0.7.2-alpha.2-aio.1

Build

• Track upstream Sure Alpha 0.7.2-alpha.2.
• Publish Docker Hub and GHCR tags with the configured component revision tag.

Component Customizations

• Preserve the Sure AIO alpha import-limit overlay documented in docs/alpha-lane.md.
• Preserve the strict SureImport preflight/failure overlay until the pinned upstream alpha includes equivalent behavior.
• Preserve the route-parity importer overlay for Enhanced NDJSON split/transfer proof packages until upstream carries it.
• Keep SURE_IMPORT_MAX_NDJSON_SIZE_MB and SURE_IMPORT_MAX_ROWS alpha-only.
• Do not add dirty-target taxonomy merge as a Unraid template or environment control.
• Keep alpha passkey/WebAuthn template controls separate from stable.

0.7.2-alpha.1-aio.1

Build

• Track upstream Sure Alpha 0.7.2-alpha.1.
• Publish Docker Hub and GHCR tags with the configured component revision tag.

Component Customizations

• Preserve the Sure AIO alpha import-limit overlay documented in docs/alpha-lane.md.
• Preserve the strict SureImport preflight/failure overlay until the pinned upstream alpha includes equivalent behavior.
• Preserve the route-parity importer overlay for Enhanced NDJSON split/transfer proof packages until upstream carries it.
• Keep SURE_IMPORT_MAX_NDJSON_SIZE_MB and SURE_IMPORT_MAX_ROWS alpha-only.
• Do not add dirty-target taxonomy merge as a Unraid template or environment control.
• Keep alpha passkey/WebAuthn template controls separate from stable.

0.7.1-aio.2

Fixes

• Allow service worker behind reverse proxies

0.7.1-alpha.11-aio.2

Fixes

• Preserve Rails origin checks behind reverse proxies.
• Add null-origin compatibility for Sure 0.7.1 alpha proxy login paths.
• Allow the browser service worker behind reverse proxies without triggering Rails cross-origin JavaScript protection.

Component Customizations

• Preserve the Sure AIO alpha import-limit overlay documented in docs/alpha-lane.md.
• Preserve the strict SureImport preflight/failure overlay until the pinned upstream alpha includes equivalent behavior.
• Preserve the route-parity importer overlay for Enhanced NDJSON split/transfer proof packages until upstream carries it.
• Keep SURE_IMPORT_MAX_NDJSON_SIZE_MB and SURE_IMPORT_MAX_ROWS alpha-only.
• Do not add dirty-target taxonomy merge as a Unraid template or environment control.
• Keep alpha passkey/WebAuthn template controls separate from stable.

0.7.1-aio.1

Fixes

• Preserve Rails origin checks behind reverse proxies

• Add null-origin support for Sure 0.7.1

0.7.0-hotfix.3-aio.3

Documentation

• Normalize CA metadata

Maintenance

• Reconcile app manifest

• Bump sure alpha to 0.7.1-alpha.10

• Bump sure alpha to 0.7.1-alpha.11

0.7.1-alpha.11-aio.1

Build

• Track upstream Sure Alpha 0.7.1-alpha.11.
• Publish Docker Hub and GHCR tags with the configured component revision tag.

Component Customizations

• Preserve the Sure AIO alpha import-limit overlay documented in docs/alpha-lane.md.
• Preserve the strict SureImport preflight/failure overlay until the pinned upstream alpha includes equivalent behavior.
• Preserve the route-parity importer overlay for Enhanced NDJSON split/transfer proof packages until upstream carries it.
• Keep SURE_IMPORT_MAX_NDJSON_SIZE_MB and SURE_IMPORT_MAX_ROWS alpha-only.
• Do not add dirty-target taxonomy merge as a Unraid template or environment control.
• Keep alpha passkey/WebAuthn template controls separate from stable.

0.7.1-alpha.10-aio.1

Build

• Track upstream Sure Alpha 0.7.1-alpha.10.
• Publish Docker Hub and GHCR tags with the configured component revision tag.

Component Customizations

• Preserve the Sure AIO alpha import-limit overlay documented in docs/alpha-lane.md.
• Preserve the strict SureImport preflight/failure overlay until the pinned upstream alpha includes equivalent behavior.
• Preserve the route-parity importer overlay for Enhanced NDJSON split/transfer proof packages until upstream carries it.
• Keep SURE_IMPORT_MAX_NDJSON_SIZE_MB and SURE_IMPORT_MAX_ROWS alpha-only.
• Do not add dirty-target taxonomy merge as a Unraid template or environment control.
• Keep alpha passkey/WebAuthn template controls separate from stable.

0.7.0-hotfix.3-aio.2

Fixes

• Harden Sure runtime, template secret masking, and release paths.
• Derive external assistant session keys when operators leave the shared key blank.
• Tighten first-boot database readiness so Rails waits for authenticated PostgreSQL access.

0.7.1-alpha.9-aio.2

Fixes

• Harden Sure runtime, alpha import preflight, template secret masking, and release paths.
• Enforce capped alpha import limits and structured malformed Account preflight errors.
• Derive external assistant session keys when operators leave the shared key blank.
• Tighten first-boot database readiness so Rails waits for authenticated PostgreSQL access.