Skip to content

release(0.8.2): standards & trust hardening#244

Open
Skobeltsyn wants to merge 1 commit into
mainfrom
release/0.8.2
Open

release(0.8.2): standards & trust hardening#244
Skobeltsyn wants to merge 1 commit into
mainfrom
release/0.8.2

Conversation

@Skobeltsyn

Copy link
Copy Markdown
Contributor

Cuts 0.8.2standards & trust hardening. Version 0.8.2-SNAPSHOT0.8.2; all six release surfaces synced together so every guard is green.

Content (all tickets closed)

  • #4736 x402 buyer trust hardening — mandatory X402SpendPolicy, tighter binding (allowedAssets / allowedResourceOrigins / clamped lifetime), deterministic cheapest-offer selection.
  • #4739 x402 cross-payment session limits (X402SessionLimits / X402SpendStore) + X402Signer seam (KMS/HSM/scoped key).
  • #4740 x402 accepts CAIP-2 network ids (eip155:84532) — v2 interop step on the v1 wire.
  • #4735 release-truth — machine-readable release-metadata.yaml + ReleaseMetadataConsistencyTest pinning README/roadmap/comparison/POM to it.

Surfaces cut to 0.8.2

build.gradle.kts version · README dep + Current Release · release-metadata.yaml currentRelease · docs/roadmap.md · docs/comparison.md · CHANGELOG [0.8.2] - 2026-07-01.

The WebFetch WIP that was commingled in the chore/0.8.2-release-truth commit was intentionally excluded — it belongs to WebTools epic #2677 (3% done), reviewed separately.

Verification

  • ./gradlew build green: detekt, checkReadmeVersion (release mode: README==version==0.8.2), checkDetektBaseline, ReleaseMetadataConsistencyTest, full suite.
  • Signed central bundle built locally (dist/agents-kt-0.8.2-central-bundle.zip, 106 entries, both modules) — SHA256 verified, GPG Good signature.

Remaining manual steps (RELEASE_RUNBOOK) — maintainer

  1. Upload dist/agents-kt-0.8.2-central-bundle.zip via the Central Portal → Publish.
  2. ./gradlew checkPublishedVersion (confirms both artifacts resolve on Central).
  3. Merge this PR → tag v0.8.2 (git tag -a --cleanup=verbatim) → push.
  4. Bump main to 0.8.3-SNAPSHOT (+ developmentVersion in metadata) per runbook step 8.

⚠️ CodeQL java-kotlin will show red (known upstream Kotlin-2.4 breakage #4383, authorized). build is the real gate.

🤖 Generated with Claude Code

Version 0.8.2-SNAPSHOT → 0.8.2. Content (all tickets closed):
- x402 buyer trust hardening: mandatory guardrails + tighter binding + deterministic offer selection (#4736)
- x402 cross-payment session limits + X402Signer seam (#4739)
- x402 CAIP-2 network ids (v2 interop step; v1 wire) (#4740)
- release-truth: machine-readable release-metadata.yaml + ReleaseMetadataConsistencyTest (#4735)

Surfaces synced to 0.8.2: build.gradle version, README dep + Current Release, release-metadata.yaml
currentRelease, roadmap, comparison, CHANGELOG [0.8.2] - 2026-07-01. Lifted #4735's release-truth
files from chore/0.8.2-release-truth; the WebFetch WIP in that commit was intentionally excluded
(belongs to WebTools epic #2677, reviewed separately).

Full ./gradlew build green: detekt, checkReadmeVersion (release mode), checkDetektBaseline,
ReleaseMetadataConsistencyTest, full suite.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant