release: v0.14.0

Author: lance0

AGENTS.md

@@ -235,7 +235,7 @@ docker compose logs prefixd   # View daemon logs
 
 Services: nginx (80), prefixd (8080), dashboard (3000), postgres (5432), gobgp (50051/179), prometheus (9091), grafana (3001)
 
-## Current State (v0.13.0)
+## Current State (v0.14.0)
 
 Completed:
 - HTTP API with mode-aware auth and rate limiting

CHANGELOG.md

@@ -5,7 +5,7 @@ All notable changes to prefixd will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
-## [Unreleased]
+## [0.14.0] - 2026-03-20
 
 ### Added
 
@@ -826,7 +826,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - Safelist prevents mitigation of protected infrastructure
 - Guardrails block overly broad mitigations
 
-[Unreleased]: https://github.com/lance0/prefixd/compare/v0.13.0...HEAD
+[0.14.0]: https://github.com/lance0/prefixd/compare/v0.13.0...v0.14.0
 [0.13.0]: https://github.com/lance0/prefixd/compare/v0.12.0...v0.13.0
 [0.12.0]: https://github.com/lance0/prefixd/compare/v0.11.0...v0.12.0
 [0.11.0]: https://github.com/lance0/prefixd/compare/v0.10.1...v0.11.0

CONTRIBUTING.md

@@ -214,8 +214,8 @@ Releases are tagged from `main`:
 # Update version in Cargo.toml
 # Update CHANGELOG.md
 # Commit and tag
-git tag v0.13.0
-git push origin v0.13.0
+git tag v0.14.0
+git push origin v0.14.0
 ```
 
 CI builds and publishes:

Cargo.lock

@@ -1,6 +1,6 @@
 [package]
 name = "prefixd"
-version = "0.13.0"
+version = "0.14.0"
 edition = "2024"
 rust-version = "1.85"
 description = "BGP FlowSpec routing policy daemon for DDoS mitigation"

Cargo.toml

@@ -641,7 +641,7 @@ All state-changing operations logged:
 ```json
 {
   "status": "ok",
-  "version": "0.13.0",
+  "version": "0.14.0",
   "auth_mode": "none"
 }
 ```
@@ -651,7 +651,7 @@ All state-changing operations logged:
 ```json
 {
   "status": "ok",
-  "version": "0.13.0",
+  "version": "0.14.0",
   "pop": "iad1",
   "uptime_seconds": 86400,
   "active_mitigations": 3,

FEATURES.md

@@ -69,7 +69,7 @@ docker compose ps
 
 # Test the API
 curl http://localhost/v1/health
-# {"status":"ok","version":"0.13.0","auth_mode":"none"}
+# {"status":"ok","version":"0.14.0","auth_mode":"none"}
 ```
 
 ### 4. Create an admin account
@@ -258,7 +258,7 @@ Database migrations run automatically on startup. See **[docs/upgrading.md](docs
 
 ## Project Status
 
-Current version: **v0.13.0**
+Current version: **v0.14.0**
 
 - Core functionality stable and tested
 - Real-time dashboard with WebSocket updates, toast notifications, and mitigation detail views

README.md

@@ -4,7 +4,7 @@ What's next for prefixd.
 
 ---
 
-## Current Status: v0.13.0
+## Current Status: v0.14.0
 
 Core functionality is stable:
 
@@ -22,7 +22,7 @@ See [CHANGELOG](CHANGELOG.md) for version history.
 
 ## Ship Blockers (Before v1.0)
 
-These blockers map directly to the `v1.0` release gates below. Keep both sections in sync when statuses change.
+These blockers map directly to the "Production Ready" release gates below. Keep both sections in sync when statuses change.
 
 ### Real Router Testing
 
@@ -141,7 +141,7 @@ These blockers map directly to the `v1.0` release gates below. Keep both section
 
 ---
 
-## v1.0: Production Ready (Interop + Stability)
+## Production Ready (Interop + Stability)
 
 Target: Validated with real routers, stable API, production-proven. Operators trust prefixd before we build new features.
 
@@ -206,7 +206,7 @@ Target: Validated with real routers, stable API, production-proven. Operators tr
 
 ---
 
-## v1.1: Operator Ergonomics
+## Operator Ergonomics (shipped in v0.12.0)
 
 Target: Quality-of-life for operators during active incidents. These are the features that reduce time-to-action during attack waves.
 
@@ -233,7 +233,7 @@ Target: Quality-of-life for operators during active incidents. These are the fea
 
 ---
 
-## v1.2: Native BGP Speaker (rustbgpd)
+## Native BGP Speaker (rustbgpd)
 
 Replace the GoBGP container dependency with [rustbgpd](https://github.com/lance0/rustbgpd) crates embedded directly into the prefixd binary. Eliminates the separate process, gRPC client overhead, proto compilation, and container orchestration. prefixd becomes a single binary that speaks BGP natively.
 
@@ -268,7 +268,7 @@ Replace the GoBGP container dependency with [rustbgpd](https://github.com/lance0
 
 ---
 
-## v1.3: Multi-Signal Correlation
+## Multi-Signal Correlation (shipped in v0.14.0)
 
 **The killer feature.** Combine weak signals from multiple detectors into high-confidence decisions. Start with one high-value adapter.
 
@@ -296,7 +296,7 @@ Example: FastNetMon says UDP flood at 0.6 confidence + router CPU spiking + host
 
 ---
 
-## v1.5+: Integrations + Advanced FlowSpec
+## Integrations + Advanced FlowSpec
 
 Broader ecosystem integration and advanced capabilities for large-scale deployments.
 
@@ -308,7 +308,7 @@ Broader ecosystem integration and advanced capabilities for large-scale deployme
 - [ ] LDAP/AD auth backend (group-to-role mapping)
 - [ ] RADIUS/ISE auth backend (attribute mapping to roles)
 - [ ] Customer self-service portal (per-customer dashboards for MSSPs)
-- ~~Native BGP speaker~~ — moved to v1.2 (rustbgpd integration)
+- ~~Native BGP speaker~~ — moved to its own milestone (rustbgpd integration)
 
 ### Advanced FlowSpec
 

ROADMAP.md

@@ -1081,7 +1081,7 @@ Lightweight liveness check. No authentication required. Does not query database
 ```json
 {
   "status": "ok",
-  "version": "0.13.0",
+  "version": "0.14.0",
   "auth_mode": "none"
 }
 ```
@@ -1106,7 +1106,7 @@ Full operational health. Requires authentication.
 ```json
 {
   "status": "healthy",
-  "version": "0.13.0",
+  "version": "0.14.0",
   "pop": "iad1",
   "uptime_seconds": 86400,
   "bgp_sessions": {

docs/api.md

@@ -1,6 +1,6 @@
 # Benchmark Results
 
-Last updated: v0.13.0
+Last updated: v0.14.0
 
 ## How to Run