All notable changes to ProtoCore are documented here.

[Unreleased]

Bug Fixes

an inbound accept could take the SSH slot the reverse tunnel held (e93a830)
the client built its own KEXINIT, and I_C / I_S were sized for one role (8dbfea8)
the client role could not complete a key exchange (85329fe)
ssh_scp.c never compiled, name the mode enum as the header declares it (0991534)
ssh_forward.c never compiled, add the missing session.h include (e904608)
the software server was the fourth site accepting an all-zero secret (4bc3977)
RFC 8446 7.4.2 requires aborting on an all-zero X25519 shared secret (83be793)
the curator's cap filled with flagged-valid entries, shipping no rejection cases (f02b770)
protocore_config.h is the entry point, not types.h (df81505)
three headers used the macro without the header that defines it (444edf0)
every header carries its own extern C; protocore.h stops wrapping its includes (8ffc88e)
the exchange hash declared a 64-byte out its SHA-256 caller does not have (92e8ce2)
the Ns table made every leaf an indirect always_inline call at -Og (7f0b3b0)
the i2c command link was shared per bus; pc_mnt_fs published a C++ type (5153630)
the nvs seam serialises; seven fs entry points and one spi transfer were unbounded (7a6630b)
put_blob and put_str judged their bounds after committing, or not at all (1f32484)
the two backends gave different wrong answers for a blob and a string (280fbc6)
the fs backend had no sync, so the WAL could not bind the only persistent store (5fe8ce5)
a conflicted autostash pop committed its markers into the changelog (2e47cb0)
modmul guarded its operand count nowhere; stale .cpp references (e527f96)
the RSA memory-init wait was inverted; four more the vendor arm never proved (2043db6)
sha256's accelerated arm dropped the work parameter; the KDF term ignored its context (81a70cb)
a liboqs disagreement read as liboqs being absent; scope the agent rules to tools/ (b8a07dc)
the vendor arm hashed at an offset only the software arm defined (5b26f3a)
the misaligned priming load ran with less than a word of work left (022e8ed)
claiming a slot orphaned both engines' borrows (c722cbf)
the init wipe ran through the pointer from before the split (6aac99b)
a re-used stream slot served the previous request's pseudo-headers (690d135)
the re-init split ran from a base it had already zeroed away (648b45b)
an invalid record is discarded, the association survives (aa16fa3)
legacy_record_version is ignored, per RFC 9147 sec 4 (03c5fa3)
a retransmitted fragment that changes a byte aborts reassembly (b423bdc)
illegal_parameter for a bad cookie, abort a non-empty legacy_cookie, and RFC 7250 outcome 2 (50d3c3b)
the key schedule reaches its own region by field, like the rest (6795e0e)
reach the connection's own storage, like ssh_pkt_slot_storage (c15ab56)
the slot picks its region of the pool's one borrow (636c63f)
the borrow is taken once per connection, not once per init (fd8bb4a)
the portable TLS arm is a third carrier of PC_ENABLE_TLS_RPK (02125b4)
a request past 255*HashLen has no defined answer (RFC 5869 sec 2.3) (e49c4e8)
the suite check uses the IANA code point constant (40801ed)
the offered cipher suite and legacy_compression_methods are checked (0ef116e)
a zero-length Handshake or Alert record is neither sent nor accepted (2d3e3a7)
h3_fail is defined above its first use (49067b0)
Fixed Bit, Reserved Bits and the 2^60 max_streams bound (RFC 9000) (a4f886f)
a content-length that disagrees with the DATA makes the request malformed (43d1127)
per-type frame length and stream-id guards, and a CONTINUATION cap (ed39a65)
coaps_server passed the address of a keys pointer, not the keys (73501c4)
a HEADERS on an open stream is a trailer section, not a stream-id error (e2f370a)
h2_server suite passed pc_h2_write_header its arguments out of order (a635744)
reject a zero or overflowing WINDOW_UPDATE (RFC 9113 sec 6.9, 6.9.1) (b439489)
the outbound frame borrows from the plaintext arena HTTP works out of (ce0a1e0)
DATA on an idle or closed stream is refused before the app sees it (RFC 9113 sec 5.1, 6.1) (0815504)
an oversize dynamic-table size update is a decoding error, not a clamp (7ad71ec)
a prefix integer that overflows 32 bits is a decoding error (RFC 7541 sec 5.1) (ca9bf33)
the re-key count is a power of two, bounded by RFC 4253 sec 9 and RFC 4344 sec 3.2 (b18fb31)
derive the re-key packet count from the 1 GB bound (RFC 4253 sec 9) (cb02d8e)
a wrong KEX guess is dropped, not taken as the real KEXDH_INIT (RFC 4253 sec 7.1) (3453650)
EXT_INFO belongs to the first NEWKEYS, not every re-key (RFC 8308 sec 2.4) (93c23bd)
the remaining ssh_dh_derive_keys_sid call sites take both directions (2220fc8)
native_ssh_pqc builds the SSH transport, so it has to define PC_ENABLE_SSH (c7f4cc6)
native_ssh_hardened builds the SSH stack, so it has to define PC_ENABLE_SSH (ef6f509)
four audit findings - session-id binding, request fields, CR NUL, channel guards (ac76ab6)
refuse a password-change request instead of authing on the old password (5091c67)
end a subnegotiation only on IAC SE, not a bare 240 (9c2dd30)
validate the userauth service name; pin the telnet greeting length (4792b06)
frame a back-to-back packet pair into the slot instead of dropping the second (a445c4a)
three more blob tools onto findroot; fix sibling import for -m; guard crossinstall (c8460dc)
blob_parity onto findroot, and guard its module-level main() (48c01fb)
base-less relpath printed CWD-relative paths; use findroot.rel (fa5ad66)
revive the owner-context guard, and single-source its root via findroot (6a806ef)
three files took protoframe.h through log.h or telnet.h (ede98b6)
twelve PC_LOGx sites still passed their values variadically (d4ec123)
the token frame passes its two strings as values (229d76d)
a refused send ends the transfer instead of writing on (8a607f0)
the plaintext arena covers the SSH receive nest with compression on (c52778f)
the two PC_key_max macros get distinct names at file scope (ce3b887)
the compression buffers are wiped when the slot is reset (78852ff)
pc_ssh_conn_send reports a refused queue instead of claiming the bytes went (cd435b1)
a half-finished keyboard-interactive exchange dies with its connection (ad9cbc4)
the derived session keys and the DTLS shared secret are wiped (291da41)
the slot's persistent wire binds at accept, not mid-dispatch (bc52f7a)
PC_WORK_SSH_CONN carries the flight, and the crypto work it already borrowed (68645ad)
the slot holds a flight, so the second packet of a dispatch is not dropped (9a5499f)
a 2-byte over-read on the wire, two dead stdio includes, three unchecked spans (4e71254)
the scalar and the nonce do not outlive the signature (447c799)
the by-value transcript parameter aliased the caller's bytes (841841c)
a live context cannot share the one-shot work buffer (66c2a02)
the seed borrow is checked before it is written through (5a31c45)
the hash context is a view, so a struct copy aliases it (2f68757)
the key schedule needs PC_TLS13_KS_BORROW, not PC_TLS13_KS_CAP (9b04dff)
the slot's crypto bytes are bound before anything derives out of them (145c3b9)
the two record layers expand their traffic keys out of the caller's bytes (747e4df)
the accumulator fill is the raw mover, not the aligned-span one (cedb0cb)
the partial word merged instead of overwriting past the span (a054a54)
the pad and the state copy are spans, not byte walks (d437c80)
mem.cpy stores a whole word, so the accumulator lost its length (87ab003)
the key schedule leaked a persistent borrow per handshake (7aa25f1)
the key schedule leaked a persistent borrow per handshake (a8421f3)
available() and read() step the open, so a polling caller advances its connect (deea2e7)
four vendor components become capabilities, named for what they include (2d5346a)
external-RAM placement selects on PC_HAS_PSRAM (c5632da)
the vendor TLS stack is a capability, not a consequence of not being the host (fa574c8)
pc_server_reset() drops the not-found handler, and native_swar builds no library source (c8e8af8)
the pin guards ask for the capability, and the drivers run against the pin table (cf45985)
Deflate and Inflate bind their instance inside the gate that declares its type (e526098)
the bus guards ask for the capability instead of asking about the build (aeb242e)
CodeQL traces every native env, and native_codeql links again (10c3865)
fold the repeated header lines gcovr emits, which SonarQube rejects outright (c3333fe)
gen_compiledb and compile_examples climbed two levels to the repo root, not three (9d2e963)
select_envs resolved affected_common under the repo root, which the tools/ move broke (9b2cfc9)

