@uns-kit/core 3.0.43 → 3.0.44
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/MIGRATIONS.md +18 -0
- package/package.json +1 -1
package/MIGRATIONS.md
CHANGED
|
@@ -9,6 +9,24 @@ Agents must inspect the application's existing ownership and shutdown flow
|
|
|
9
9
|
before editing it. The examples below describe the intended behavior, not a
|
|
10
10
|
mechanical search-and-replace operation.
|
|
11
11
|
|
|
12
|
+
## 3.0.44 - Bounded operator JWKS recovery
|
|
13
|
+
|
|
14
|
+
When crossing `<3.0.44` to `>=3.0.44`, ordinary application handlers, standalone
|
|
15
|
+
shutdown and existing input/output journals need no migration. Applications using
|
|
16
|
+
declared operator endpoints receive this correction from `@uns-kit/api`; consume
|
|
17
|
+
the reviewed published API/core versions together with a frozen dependency lock.
|
|
18
|
+
No application-specific retry wrapper, configuration flag or new Controller
|
|
19
|
+
capability is needed.
|
|
20
|
+
|
|
21
|
+
The shared verifier coalesces key refreshes and retries a transient public-key GET
|
|
22
|
+
once within a bounded deadline. It does not retry an operator request or business
|
|
23
|
+
effect, extend the original key-cache lifetime, or skip parent revocation checks.
|
|
24
|
+
Persistent key-source failure remains a503 and a revoked parent remains denied.
|
|
25
|
+
Keep existing service permissions, launch identity, keys, queues, pause policies
|
|
26
|
+
and durable command receipts; never resume a paused target or broaden scopes to
|
|
27
|
+
make an upgrade pass. Follow the normal reviewed upgrade procedure after npm
|
|
28
|
+
publication. See the [operator contract and regression examples](../../docs/operator-api.md#bounded-jwks-recovery-3044).
|
|
29
|
+
|
|
12
30
|
## 3.0.43 - Shared managed operator route registration
|
|
13
31
|
|
|
14
32
|
This entry describes the prepared 3.0.43 release; npm publication is separate. Existing ordinary
|