Fluxheim 1.5.18

Fluxheim 1.5.18 Release Notes

Fluxheim 1.5.18 moves configuration ownership into the internal
fluxheim-config crate and hardens downstream HTTP/2 response handling.

What Changed

• Added crates/fluxheim-config as the internal owner of config structs,
  parsing, validation, config-source loading, and config tests.
• Kept root crate::config and crate::config_* compatibility shims so
  runtime modules and operator-facing behavior stay stable.
• Preserved existing config syntax, config tester behavior, release profiles,
  RPM/container packaging, and artifact names.
• Added a config-crate test-support feature so root tests continue to use
  repository-local process paths while production defaults remain under
  /run/fluxheim.
• Added proxy.downstream_total_response_timeout_secs, an absolute HTTP/2
  response-write lifetime bound that is not reset by partial writes or client
  WINDOW_UPDATE frames.
• Clarified and tested that server.limits.max_request_headers counts
  duplicate request header values, including split HTTP/2 Cookie crumbs,
  before routing.

Compatibility

• Existing config files remain valid.
• Existing feature profiles and release artifact names are unchanged.
• Omitted proxy.downstream_total_response_timeout_secs keeps the secure
  300-second default.
• The root fluxheim crate remains the binary/orchestration crate.
• fluxheim-config is an internal workspace crate and is not published to
  crates.io.

Not Included

• No load-balancer crate extraction yet.
• No cache/web/PHP crate extraction yet.
• No removal of pingora-load-balancing or pingora-cache yet.
• No HTTP proxy runtime replacement, Wasm runtime, HTTP/3/QUIC, WAF, or
  production UDP/GSLB promotion in this release.