CI / Build

<<<<<<< Updated upstream

bump github/codeql-action from 4.38.1 to 4.38.2 (314be15)

‍Stashed changes

- fix the workflows #39 left red on main (3b5a7f9)
update test report + coverage [skip ci] (31cdbfd)
update CHANGELOG.md [skip ci] (cce89fe)
PlatformIO and Arduino compile the HAL arms and find the headers outside src/ (d23cb7a)
fix the red workflows on main (4ac72a8)
update test report + coverage [skip ci] (4986f3e)
update CHANGELOG.md [skip ci] (84c2395)
bump cspell from 10.3.1 to 10.3.3 (188da5b)
update test report + coverage [skip ci] (43500b3)
update CHANGELOG.md [skip ci] (07a9b41)
bump github/codeql-action from 4.38.0 to 4.38.1 (802e31f)
bump prettier from 3.9.6 to 3.9.9 (915e6d7)
update CHANGELOG.md [skip ci] (8550746)
update CHANGELOG.md [skip ci] (cb955b5)
update CHANGELOG.md [skip ci] (fd76569)
bump cspell from 10.0.1 to 10.3.1 (9f87f78)
bump github/codeql-action from 4.37.7 to 4.38.0 (a463dca)
update CHANGELOG.md [skip ci] (a8b6904)
update CHANGELOG.md [skip ci] (098eb63)
update CHANGELOG.md [skip ci] (b87e9ec)
update CHANGELOG.md [skip ci] (46bf037)
update CHANGELOG.md [skip ci] (67fdc87)
update CHANGELOG.md [skip ci] (24d087d)
update CHANGELOG.md [skip ci] (45942b0)
update CHANGELOG.md [skip ci] (aebb075)
update CHANGELOG.md [skip ci] (de6a25f)
update CHANGELOG.md [skip ci] (8c51010)
update CHANGELOG.md [skip ci] (8239d5e)
update CHANGELOG.md [skip ci] (eaae866)
update CHANGELOG.md [skip ci] (1d26b01)
update CHANGELOG.md [skip ci] (e15afa9)
update CHANGELOG.md [skip ci] (6de5e91)
update CHANGELOG.md [skip ci] (e772759)
update CHANGELOG.md [skip ci] (383f238)
update CHANGELOG.md [skip ci] (fdd484a)
a suite is a directory, and it says what it is made of (f38e27a)
test/ declares what it is, and the audit reads every tree (dd98c61)
the module declarations get a reader, and it is the one that used to overwrite them (3149883)
the module declarations get a reader, and it is the one that used to overwrite them (700683e)
fix the dependency lists the declaration conversion corrupted (1d52492)
keep the formatters out of the submodule (65b5051)
platformio.ini stops rendering the native envs; the dep graph reads the build (892088d)
MMgr as a submodule, not an embedded repo (63f331c)
one directory per module, declared not inferred, and the flags move to CMake (a207327)
nine of ten guards green, and two of them were measuring the wrong thing (985c618)
update CHANGELOG.md [skip ci] (1441717)
update CHANGELOG.md [skip ci] (b12d17e)
update CHANGELOG.md [skip ci] (a850521)
update CHANGELOG.md [skip ci] (3a7d58b)
update CHANGELOG.md [skip ci] (dd93a4a)
update CHANGELOG.md [skip ci] (7aa5c13)
update CHANGELOG.md [skip ci] (cdea70c)
update CHANGELOG.md [skip ci] (fabe8d2)
update CHANGELOG.md [skip ci] (7e09b17)
update CHANGELOG.md [skip ci] (320de3b)
update CHANGELOG.md [skip ci] (c29483b)
update CHANGELOG.md [skip ci] (6c9d173)
update CHANGELOG.md [skip ci] (c68d6ab)
update CHANGELOG.md [skip ci] (af66200)
update CHANGELOG.md [skip ci] (3223726)
update CHANGELOG.md [skip ci] (430d5c7)
update CHANGELOG.md [skip ci] (3ee6f8e)
update CHANGELOG.md [skip ci] (8d62e65)
update CHANGELOG.md [skip ci] (137a0af)
update CHANGELOG.md [skip ci] (b139154)
update CHANGELOG.md [skip ci] (f8ddc1f)
update CHANGELOG.md [skip ci] (b847f5a)
update CHANGELOG.md [skip ci] (c3f187f)
update CHANGELOG.md [skip ci] (af85ea5)
update CHANGELOG.md [skip ci] (2b4babd)
update CHANGELOG.md [skip ci] (dd95f04)
bump streetsidesoftware/cspell-action from 8 to 9 (fcc1fa8)
update CHANGELOG.md [skip ci] (dfc31d6)
update CHANGELOG.md [skip ci] (3002409)
update CHANGELOG.md [skip ci] (338300d)
update CHANGELOG.md [skip ci] (2ca9ff5)
bump github/codeql-action from 4.37.6 to 4.37.7 (e9695ec)
update CHANGELOG.md [skip ci] (dee1771)
update CHANGELOG.md [skip ci] (5f48890)
update CHANGELOG.md [skip ci] (0fb78e4)
update CHANGELOG.md [skip ci] (2d6d939)
update CHANGELOG.md [skip ci] (601177f)
update CHANGELOG.md [skip ci] (3ff134f)
update CHANGELOG.md [skip ci] (c319e4d)
update CHANGELOG.md [skip ci] (fe42832)
update CHANGELOG.md [skip ci] (d6a3a95)
update CHANGELOG.md [skip ci] (0fd3016)
update CHANGELOG.md [skip ci] (b2637b8)
update CHANGELOG.md [skip ci] (849ff74)
update CHANGELOG.md [skip ci] (4381344)
update CHANGELOG.md [skip ci] (864d5d3)
update CHANGELOG.md [skip ci] (99c1bbf)
update test report + coverage [skip ci] (4ce1635)
update CHANGELOG.md [skip ci] (eafdd3b)
update CHANGELOG.md [skip ci] (41f8a5a)
update CHANGELOG.md [skip ci] (213c34e)
update CHANGELOG.md [skip ci] (1913244)
update test report + coverage [skip ci] (cac5a0c)
update CHANGELOG.md [skip ci] (cc0a7a0)
update CHANGELOG.md [skip ci] (44754f3)
update CHANGELOG.md [skip ci] (561041f)
update CHANGELOG.md [skip ci] (d804a0e)
update CHANGELOG.md [skip ci] (f13ccf5)
update CHANGELOG.md [skip ci] (2b90c5b)
update CHANGELOG.md [skip ci] (7c190b0)
update CHANGELOG.md [skip ci] (92798b0)
update CHANGELOG.md [skip ci] (91a5b98)
update CHANGELOG.md [skip ci] (7652565)
update CHANGELOG.md [skip ci] (39e487f)
update CHANGELOG.md [skip ci] (6fa5fe9)
update test report + coverage [skip ci] (d53f1ef)
update CHANGELOG.md [skip ci] (8e4b024)
update CHANGELOG.md [skip ci] (fc9f5df)
update CHANGELOG.md [skip ci] (919ffa5)
update CHANGELOG.md [skip ci] (2e91ee5)
update CHANGELOG.md [skip ci] (7f253db)
update CHANGELOG.md [skip ci] (12d0191)
update CHANGELOG.md [skip ci] (1d72122)
update CHANGELOG.md [skip ci] (fbe8c40)
update CHANGELOG.md [skip ci] (41914f4)
update CHANGELOG.md [skip ci] (7241153)
update CHANGELOG.md [skip ci] (ab6e460)
update CHANGELOG.md [skip ci] (cfaa623)
update CHANGELOG.md [skip ci] (1cd8b47)
kat_data.inc is generated and committed with nothing checking it matches (861e8e3)
update CHANGELOG.md [skip ci] (559dbb3)
update CHANGELOG.md [skip ci] (4c3c169)
update CHANGELOG.md [skip ci] (3b8e14d)
update CHANGELOG.md [skip ci] (14783ab)
update CHANGELOG.md [skip ci] (312be6f)
update test report + coverage [skip ci] (9cc54c6)
update CHANGELOG.md [skip ci] (6e093f8)
update CHANGELOG.md [skip ci] (3e44f1a)
update CHANGELOG.md [skip ci] (7761aa5)
update CHANGELOG.md [skip ci] (3ee7dae)
update CHANGELOG.md [skip ci] (3a8d454)
two more checkers never walked core_setup, and one named a tree that moved (f4ff091)
update CHANGELOG.md [skip ci] (b6ba27b)
update CHANGELOG.md [skip ci] (df9bc02)
update CHANGELOG.md [skip ci] (9eb6799)
the three build workflows never rebuilt on a core_setup change (05aacdf)
update CHANGELOG.md [skip ci] (e1d1e04)
update CHANGELOG.md [skip ci] (1267130)
update CHANGELOG.md [skip ci] (020d105)
update CHANGELOG.md [skip ci] (5408a4f)
update CHANGELOG.md [skip ci] (76067b4)
update test report + coverage [skip ci] (95eb36f)
update CHANGELOG.md [skip ci] (00d45c1)
update CHANGELOG.md [skip ci] (64cdf7d)
update CHANGELOG.md [skip ci] (c1469ec)
update CHANGELOG.md [skip ci] (e641fd6)
update CHANGELOG.md [skip ci] (fac7287)
update CHANGELOG.md [skip ci] (f59c685)
update CHANGELOG.md [skip ci] (5271a3b)
the ban checker never walked core_setup, so 65 sites went unenforced (279ffb8)
update CHANGELOG.md [skip ci] (b44dd08)
update CHANGELOG.md [skip ci] (84d5137)
update CHANGELOG.md [skip ci] (b17ea59)
update CHANGELOG.md [skip ci] (c030722)
refresh the naming ratchet; the law it gates still documents the old prefix (c11c075)
the .pio ignore never matched, so vendored littlefs kept reporting (c4368d3)
update CHANGELOG.md [skip ci] (a2f994f)
update CHANGELOG.md [skip ci] (ab67473)
update CHANGELOG.md [skip ci] (88c3cff)
update CHANGELOG.md [skip ci] (4a7b548)
update CHANGELOG.md [skip ci] (4cad067)
update CHANGELOG.md [skip ci] (e24dbdc)
update CHANGELOG.md [skip ci] (3f743b0)
update CHANGELOG.md [skip ci] (aec0fe0)
update CHANGELOG.md [skip ci] (7fb683a)
update CHANGELOG.md [skip ci] (36e3417)
update CHANGELOG.md [skip ci] (25601a1)
update CHANGELOG.md [skip ci] (a97581a)
update CHANGELOG.md [skip ci] (9690d65)
update CHANGELOG.md [skip ci] (e980248)
update CHANGELOG.md [skip ci] (f2a3d99)
update CHANGELOG.md [skip ci] (ddf384a)
update CHANGELOG.md [skip ci] (b34b44e)
update CHANGELOG.md [skip ci] (a841ab2)
update CHANGELOG.md [skip ci] (2de6874)
update CHANGELOG.md [skip ci] (7a6b444)
update CHANGELOG.md [skip ci] (06d3060)
update CHANGELOG.md [skip ci] (c5c2d1f)
update CHANGELOG.md [skip ci] (46872db)
update CHANGELOG.md [skip ci] (2e16dd6)
update CHANGELOG.md [skip ci] (bda421e)
update CHANGELOG.md [skip ci] (dc081c5)
update CHANGELOG.md [skip ci] (a8db3dc)
update CHANGELOG.md [skip ci] (09bf0e6)
update CHANGELOG.md [skip ci] (869cc5d)
update CHANGELOG.md [skip ci] (5395469)
update CHANGELOG.md [skip ci] (2ed89b1)
update CHANGELOG.md [skip ci] (c89552f)
update CHANGELOG.md [skip ci] (cf4d593)
update CHANGELOG.md [skip ci] (ad07f22)
update CHANGELOG.md [skip ci] (b072f63)
update CHANGELOG.md [skip ci] (29ee43c)
update CHANGELOG.md [skip ci] (eae57ff)
update CHANGELOG.md [skip ci] (38bfb1e)
update CHANGELOG.md [skip ci] (fcbe23b)
update CHANGELOG.md [skip ci] (0ed1fea)
update CHANGELOG.md [skip ci] (e7ead47)
update CHANGELOG.md [skip ci] (869df4b)
update CHANGELOG.md [skip ci] (1f7483c)
update CHANGELOG.md [skip ci] (0274a9a)
update CHANGELOG.md [skip ci] (9a2de00)
update CHANGELOG.md [skip ci] (a73ead7)
update CHANGELOG.md [skip ci] (cde3ddc)
update CHANGELOG.md [skip ci] (9baf729)
update CHANGELOG.md [skip ci] (6140e56)
update CHANGELOG.md [skip ci] (1d26295)
update CHANGELOG.md [skip ci] (ee0e3b7)
update CHANGELOG.md [skip ci] (8697278)
update CHANGELOG.md [skip ci] (a17dfea)
update CHANGELOG.md [skip ci] (76e79de)
update CHANGELOG.md [skip ci] (85a5baa)
update CHANGELOG.md [skip ci] (243a67a)
update CHANGELOG.md [skip ci] (e66be49)
update CHANGELOG.md [skip ci] (0d43b4f)
update CHANGELOG.md [skip ci] (113da3d)
update CHANGELOG.md [skip ci] (2e148d6)
update CHANGELOG.md [skip ci] (261d19f)
update CHANGELOG.md [skip ci] (2e628e9)
update CHANGELOG.md [skip ci] (91ee224)
update CHANGELOG.md [skip ci] (0ca5aa3)
update CHANGELOG.md [skip ci] (b964d9e)
update CHANGELOG.md [skip ci] (22eb995)
update CHANGELOG.md [skip ci] (138dd71)
update CHANGELOG.md [skip ci] (b45d24a)
update CHANGELOG.md [skip ci] (2e0fd31)
update CHANGELOG.md [skip ci] (ce0679a)
update CHANGELOG.md [skip ci] (fd12093)
update CHANGELOG.md [skip ci] (4d57ff2)
update CHANGELOG.md [skip ci] (72e261b)
update CHANGELOG.md [skip ci] (0771e68)
update CHANGELOG.md [skip ci] (0e8281d)
update CHANGELOG.md [skip ci] (1913bc6)
update CHANGELOG.md [skip ci] (4333660)
update CHANGELOG.md [skip ci] (ca86258)
update CHANGELOG.md [skip ci] (aeda130)
update test report + coverage [skip ci] (eef2d16)
update CHANGELOG.md [skip ci] (a4c5352)
update test report + coverage [skip ci] (506587e)
update CHANGELOG.md [skip ci] (9b0034e)
update CHANGELOG.md [skip ci] (81f78c6)
update CHANGELOG.md [skip ci] (3588ef6)
update CHANGELOG.md [skip ci] (1164e8f)
update test report + coverage [skip ci] (9b42fa7)
update CHANGELOG.md [skip ci] (644849b)
update CHANGELOG.md [skip ci] (11f08f2)
update CHANGELOG.md [skip ci] (7a05490)
update CHANGELOG.md [skip ci] (d295bea)
update CHANGELOG.md [skip ci] (b6dacde)
update test report + coverage [skip ci] (51cf048)
update CHANGELOG.md [skip ci] (8a1008a)
update CHANGELOG.md [skip ci] (7600064)
layering guard (text-only include-graph check) + tool inventories (51c3283)
update test report + coverage [skip ci] (d096c4f)
update CHANGELOG.md [skip ci] (5183a0a)
update CHANGELOG.md [skip ci] (ac41b71)
update CHANGELOG.md [skip ci] (63c2e6e)
update CHANGELOG.md [skip ci] (2b2f80f)
update CHANGELOG.md [skip ci] (9815002)
update CHANGELOG.md [skip ci] (ddb385e)
update CHANGELOG.md [skip ci] (a04b614)
update CHANGELOG.md [skip ci] (f333638)
update CHANGELOG.md [skip ci] (8f3e933)
update CHANGELOG.md [skip ci] (6c4c488)
update CHANGELOG.md [skip ci] (8382dd7)
update CHANGELOG.md [skip ci] (061472c)
update CHANGELOG.md [skip ci] (902308c)
update CHANGELOG.md [skip ci] (3cc51a9)
update CHANGELOG.md [skip ci] (f3a406c)
update CHANGELOG.md [skip ci] (18927f8)
update test report + coverage [skip ci] (dc8c9af)
update CHANGELOG.md [skip ci] (8dc4f02)
update CHANGELOG.md [skip ci] (d6fcaa8)
update CHANGELOG.md [skip ci] (cc8ebf7)
update CHANGELOG.md [skip ci] (ff01b53)
update CHANGELOG.md [skip ci] (cea17c1)
update CHANGELOG.md [skip ci] (4304a55)
update CHANGELOG.md [skip ci] (94d2743)
update CHANGELOG.md [skip ci] (f0d1ce1)
update CHANGELOG.md [skip ci] (039880c)
update CHANGELOG.md [skip ci] (b8dcd79)
update CHANGELOG.md [skip ci] (dc87eb4)
update CHANGELOG.md [skip ci] (07893b0)
update CHANGELOG.md [skip ci] (f57b0dd)
update CHANGELOG.md [skip ci] (83c1305)
update CHANGELOG.md [skip ci] (8aca6ce)
update CHANGELOG.md [skip ci] (fc2faad)
update test report + coverage [skip ci] (27c6f6d)
update CHANGELOG.md [skip ci] (0a7368b)
update CHANGELOG.md [skip ci] (bc7588a)
update CHANGELOG.md [skip ci] (f66a12d)
update CHANGELOG.md [skip ci] (b646639)
update CHANGELOG.md [skip ci] (cbde341)
update CHANGELOG.md [skip ci] (0ee64ef)
update CHANGELOG.md [skip ci] (22f4982)
update CHANGELOG.md [skip ci] (4200687)
update test report + coverage [skip ci] (08496d1)
update CHANGELOG.md [skip ci] (06b9e5b)
update CHANGELOG.md [skip ci] (3c7e9bb)
update test report + coverage [skip ci] (a7c3a15)
update CHANGELOG.md [skip ci] (b86a29b)
update test report + coverage [skip ci] (1ea1601)
update CHANGELOG.md [skip ci] (82db615)
update test report + coverage [skip ci] (b4f05da)
update CHANGELOG.md [skip ci] (780e60e)
update CHANGELOG.md [skip ci] (3c111dd)
update CHANGELOG.md [skip ci] (fc09a1a)
untrack src/network_drivers/application/ntp/ntp.h, which was swept in by a directory-wide git add. It is uncommitted work in progress and stays in the working tree. (a697429)
update CHANGELOG.md [skip ci] (cffe683)
update CHANGELOG.md [skip ci] (ff02f5c)
update CHANGELOG.md [skip ci] (9372ec6)
say how many envs built, so the step stops reading as if it did nothing (856a679)
update CHANGELOG.md [skip ci] (2cd4767)
update CHANGELOG.md [skip ci] (452f48f)
update CHANGELOG.md [skip ci] (94c236e)
ratchet the test-coverage floor to 16, closing mdns_service, network and route (c493e2e)
update CHANGELOG.md [skip ci] (28256b3)
update CHANGELOG.md [skip ci] (2ada79a)
bump actions/cache from 4 to 6 (10de152)
update test report + coverage [skip ci] (5e388ff)
update CHANGELOG.md [skip ci] (cb14c58)
the SonarCloud scan gets its own workflow, and its paths survive the tools/ move (3d64732)
update CHANGELOG.md [skip ci] (5d6ad7d)
update CHANGELOG.md [skip ci] (8dd42d5)
update CHANGELOG.md [skip ci] (2251a0a)
update CHANGELOG.md [skip ci] (61a0978)

Changes

<<<<<<< Updated upstream

Merge pull request #38 from dstroy0/dependabot/github_actions/github/codeql-action-4.38.2 (9eb4ec5)

‍Stashed changes

- Merge pull request #40 from dstroy0/doug/laughing-davinci-stc796 (b10513a)
Merge pull request #39 from dstroy0/doug/laughing-davinci-stc796 (603f12a)
Merge Dependabot #36: build(deps-dev): bump cspell from 10.3.1 to 10.3.3 (e9958c4)
housekeeping (e79cbba)
Merge Dependabot #35: build(deps): bump github/codeql-action from 4.38.0 to 4.38.1 (d293f8d)
Merge Dependabot #37: build(deps-dev): bump prettier from 3.9.6 to 3.9.9 (e0108d0)
housekeeping (0f4c3df)
Merge branch 'main' of https://github.com/dstroy0/ProtoCore (4d1cefe)
housekeeping (f7ee7ed)
Merge branch 'worktree-prose-compliance' (8074b13)
Merge branch 'worktree-docs-fixes' (e8a52de)
Merge remote-tracking branch 'origin/main' into worktree-docs-fixes (57becfe)
deps mmgr feature (23ad3ad)
Merge remote-tracking branch 'origin/main' into worktree-docs-fixes (4907ac8)
Merge Dependabot #32: build(deps-dev): bump cspell from 10.0.1 to 10.3.1 (6545099)
Merge Dependabot #33: build(deps): bump github/codeql-action from 4.37.7 to 4.38.0 (0c6bc8a)
repo licenses bugfix (f8e0d24)
repo licenses rewrite (816a363)
Merge remote-tracking branch 'origin/main' (fd7d1fa)
Merge remote-tracking branch 'origin/main' into worktree-docs-fixes (fcea3a7)
Merge remote-tracking branch 'origin/main' into worktree-docs-fixes (44cf774)
Merge remote-tracking branch 'origin/main' into worktree-docs-fixes (c346e8c)
Merge remote-tracking branch 'origin/main' into worktree-docs-fixes (4923a9a)
Merge remote-tracking branch 'origin/main' into worktree-docs-fixes (3545ad6)
tools checkdocs feature (5b41784)
Merge remote-tracking branch 'origin/main' into worktree-docs-fixes (1ff87bc)
deps smoltoml bugfix (f10d243)
Merge remote-tracking branch 'origin/main' into worktree-docs-fixes (c0cc846)
src speedopt bugfix (2b75c94)
Merge remote-tracking branch 'origin/main' into worktree-docs-fixes (c7f04fb)
src secure comment (b19157a)
Merge remote-tracking branch 'origin/main' into worktree-docs-fixes (ae79b80)
Merge remote-tracking branch 'origin/main' into worktree-docs-fixes (9026969)
src httpclient bugfix (a60250d)
tools gengroup feature (0cede14)
Merge remote-tracking branch 'origin/main' into worktree-docs-fixes (f59660f)
Merge remote-tracking branch 'origin/main' into worktree-docs-fixes (1efe600)
Merge remote-tracking branch 'origin/main' into worktree-docs-fixes (03a54c3)
tools checkdocs bugfix (5b5f546)
Merge remote-tracking branch 'origin/main' (12416f7)
merge origin (ede0103)
tools gate bugfix (d9761b2)
tools comment bugfix (f8ba590)
restrict is gone, because there is nothing left for it to promise (a356bb0)
an operand group is not always called <entry>args (c1e1aa6)
thread, 120 call sites (24541a0)
five more, on the fixes rather than on anything new (624220e)
a result local always declares, with a fresh name when that one is taken (e28287b)
a write of the result is not a read of it, and rewriting it returned garbage (089244a)
the result window ends at whichever comes first, not at whichever exists (ccd2d16)
an operand nobody restaged is still the one the last staging set (c84088d)
fold a call staged in a comma expression, and the sweep runner passes real paths (fbac636)
the operand group reaches the last pass that was still using the entry name (a074054)
the scanner asks the module what its operands are instead of guessing the names (276381a)
the gate decided nothing the include had not already decided (9c2b1ec)
a module cannot lose its gate while a header it depends on still has one (a895fc4)
the operand guard was reading the file the rewriter had not written yet (e478def)
a conversion that compiled, linked, and returned the wrong number (1a54ebe)
three ways the pass silently produced code that could not compile (2b29a73)
a result local belongs to its block, not to its function (7d9a81e)
the dispatch layout counts past 24, because six tables are longer than that (1ef1408)
six more modules, and the pass learns the other spelling of a call (4c529a0)
seven more modules on MMgr's shape, and two gaps the batch found (e68596f)
pull to head, and give it a build directory short enough to compile in (6a23590)
ns refuses a half-conversion instead of writing one (794c7cf)
the ns conversion rewrites its call sites, and sha256 is on MMgr's shape (80db927)
two convert entries did not reach the tool they name (194208e)
the -O level comes from CMake, not a pragma (28e6863)
apply MMgr's shape (c6ea75d)
one definition per entry in ssh/connection, and the namespace contract (0163eca)
guarded stops asking modules that have no gate to have (67f3f8e)
remove the vendor arms, which never resolved to an implementation (71f731e)
give PROTOCORE_ENABLE_X509 the parser to gate (6c9a6c1)
split the RAM disk out of the mount registry (9d47e08)
stop two TUs reaching in, gate the module over its whole body (423eb31)
isolate the Date header's clock, gate both clocks (4caa2b8)
drop PROTOCORE_NEED_*, state the dependency instead (b17178c)
one gate rule, not two (d2ea5f8)
wrap 135 sources in BEGIN_DECLS / END_DECLS (b8c4779)
thread one down to the last stand-in sites (a596c5b)
convert shape: say what it guesses and what it must not move (924adb3)
clang-format the vendor HAL headers (b30003e)
black over tools/ (dbfa67e)
clang-format the 77 files that had drifted (a164ee8)
retire the stand-in arrays, 663 sites (e9cc5f6)
only the config include above the gate, 195 files (5928732)
read the gate, and see a static with no initializer (ccd315a)
compare the golden's shape, not its size (ec36cd7)
hooks commit: say to single-quote the paragraphs (fc5cc5e)
no call spells one as null, 63 sites (b03a90a)
measure cap-sweep: compile the arm the host never answers (4b12dfa)
the no-bus arms of hmmd, ld2410 and pmbus never compiled (2965ad1)
read a module blind before judging it (ce2dfa9)
the protocol registry moves to the layer that owns the connection (9095d18)
a doc comment on an entry line hid six modules, and a header need not have a sibling .c (8a2e702)
a call does not reserve a name (d2256ff)
batch 12 of the handle reshape, 24 modules to 304 (0b81033)
batch 11 of the handle reshape, 29 modules to 280 of 308 (6c268ef)
ask whether a namespace is reached in one hop, and whether the table binds every entry (64ec6d4)
bind a wrapped table entry, and refuse a table that leaves one unbound (9e6bdf5)
(housekeeping): handle reshape, 251 modules; shared implementations and local aliases (0d379f9)
(housekeeping): handle reshape, 228 modules; a guarded entry keeps its guard (4ce62a1)
(housekeeping): handle reshape, 198 modules; the table is not always in the sibling .c (5eb2b16)
(housekeeping): handle reshape, 168 modules; the rename needs all three conditions (b745c37)
(housekeeping): handle reshape, 142 modules (f6be0b4)
(housekeeping): handle reshape, 112 modules, and the hint that carries what it cost (7ea879c)
(housekeeping): handle reshape, 82 modules; rename only where the bytes are code (6049cf1)
(housekeeping): handle reshape, 52 modules, and three defects the tests caught (bd17fdb)
(housekeeping): handle reshape, first 15 modules (b462bf1)
(housekeeping): revert the 302-module handle sweep, keep the verb (4b602c8)
(housekeeping): regenerate the three CMakeLists the module graph moved (b6f1c44)
(housekeeping): convert handle - extern table becomes a static const one (4452162)
(housekeeping): scan_vtable - the last entry of every table was dropped, and a header-defined table was not seen at all (1ee0725)
(housekeeping): goldenize - a macro or type the preprocessor CHOOSES is one arm, not one item (6d3ad74)
(housekeeping): goldenize - an empty entry set built a regex that matched everything (4227d8e)
(housekeeping): shape audit, region alignment asserts, dead borrow null-checks out (bed4956)
(housekeeping): pimpl phase 3, public handles, internal ctx, fix tests (a899b96)
Merge branch 'main' of https://github.com/dstroy0/ProtoCore (d587617)
(housekeeping): pimpl phase 3, public handles, internal ctx, fix tests (06f023b)
Merge branch 'main' of https://github.com/dstroy0/ProtoCore (17825c1)
(housekeeping): pimpl phase 3, public handles, internal ctx, fix tests (f1b948a)
Merge branch 'main' of https://github.com/dstroy0/ProtoCore (a7541c7)
(housekeeping): pimpl phase 3, public handles, internal ctx, fix tests, per module cmake (start removing ifdef soup) (b8c61b8)
Merge branch 'main' of https://github.com/dstroy0/ProtoCore (3fa2286)
(housekeeping): pimpl phase 3, public handles, internal ctx, fix tests (d204265)
(housekeeping): pimpl phase 3, public handles, internal ctx, fix tests (5b23bbb)
Merge branch 'main' of https://github.com/dstroy0/ProtoCore (5ee3bf6)
Merge Dependabot #27: build(deps): bump streetsidesoftware/cspell-action from 8 to 9 (50622ba)
(housekeeping): pimpl phase 3, public handles, internal ctx, fix tests (77b7d67)
(housekeeping): pimpl phase 3, public handles, internal ctx, fix tests (7b35b3d)
Merge branch 'main' of https://github.com/dstroy0/ProtoCore (7b76817)
(housekeeping): pimpl phase 3, public handles, internal ctx, fix tests, format (3f238f9)
(housekeeping): pimpl phase 3, public handles, internal ctx, fix tests (51f77d2)
Merge branch 'main' of https://github.com/dstroy0/ProtoCore (50a22d0)
(housekeeping): pimpl phase 3, public handles, internal ctx, fix tests (88f18c9)
Merge Dependabot #26: build(deps): bump github/codeql-action from 4.37.6 to 4.37.7 (2a82821)
(housekeeping): pimpl phase 3, public handles, internal ctx, fix tests (9fe8aee)
Merge branch 'main' of https://github.com/dstroy0/ProtoCore (ba1189a)
(housekeeping): pimpl phase 3, public handles, internal ctx, fix tls tests (898f4a8)
Merge branch 'main' of https://github.com/dstroy0/ProtoCore (728de1e)
(housekeeping): pimpl phase 3, public handles, internal ctx (2ba91fb)
