Release endpoint-libs 3.0.1 with secret-safe WebSocket logs - #47
Merged
Merged
Conversation
added 5 commits
September 13, 2026 12:55
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This prepares
endpoint-libs 3.0.1; crates.io already contains 3.0.0, so the corrected artifact needs a new patch version.WebSocket transport logging exposed complete request and response bodies, authentication protocol headers, public error parameters, and handshake URIs. This keeps useful request metadata while logging only method, sequence, byte counts, status, and parameter counts; unexpected frames are also reported by kind without formatting their payload.
The repository now follows the fleet no-lockfile policy. The stale npm lockfile is removed and generated lockfiles are ignored. The remaining
package.jsonandtsconfig.jsonwere not an active JavaScript surface: they existed only for a Cloudflare Containers example whose Worker source and Wrangler config are already absent. That dead toolchain and its stale README instructions are removed; endpoint-libs remains a Rust workspace and has no Cloudflare Workers dependency. The unrelated root Dockerfile that tried to build a nonexistent library binary is also removed. The disabled, never-working Docker/Fly bundle is removed as well: it disagreed on ports and certificate handling, referenced a removed feature, and had no live deployment target. The functional localws_echo_serverexample remains. Release tooling now allows the repository’s actual defaultmasterbranch.Validation:
cargo fmt --checkcargo clippy --all-targets --all-features -- -D warningscargo test --all-features(106 unit, 5 transport integration, 0 failed; 2 doctests ignored)scripts/check-chain.sh --quick(the only reported inconsistency is an unrelated local EndpointValidator worktree resolving two endpoint-libs copies; remote EndpointValidator PR 6 does not contain that dependency state)cargo build --release --example ws_echo_server --features wsNo crate release or deployment is included. After owner review and merge, the existing release script must be run with
--skip-bumpso it publishes the reviewed 3.0.1 manifest instead of advancing to 3.0.2.