Checksums And Signatures

• Commit: afb3e843748800109e9c6b4d239b41264fc436f4
• Local gate: GitHub CI green before tag; local release metadata checks passed
• CodeQL/code scanning: no open release-blocking alerts before tag
• Source archive checksums:
  • 26a12cbf74b3a5e299eca7ed9a763402be3bf96cda121823d7430e1ed9592320 fluxheim-1.5.18.tar.gz
  • 294d7327c0da32a0ba241362408ab1f9c7acf18a545f755b9b7c6535f4406e49 fluxheim-1.5.18.zip
• Binary checksums:
  • x86_64:
    • cfc80240ae11c062b202204a2de35e522820c999d82a0f9d4ee9fb1db3f3a2da fluxheim-1.5.18-full-x86_64-linux.tar.gz
    • 3d87306df2c2b3a9ec0830825003a417b35ee5d7625ce57932935e331994dc08 fluxheim-1.5.18-cache-x86_64-linux.tar.gz
    • 2a2b33580a39daecb28dd1175717707b11baa0a9bc061dbf5749c60fc2f0f638 fluxheim-1.5.18-proxy-x86_64-linux.tar.gz
    • 98dee508902cab5547c57065875351b0566150e8a749ce96dfc7c9a335b03033 fluxheim-1.5.18-php-x86_64-linux.tar.gz
    • 6300ebf0aabfe025bc03bd84b383b97e4e2d02659988a90a5bd9257ab17d68c2 fluxheim-1.5.18-load-balancer-x86_64-linux.tar.gz
    • 0d5db8e1bb438bb6e862f6cb8aa3db2d9ede697e5df52b51bf601be2c41df0e2 fluxheim-1.5.18-config-tester-x86_64-linux.tar.gz
  • aarch64:
    • d8586682bfbffb4d7a721947cad56a0ce477a8ef008f0fe1f26a2e73a64da89c fluxheim-1.5.18-full-aarch64-linux.tar.gz
    • 9b1cb492c00422587d702635e61e9eb915e781a842d68430fba0c7a2f00fd5c4 fluxheim-1.5.18-cache-aarch64-linux.tar.gz
    • 47d2dd746a5edc74a1627c076b2b70e0f46cdf2cd174d41c3a85c9a34e2bae7b fluxheim-1.5.18-proxy-aarch64-linux.tar.gz
    • 017e54a513105a1bd7eb3c8a5ea5031b151224c0dc7fc8880f6278bb2b25212b fluxheim-1.5.18-php-aarch64-linux.tar.gz
    • 44c4456166ee2576b08be001843d416db0a496a14048e8f54ed867f4626d1775 fluxheim-1.5.18-load-balancer-aarch64-linux.tar.gz
    • 8d8751024302f8948608774da311adf7e6a99d132787e222ffab692709abf543 fluxheim-1.5.18-config-tester-aarch64-linux.tar.gz
  • macos:
    • 2e7221d4d5413839a767a818e798846ac17f466470d4342c55c19f2dc1a4c8e8 fluxheim-1.5.18-dev-aarch64-macos.tar.gz
• SBOM checksums:
  • a142df15155b77febebe9afdea9fcff857637ca5fffe470ce9fa553315ef9cd5 fluxheim.spdx.json
  • 7c1e10a6fd505078308a8c53760be71c905f956dc168b16dcf55401e39d53097 fluxheim.cyclonedx.json
• Reproducible build:
  • 54f063d56e4cf5c3a1e84df2c12eaadf22e44843473da5763977dc57b0e9f075 x86_64
  • c5afb09966a8afffc2564c92de5a1e5564f9bddf18bec4096822b62cacf5239d aarch64
  • 808a1cfa5a002cdfaff2c087de08c9b8880a2b3dd328a2ad873e9c3eef3d3642 macos
• Full Build Container digests:
  • Wolfi: ghcr.io/valkyoth/fluxheim@sha256:6acc8c8870c86b356490aa68eaf34724e54b674bb643e19fa4747e9adb2879a2
  • Alpine: ghcr.io/valkyoth/fluxheim@sha256:396ad71e09a57664c330c182c7758565bac301c0f5fd625bb2e6eb4518dc62f7
  • SUSE Micro: ghcr.io/valkyoth/fluxheim@sha256:2bad8926f1d7570aeab77bda412d5cfb08325ce6fa98a134184f97e104b67e43
  • Debian: ghcr.io/valkyoth/fluxheim@sha256:8237b237442e0c63a640e5fbc0d658ac86cc98f5f6ba8c41bb032e6706e25b16
• Cache Build Container digests:
  • Wolfi: ghcr.io/valkyoth/fluxheim@sha256:204fac399b9eb81a92c7a903932f13f7a0ccf691c7f4103b6c0098be3c02c019
  • Alpine: ghcr.io/valkyoth/fluxheim@sha256:1f244ba9355790ff3b68cb1cbff5c7d5fde1769ca5568df7c383b715975c24a2
  • SUSE Micro: ghcr.io/valkyoth/fluxheim@sha256:6515ffc8712b7818cb4f1b8d29f24d2f53c8fa71478875b4761c8c9cb2945cdd
  • Debian: ghcr.io/valkyoth/fluxheim@sha256:0685eec8efe08db1facd9a678f05916a0314e19992b2f8cdcc65f42186da2b5c
• Proxy Build Container digests:
  • Wolfi: ghcr.io/valkyoth/fluxheim@sha256:02aced54fd7eeffa93461eefe5c67a3ae0ea9bba44bbc5d43d3ab9fa97cf89d7
  • Alpine: ghcr.io/valkyoth/fluxheim@sha256:c24cdc3149673fde0048b1390c48ad4ede5b097832f6c05ee38b49b31b0e33e1
  • SUSE Micro: ghcr.io/valkyoth/fluxheim@sha256:02cf29d923f108f95b473e41aa36bf38bde0dabc0de0c6069e0880f00bb1b9a6
  • Debian: ghcr.io/valkyoth/fluxheim@sha256:3ed49695afcf26e4be663207c2e7be3324b7b43431780a2bb9880191359e52ce
• PHP Build Container digests:
  • Wolfi: ghcr.io/valkyoth/fluxheim@sha256:080b3c147e9374cd811e2649dad4a4566bb0357b54d16343ce769e4d8b0d54d7
  • Alpine: ghcr.io/valkyoth/fluxheim@sha256:9e1d9ffe69c8d4ec203e292241002227d8b404ba8bebba2c1fa1d5e3ef840c6e
  • SUSE Micro: ghcr.io/valkyoth/fluxheim@sha256:172337f83fee1b0976b8498e9db7f7d55f8e314f49952b4f896963e05c5711fc
  • Debian: ghcr.io/valkyoth/fluxheim@sha256:02493d1e9dd942e3b200c7d5e0339914e5fcd41d083e1befd908765d1e75b73a
• Load Balancer Build Container digests:
  • Wolfi: ghcr.io/valkyoth/fluxheim@sha256:1642b3f1f024d59c5bcdc1c6d183bce3a2efb48941f97c361ca41f41f8a517bb
  • Alpine: ghcr.io/valkyoth/fluxheim@sha256:0bba4f3644310c4c915f2bc9402e21264a9a68b067460b037a0f67c13c156328
  • SUSE Micro: ghcr.io/valkyoth/fluxheim@sha256:37ffb9f2d4d0bd6c75a3124d6eca22edb814152584b43aa7b7af189a7e5ca3c7
  • Debian: ghcr.io/valkyoth/fluxheim@sha256:043abf15dd0fa6bbaf7bea9bc5a60b1410ea40da0b6546e6e7eb6710e5584fb6
• Tag signature:
  • Good "git" signature for 1921261+eldryoth@users.noreply.github.com with ED25519 key SHA256:EoLRQ5k4J5pYz3UMFmkrV798gYFNkToGS2xEPvebqB4