Merge branch 'main' of https://github.com/dstroy0/ProtoCore (0f7f245)
(housekeeping): pimpl phase 3, public handles, internal ctx (934877c)
(housekeeping): pimpl phase 3, public handles, internal ctx (cfb01dd)
(housekeeping): pimpl phase 3, public handles, internal ctx (ebbc9ec)
Merge branch 'main' of https://github.com/dstroy0/ProtoCore (21366a9)
(housekeeping): pimpl, alias hwcrypto registers+offsets+call order to public handles (ed640bb)
Merge branch 'main' of https://github.com/dstroy0/ProtoCore (d68c18e)
(ci): version tracking stamp now fires on release and file touch (3de0506)
Merge branch 'main' of https://github.com/dstroy0/ProtoCore (bda8a8a)
(test): test/harness.py single test entry point+sim entry point (b294293)
(test): RISC-V bare metal, linker alignment, QEMU setup, startup+reset __assert_func, RMW atomics (nonexclusivitey), protomem, gmtime_r (8f3f441)
Merge branch 'main' of https://github.com/dstroy0/ProtoCore (cd99eb6)
(test): ARM M4 bare runtime: reset path+startup __assert_func, RMW atomics (nonexclusivity) protomem, gmtime_r (e9b7def)
(test): QEMU integration for bare metal sim (5d0b90e)
Merge branch 'main' of https://github.com/dstroy0/ProtoCore (aab883a)
(test): extend to linker and os primitives (30f2e1b)
Merge branch 'main' of https://github.com/dstroy0/ProtoCore (5326ee9)
(housekeeping): move dirs, renames, pimpl as I work through (657cdbb)
(housekeeping): move dirs, renames, pimpl as I work through (25917ca)
Merge branch 'main' of https://github.com/dstroy0/ProtoCore (deb8198)
(housekeeping): move dirs, renames, pimpl as I work through (9b84203)
Merge branch 'main' of https://github.com/dstroy0/ProtoCore (6cda996)
(housekeeping): move dirs, renames, pimpl as I work through (bb4a8fd)
Merge branch 'main' of https://github.com/dstroy0/ProtoCore (ee164ab)
(housekeeping): move dirs, renames, pimpl as I work through (4d2cd06)
Merge branch 'main' of https://github.com/dstroy0/ProtoCore (ff936c9)
(housekeeping): move dirs, renames, pimpl as I work through (a362e7d)
(housekeeping): move dirs, renames, pimpl as I work through (f140888)
(housekeeping): move dirs, renames, pimpl as I work through (408fb25)
Merge branch 'main' of https://github.com/dstroy0/ProtoCore (6f95945)
(housekeeping): move dirs, renames, pimpl as I work through (e4ce7b5)
(housekeeping): move dirs, renames, pimpl as I work through (000c58e)
(housekeeping): move dirs, renames, pimpl as I work through (61ea2e5)
(housekeeping): dir moves, pimpl sweep half done (7b2d34b)
(housekeeping): move dirs, renames, pimple as I work through (4ecbecf)
(docs): rename literals/funcs (7de0c7c)
(docs): ssh suite first pass rfc correctness. (836b2ba)
ssh audit P0a/P0b/P1 in flight (ed6f704)
restore src/, core_setup/, tools/, ci and docs to c4368d386 (23a24a7)
Revert "fix(swar): the Ns table made every leaf an indirect always_inline call at -Og" (41fc9a1)
Revert "fix(nvs): the two backends gave different wrong answers for a blob and a string" (ea49e97)
Revert "test(config): the blob test pinned the host double's truncation, not the contract" (2173298)
Revert "fix(nvs): put_blob and put_str judged their bounds after committing, or not at all" (1a13687)
clang-format the tree (a0cf205)
Reapply "refactor(http2): the connection borrows its buffers and asserts its term" (f401107)
Revert "refactor(http2): the connection borrows its buffers and asserts its term" (272c11b)
KDF chain accumulates at an offset in the caller's region, not the stack (12e317a)
per-direction cipher/MAC, derived into the connection that owns the memory (cdd1463)
Merge branch 'main' of https://github.com/dstroy0/ProtoCore (809e9c2)
back out the flight sizing until the persistent-borrow contention is solved (a054a8d)
sha512 and md go back, they were not the file in hand (38620e6)
Merge branch 'main' of https://github.com/dstroy0/ProtoCore (dcdbffe)
rf work (b79fe2b)
rf work (9f5751c)
Bump version: 1.0.15 → 1.0.16 (dcb836c)
Merge branch 'main' of https://github.com/dstroy0/ProtoCore (f64aaf3)
Bump version: 1.0.14 → 1.0.15 (582ed98)
Bump version: 1.0.13 → 1.0.14 (bd0dac9)
Merge branch 'main' of https://github.com/dstroy0/ProtoCore (cb597cd)
Bump version: 1.0.12 → 1.0.13 (ebef7c8)
Merge branch 'main' of https://github.com/dstroy0/ProtoCore (8713b54)
Bump version: 1.0.11 → 1.0.12 (bbaa1ff)
Merge branch 'main' of https://github.com/dstroy0/ProtoCore (cc80df2)
Bump version: 1.0.10 → 1.0.11 (a370fce)
Merge branch 'main' of https://github.com/dstroy0/ProtoCore (06995b6)
Bump version: 1.0.9 → 1.0.10 (01e1aef)
Merge branch 'main' of https://github.com/dstroy0/ProtoCore (748e497)
Bump version: 1.0.8 → 1.0.9 (8cbcc98)
Merge branch 'main' of https://github.com/dstroy0/ProtoCore (1c261c8)
Bump version: 1.0.7 → 1.0.8 (9701de6)
Merge Dependabot #22: build(deps): bump actions/cache from 4 to 6 (20c8979)
Merge remote-tracking branch 'origin/main' (02ffde5)
Merge branch 'main' of https://github.com/dstroy0/ProtoCore (a7b482b)

