Skip to content

release: v0.1.4 - #107

Merged
hemju merged 2 commits into
mainfrom
release-v0.1.4
Aug 10, 2026
Merged

release: v0.1.4#107
hemju merged 2 commits into
mainfrom
release-v0.1.4

Conversation

@hemju

@hemju hemju commented Aug 10, 2026

Copy link
Copy Markdown
Owner

Release v0.1.4.

Contents

Release gates (all green, run in sequence from a clean tree on this branch)

  1. ./gradlew clean check
  2. ./gradlew :threadmill-store-postgres:test :threadmill-store-redis:test --rerun-tasks
  3. ./gradlew :threadmill-soak:soakRegression --rerun-tasks
  4. ./gradlew :threadmill-example:run
  5. ./gradlew javadoc
  6. ./gradlew productionCheck — including dependencySecurityScan (OSV, zero findings; npm audit zero) and artifactInspection
  7. jar tf threadmill-core-0.1.4.jar — no test classes; META-INF/LICENSE + NOTICE present

After merge: tag the merge commit v0.1.4 and push the tag to trigger the Release workflow (signs all modules, publishAggregationToCentralPortal, automatic publication).

hemju added 2 commits August 10, 2026 17:06
PostgreSQL JDBC 42.7.12 (GHSA-j92g-9f8w-j867), Netty 4.1.136.Final
(GHSA-558v-64gr-wgg4), Micrometer 1.15.12 (GHSA-g3pr-3p32-fp23), a
test-classpath constraint on tools.jackson.core:jackson-databind 3.1.5
(GHSA-5gvw-p9qm-jgwh; Spring Boot 4.0.7's BOM still pins 3.1.4 — drop
the constraint when the springBoot pin advances), and dashboard
lockfile refreshes for nanoid (GHSA-28wg-ghj8-5hjv, GHSA-2v37-7h3g-55p8)
and postcss (GHSA-fxqj-rqcc-2cmp, GHSA-r28c-9q8g-f849). Dependency
locks and SHA-256 verification metadata regenerated; npm audit and the
OSV scan report zero known vulnerabilities.
@hemju
hemju merged commit 4cd5862 into main Aug 10, 2026
1 check passed
@hemju
hemju deleted the release-v0.1.4 branch August 10, 2026 17:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant