Changelog — page 12

New features, improvements, and fixes in the Fluxzero SDK.

2026

Aug 17, 2026

Aug 17, 2026 · 1.239.5

1.239.5 (2026-08-17)

Dependency updates

bump ch.qos.logback:logback-classic from 1.6.1 to 1.6.2 (GitHub)

ch.qos.logback:logback-classic: 1.6.1 -> 1.6.2 changelog

Aug 17, 2026

Aug 17, 2026 · 1.239.4

1.239.4 (2026-08-17)

Dependency updates

bump io.fluxzero:lychee-maven-plugin from 0.2.7 to 0.2.9 (GitHub)

io.fluxzero:lychee-maven-plugin: 0.2.7 -> 0.2.9 changelog

Aug 16, 2026

Aug 16, 2026 · 1.239.3

1.239.3 (2026-08-16)

Bug Fixes

tracking: keep minimum index inclusive (GitHub)

When a restarted consumer caught up from an older persisted position, a fully filtered batch advanced its exclusive cursor onto the inclusive lower bound and skipped that boundary message. Retain the predecessor cursor until the boundary has actually been scanned.

Aug 14, 2026

Aug 14, 2026 · 1.239.2

1.239.2 (2026-08-14)

Bug Fixes

web: redact sensitive request diagnostics (GitHub)

Keep request headers, query parameters and arbitrary web metadata out of durable error reports. Reuse a bounded path-only representation for logs, metrics and gateway failures so browser ceremony data is not exposed by diagnostic defaults.

Changes

Merge pull request #289 from fluxzero-io/fix/webrequest-error-redaction (GitHub)

fix(web): redact sensitive request diagnostics

Aug 14, 2026

Aug 14, 2026 · 1.239.1

1.239.1 (2026-08-14)

Dependency updates

bump org.apache.maven:apache-maven from 3.9.15 to 3.9.16 (GitHub)

org.apache.maven:apache-maven: 3.9.15 -> 3.9.16

Aug 12, 2026

Aug 12, 2026 · 1.239.0

1.239.0 (2026-08-12)

Features

websocket: make runtime ingress capacity configurable (GitHub)

Expose per-session concurrency and retained message and byte limits while preserving bounded protocol-liveness isolation. Resolve operational properties before SDK defaults and reject invalid client configurations before connecting.

Bug Fixes

websocket: isolate liveness with bounded parallel dispatch (GitHub)

Acknowledge pong deadlines on the protocol path and fence timeout callbacks by registration identity. Dispatch up to three complete SDK runtime messages per session concurrently while retaining fragmented, submitted, active, and pending data within the ingress bound.

Enable isolation for every SDK runtime client, preserve explicit connector executor affinity, and keep sparse transport anomaly metrics opt-in.

Changes

Merge pull request #284 from fluxzero-io/fix/websocket-liveness (GitHub)

fix(websocket): isolate liveness with bounded parallel dispatch
Merge branch 'main' into fix/websocket-liveness (GitHub)

Aug 12, 2026

Aug 12, 2026 · 1.238.3

1.238.3 (2026-08-12)

Dependency updates

bump org.junit:junit-bom from 6.1.2 to 6.1.3 (GitHub)

org.junit:junit-bom: 6.1.2 -> 6.1.3 changelog

Aug 12, 2026

Aug 12, 2026 · 1.238.2

1.238.2 (2026-08-12)

Dependency updates

bump com.github.luben:zstd-jni from 1.5.7-12 to 1.5.7-13 (GitHub)

com.github.luben:zstd-jni: 1.5.7-12 -> 1.5.7-13

Aug 11, 2026

Aug 11, 2026 · 1.238.1

1.238.1 (2026-08-11)

Dependency updates

bump io.fluxzero.tools:fluxzero-maven-plugin from 1.14.0 to 1.15.0 (GitHub)

io.fluxzero.tools:fluxzero-maven-plugin: 1.14.0 -> 1.15.0 changelog

Aug 7, 2026

Aug 7, 2026 · 1.238.0

1.238.0 (2026-08-07)

Features

web: support multi-value request cookies (GitHub)

Parse every Cookie header value in logical wire order so split HTTP/2 and HTTP/3 cookie crumbs remain visible. Preserve first-match lookups through the default allow policy while offering explicit conflict rejection with redacted failures.

Bug Fixes

web: preserve multi-value cookie consistency (GitHub)

Use the shared all-header parser for cookie parameters and isolate builder header lists so copied requests cannot mutate their source.
correct request header case contract (GitHub)

WebRequest has always exposed headers through a case-insensitive map; align the public Javadoc with that observable behavior.

Documentation

web: document request cookie conflict handling (GitHub)

Explain HTTP/2 and HTTP/3 cookie-field splitting, case and ordering rules, backward-compatible first-match lookup, and fail-closed guidance for security-sensitive cookies.

Tests

web: cover existing request cookie contracts (GitHub)

Lock down first-match selection, case behavior, header-map replacement, serialization, and the public mutable builder cookie list before extending multi-value parsing.

Aug 7, 2026

Aug 7, 2026 · 1.237.2

1.237.2 (2026-08-07)

Dependency updates

bump org.eclipse.jetty:jetty-bom from 12.1.11 to 12.1.12 (GitHub)

org.eclipse.jetty:jetty-bom: 12.1.11 -> 12.1.12 changelog
bump io.fluxzero.tools:fluxzero-maven-plugin from 1.13.1 to 1.14.0 (GitHub)

io.fluxzero.tools:fluxzero-maven-plugin: 1.13.1 -> 1.14.0 changelog

Aug 7, 2026

Aug 7, 2026 · 1.237.1

1.237.1 (2026-08-07)

Dependency updates

bump io.fluxzero:lychee-maven-plugin from 0.2.6 to 0.2.7 (GitHub)

io.fluxzero:lychee-maven-plugin: 0.2.6 -> 0.2.7 changelog

Aug 5, 2026

Aug 5, 2026 · 1.237.0

1.237.0 (2026-08-05)

Features

websocket: identify replaced sessions on reconnect (GitHub)

Pass each closed session to its session-pool replacement and advertise the previous negotiated session id in the new websocket handshake. Legacy runtimes safely ignore the new header.

This allows a supporting runtime to remove one matching stale session only after its replacement has connected.

Bug Fixes

websocket: close gracefully before aborting (GitHub)

Mark unhealthy JDK sessions unavailable immediately, enqueue a close frame without blocking the caller, and allow one second for the peer close before aborting the transport. This lets runtime close callbacks arrive while retaining a bounded fallback for stuck transports.

Code Refactoring

websocket: keep replacement factory internal (GitHub)

Keep the existing public supplier constructor as the only external SessionPool constructor. The replacement-aware function remains package-private to avoid an unnecessary public overload and null-call ambiguity.

Aug 4, 2026

Aug 4, 2026 · 1.236.0

1.236.0 (2026-08-04)

Features

authentication: version user ID metadata (GitHub)

Store regular users by User.getName() from defaults version 2026.08.04 and resolve those values through getUserById. Preserve compatibility reads and writes for older defaults, and encode the system identity explicitly as the reserved $system ID.

Documentation

agent: explain versioned defaults workflow (GitHub)

Define compatibility behavior, threshold and override precedence, PropertySource selection, migration safety, documentation, and verification expectations for future SDK default changes.

Code Refactoring

authentication: centralize metadata value decoding (GitHub)

Keep JSON encoding knowledge inside Metadata while allowing new defaults to resolve raw user IDs. Object-shaped candidates are validated before mapping, and invalid JSON falls back to the raw string path without penalizing ordinary IDs.

Aug 4, 2026

Aug 4, 2026 · 1.235.0

1.235.0 (2026-08-04)

Code Refactoring

authentication: remove incomplete OIDC provider (GitHub)

Standard OIDC userinfo resolves the current token identity but does not define arbitrary user lookup, system identity, or application role semantics. Remove the public provider and user type rather than presenting a partial implementation as a general SDK contract.

Aug 4, 2026

Aug 4, 2026 · 1.234.3

1.234.3 (2026-08-04)

Dependency updates

bump io.fluxzero.tools:fluxzero-maven-plugin from 1.12.2 to 1.13.1 (GitHub)

io.fluxzero.tools:fluxzero-maven-plugin: 1.12.2 -> 1.13.1 changelog

Aug 3, 2026

Aug 3, 2026 · 1.234.2

1.234.2 (2026-08-03)

Bug Fixes

logging: avoid stale handler context on console errors (GitHub)

Console errors logged after a handler invocation completed inherited the publisher's handler and invocation metadata from the triggering message. Remove those two inherited fields before overlaying live correlation data, so active invocations remain attributable while post-invocation logs no longer point at the wrong handler.

Aug 3, 2026

Aug 3, 2026 · 1.234.1

1.234.1 (2026-08-03)

Dependency updates

bump io.fluxzero.tools:fluxzero-maven-plugin from 1.11.2 to 1.12.2 (GitHub)

io.fluxzero.tools:fluxzero-maven-plugin: 1.11.2 -> 1.12.2 changelog

Jul 31, 2026

Jul 31, 2026 · 1.234.0

1.234.0 (2026-07-31)

Documentation

project-files: delegate dev guidance to CLI (GitHub)

Add version-aligned local-development guidance to the Java and Kotlin agent bundles. Keep SDK behavior in the synced manuals while treating fz help and fz dev config as authoritative for the independently evolving CLI and dev server.

Jul 30, 2026

Jul 30, 2026 · 1.233.0

1.233.0 (2026-07-30)

Documentation

getting-started: recommend native CLI packages (#261) (GitHub)

Document Homebrew for macOS and WinGet for Windows, including package-manager upgrades and native installer fallbacks. Clarify that Java is required by generated applications rather than the native CLI itself.

© 2026 Fluxzero