Release 1.4.5

Author: eldryoth

CHANGELOG.md

@@ -7,7 +7,7 @@ Fluxheim follows semantic versioning once `1.0.0` is released. Before `1.0.0`,
 minor versions may still change configuration shape, feature names, and runtime
 behavior when the change improves security or project direction.
 
-## 1.4.5-dev - Unreleased
+## 1.4.5 - 2026-05-29
 
 ### Changed
 

Cargo.lock

@@ -1,6 +1,6 @@
 [package]
 name = "fluxheim"
-version = "1.4.5-dev"
+version = "1.4.5"
 edition = "2024"
 rust-version = "1.96"
 license = "EUPL-1.2"

Cargo.toml

@@ -23,7 +23,7 @@
 
 Fluxheim is a modular Rust edge server built on
 [Pingora](https://github.com/cloudflare/pingora). The current stable release is
-`1.4.4`: static sites, vhosts, route-level proxying, redirects, rustls SNI,
+`1.4.5`: static sites, vhosts, route-level proxying, redirects, rustls SNI,
 managed ACME issuance and renewal, secure headers, container/native systemd
 operation, production proxy-cache controls, Prometheus/OpenTelemetry operations
 support, focused full/cache-edge/proxy-edge/PHP image profiles, opt-in PHP-FPM
@@ -35,8 +35,10 @@ compression, advanced upstream selection, passive health, retry budgets,
 PROXY protocol, upstream TLS controls, mTLS/client certificate policy, HTTP/2
 origin controls, gRPC pass-through policy, proxy-operations migration blockers,
 the `1.4.2` proxy module split, the `1.4.3` config module split, and Apple
-Silicon macOS Level 1 developer support. The next development target is
-`1.4.5`, focused on bounded GeoIP/Geo-Context policy.
+Silicon macOS Level 1 developer support. `1.4.5` adds bounded GeoIP/Geo-Context
+policy with local MMDB support for MaxMind GeoIP2/GeoLite2 and CIRCL Geo Open
+datasets. The next development target is `1.4.6`, focused on the TCP stream
+proxy foundation.
 
 Fluxheim is licensed under the European Union Public Licence 1.2.
 
@@ -436,6 +438,11 @@ is `1.4.x`, starting with the `1.4.0` production proxy parity release.
   adds Mac-safe development paths, an Apple Silicon CI/smoke gate, developer
   artifact naming for `aarch64-macos`, and Linux ARM64 release artifact naming
   for `aarch64-linux`. Linux remains the production support baseline.
+- `1.4.5` is the bounded GeoIP/Geo-Context release. It adds the optional
+  `geoip` feature for local MMDB MaxMind GeoIP2/GeoLite2 and CIRCL Geo Open
+  datasets, vhost/route country and ASN access-policy rules, structured access
+  log Geo-Context fields, bounded database loading, and documented SDK roadmap
+  boundaries for a future `fluxheim-sdk` crate.
 
 Detailed cache behavior, config examples, operational limits, and smoke-test
 coverage are documented in [Cache Backends](docs/cache-backends.md),

README.md

@@ -906,8 +906,8 @@ the unprivileged `fluxheim` user.
 For local binary RPM smoke builds, use the containerized helper:
 
 ```bash
-scripts/build_fluxheim_rpm.py 1.4.2 --target opensuse-tumbleweed
-scripts/build_fluxheim_rpm.py 1.4.2 native --target fedora-44
+scripts/build_fluxheim_rpm.py 1.4.5 --target opensuse-tumbleweed
+scripts/build_fluxheim_rpm.py 1.4.5 native --target fedora-44
 ```
 
 Untagged `latest` builds use the package name `fluxheim-unstable` and a date

docs/build-and-podman.md

@@ -92,16 +92,16 @@ If macOS developer binaries are attached to a GitHub release, build them on
 macOS with the release helper:
 
 ```bash
-RELEASE_VERSION=1.4.4
+RELEASE_VERSION=1.4.5
 scripts/build_release_assets.sh "${RELEASE_VERSION}" --kind macos-dev
 ```
 
 Preferred release naming examples:
 
-- `fluxheim-1.4.4-dev-aarch64-macos.tar.gz`
-- `fluxheim-1.4.4-dev-x86_64-macos.tar.gz`
-- `fluxheim-1.4.4-full-x86_64-linux.tar.gz`
-- `fluxheim-1.4.4-full-aarch64-linux.tar.gz`
+- `fluxheim-1.4.5-dev-aarch64-macos.tar.gz`
+- `fluxheim-1.4.5-dev-x86_64-macos.tar.gz`
+- `fluxheim-1.4.5-full-x86_64-linux.tar.gz`
+- `fluxheim-1.4.5-full-aarch64-linux.tar.gz`
 
 Universal macOS binaries are optional and can be produced with `lipo` from
 separate Intel and Apple Silicon builds, but per-target tarballs are simpler

docs/macos-development.md

@@ -153,9 +153,11 @@ fi
 %config(noreplace) %attr(0644,fluxheim,fluxheim) /srv/fluxheim/index.html
 
 %changelog
-* Thu May 28 2026 Fluxheim Maintainers <1921261+eldryoth@users.noreply.github.com> - 1.4.5-0.dev
-- Start the 1.4.5 bounded GeoIP/Geo-Context development line.
-- Raise the pinned Rust toolchain and minimum supported Rust version to 1.96.
+* Fri May 29 2026 Fluxheim Maintainers <1921261+eldryoth@users.noreply.github.com> - 1.4.5-1
+- Release 1.4.5 bounded GeoIP/Geo-Context policy.
+- Add local MMDB MaxMind GeoIP2/GeoLite2 and CIRCL Geo Open dataset support,
+  vhost/route country and ASN ACLs, structured access-log Geo fields, and
+  bounded GeoIP database loading on Rust 1.96.
 
 * Thu May 28 2026 Fluxheim Maintainers <1921261+eldryoth@users.noreply.github.com> - 1.4.4-1
 - Release 1.4.4 Apple Silicon macOS Level 1 developer support.