
• + Packaged ċertifikat renewal unit systemds

2026

• + Virtual host routing by Host header b’ predefinit-vhost fallback
• + Route-level static, proxy, and redirect actions
• + Static file serving with MIME detection, ETag, conditional 304, byte ranges
• + Whole-vhost and route-level reverse proxying
• + rustls TLS with SNI, static/bought certificate support
• + Trasmissjoni bla periklu ACME HTTP-01 tal-isfida
• + Admin control-plane with bearer-token auth and brute-force throttling
• + Secure talba/rispons header politika
• + Mhux obbligatorju HTTP → HTTPS redirect b’ sikur Host validation
• + Unità Systemd, ippakkjar RPM
• + Rootless Podman container images