Mirror Fractal · Codec
MMXXVI v0.3.29
Changelog · Keep a Changelog 1.1.0
Pre-1.0: minor releases may break API, patch releases stay compatible
What shipped, what changed

Release notes

Public, versioned, and machine-readable — the same notes are mirrored on the public repository at CHANGELOG.md and tagged on GitHub Releases.

v0.3.29

2026-05-19 · Phase 0 hardening

Fixed

  • requires-python raised to >=3.11 — wheels only ship cp311, users on 3.8/3.9/3.10 get a clear pip error instead of a cryptic linker failure.
  • Sensor dimension cap unified at 2048 across the WASM client, the conversion server, the browser app, the QA harness, and visible site copy.
  • Root CITATION.cff removed — public/CITATION.cff is the single source of truth (root copy lagged at 0.3.27).

Changed

  • Server CORS default tightened to https://codec.mirrorfractal.com. Override at run time via MFC_ALLOWED_ORIGINS.
  • WASM release profile strips debug info and the producers section; wasm-opt -Oz --strip-debug --strip-producers after build.

Security

  • scripts/ip_audit_public.sh enforces a hard-ban + review list against the public/ mirror; wired into a pre-push git hook.
  • WASM build pipeline rejects leaked Rust source paths or sensitive symbol names before the artifact is shipped.
  • scripts/scrub_wheel.py verifies wheels are clean of sensitive patterns after substitution.

v0.3.28

2026-04-23 · DSEC + WASM + Zenodo

Added

  • DSEC automotive (640×480) dataset validation.
  • Python bindings via PyO3 0.23.
  • WASM compress_auto() entry point — detects format from filename.
  • Server-side HDF5 conversion endpoint (server/app.py).
  • Zenodo deposit with DOI 10.5281/zenodo.19704064.

Security

  • US Provisional patent #64/034,974 filed 2026-04-10.