Documentation

regenerate feature tables + configurator + build_opt.h + example index [skip ci] (7f8fed4)

update ESP32 build footprints [skip ci] (c80866d)

regenerate feature tables + configurator + build_opt.h + example index [skip ci] (5b76ba0)

regenerate feature tables + configurator + build_opt.h + example index [skip ci] (b79f161)

update ESP32 build footprints [skip ci] (2389946)

regenerate feature tables + configurator + build_opt.h + example index [skip ci] (1d9135c)

update ESP32 build footprints [skip ci] (61e6e03)

regenerate feature tables + configurator + build_opt.h + example index [skip ci] (fae0bdb)

close out the Sphinx entries in the delivery record (49ea705)

rebuild the Doxygen theme, group the sidebar, drop the Sphinx site (8cf35ee)

regenerate feature tables + configurator + build_opt.h + example index [skip ci] (486bef5)

update ESP32 build footprints [skip ci] (494a04f)

regenerate feature tables + configurator + build_opt.h + example index [skip ci] (10bac7c)

Refactor

give storage one owner and take the vendor out of the file-transfer servers (5081912)

take the codec's tag byte out of the shared read cursor (d4956d8)

collapse the codec cursors onto pc_span and give SSH signaling an owner (e2d0b4e)

[0.0.1] - 2026-07-31

Show Changelog for version 0.0.1 - 2026-07-31

Changes

ProtoCore 0.0.1 (dfc3436)