Prepare 1.6.22 native admin metrics slice

Author: eldryoth

CHANGELOG.md

@@ -7,6 +7,33 @@ Fluxheim follows semantic versioning once `1.0.0` is released. Before `1.0.0`,
 minor versions may still change configuration shape, feature names, and runtime
 behavior when the change improves security or project direction.
 
+## 1.6.22 - 2026-06-20
+
+### Changed
+
+- Start the native admin/metrics serving slice of the Pingora-exit line.
+- Keep production admin and metrics compatibility conservative while native
+  control-plane HTTP handlers and parity tests are introduced behind Fluxheim-owned
+  server primitives.
+- Update release metadata, RPM metadata, and container tag documentation for
+  `v1.6.22`.
+
+### Security
+
+- Preserve auth-first admin behavior as the required compatibility contract for
+  native admin/control-plane serving.
+- Mark config-derived admin, ops-socket, and metrics service plans native-ready
+  only after adding native handler parity tests.
+- Harden native background handles so dropped handles abort instead of silently
+  detaching tasks, document critical-handle abort behavior, and make shutdown
+  initiation results `#[must_use]`.
+- Reject newline-bearing native runtime cutover evidence paths before generating
+  TOML fixtures.
+- Document that native admin target matching intentionally uses raw,
+  percent-encoded paths.
+- Keep the native runtime cutover blocker gate active for stream, UDP, HTTP/2,
+  and final proxy-runtime blockers while this slice advances.
+
 ## 1.6.21 - 2026-06-20
 
 ### Changed

Cargo.lock

@@ -1,6 +1,6 @@
 [package]
 name = "fluxheim"
-version = "1.6.21"
+version = "1.6.22"
 edition = "2024"
 rust-version = "1.96"
 license = "EUPL-1.2"

Cargo.toml

@@ -344,8 +344,8 @@ Official container images are published to GitHub Container Registry and Quay:
 - `quay.io/valkyoth/fluxheim`
 
 Release tags use the same profile/OS suffixes on both registries, for example
-`v1.6.21-wolfi`, `v1.6.21-cache-wolfi`, `v1.6.21-proxy-wolfi`,
-`v1.6.21-load-balancer-wolfi`, and `v1.6.21-php-wolfi`.
+`v1.6.22-wolfi`, `v1.6.22-cache-wolfi`, `v1.6.22-proxy-wolfi`,
+`v1.6.22-load-balancer-wolfi`, and `v1.6.22-php-wolfi`.
 
 Release note for `1.5.15`: the signed git tag `v1.5.15` is the canonical code
 tag. The GitHub Release page is published under `v1.5.15-release` because the

README.md

@@ -1,6 +1,6 @@
 [package]
 name = "fluxheim-cache"
-version = "1.6.21"
+version = "1.6.22"
 edition = "2024"
 rust-version = "1.96"
 license = "EUPL-1.2"

crates/fluxheim-cache/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "fluxheim-common"
-version = "1.6.21"
+version = "1.6.22"
 edition = "2024"
 rust-version = "1.96"
 license = "EUPL-1.2"

crates/fluxheim-common/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "fluxheim-compression"
-version = "1.6.21"
+version = "1.6.22"
 edition = "2024"
 rust-version = "1.96"
 license = "EUPL-1.2"

crates/fluxheim-compression/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "fluxheim-config"
-version = "1.6.21"
+version = "1.6.22"
 edition = "2024"
 rust-version = "1.96"
 license = "EUPL-1.2"

crates/fluxheim-config/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "fluxheim-geoip"
-version = "1.6.21"
+version = "1.6.22"
 edition = "2024"
 rust-version = "1.96"
 license = "EUPL-1.2"

crates/fluxheim-geoip/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "fluxheim-headers"
-version = "1.6.21"
+version = "1.6.22"
 edition = "2024"
 rust-version = "1.96"
 license = "EUPL-1.2"