Release 0.81.0 (public) — Enterprise: secrets (R5) + gateway backend (R4) - #238
Merged
Merged
Conversation
🛡️ GraQle PR Guardian💥 Blast Radius: 3 modules affected
Total blast radius: 3 🏛️ Governance Verdict
|
| Metric | Value |
|---|---|
| Blast Radius | 3 |
| Files Analyzed | 3 |
| Blocked | 0 |
| SHACL Violations | 0 |
| Verdict | WARN |
🔬 Powered by GraQle PR Guardian v0.1.0 · Scan completed 2026-07-27T10:37:05.390523+00:00
harishquantamix
approved these changes
Jul 27, 2026
… (R4) Version bump for the CR-010 Enterprise Enhancement Program's first two P0 requirements, both already merged to master and additive/backward-compatible: - R5 secrets provider abstraction (graqle/config/secrets.py) — env|file| keychain|command, $SECRETS_PATH mounted files, SecretStr masking, fail-closed, behind GRAQLE_USE_SECRETS_RESOLVER (default off). - R4 enterprise-gateway LLM backend (GatewayBackend) — org/RPC headers (Authorization reserved), sidecar base_url, client-side model_allowlist, 401->refresh-once via the R5 command provider. Bumps: pyproject.toml + graqle/__version__.py 0.80.0 -> 0.81.0; CHANGELOG entry. Release coordination: 0.81.0 = R4+R5 (CR-010 lane); the monetisation session takes 0.82.0 next (owner decision 2026-07-26). No competing bump. Governance: version bump merged BEFORE tag (private-first); v0.81.0 tag pushed only after this + its public cherry-pick are merged; CI publishes to PyPI via Trusted Publishing on the tag. TS-1..TS-4 screen: 0 hits. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
quantamixsol
force-pushed
the
cr-010-release-0810-public
branch
from
July 27, 2026 10:36
fcbe618 to
4935b46
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Release 0.81.0 (public) — Enterprise: secrets providers (R5) + gateway backend (R4)
Public cherry-pick of the version bump merged privately in PR #312 (
cd6ed7e8). Puts R4 + R5(already on public master) onto PyPI.
Changes (version bump ONLY — 3 files)
pyproject.toml+graqle/__version__.py: 0.80.0 → 0.81.0CHANGELOG.md: 0.81.0 section (R5 secrets provider + R4 gateway backend)No mix-up guarantee
Cherry-picked only the bump commit
f55643df(not the merge commit). Verified the diff is exactly the3 files above and contains none of the concurrently-merged monetisation PR #313 files
(
scan.py/meter.py/test_limits_meter.py) — that work is the monetisation session's, shipping on itsown version lane (NOT 0.81.0). TS-1..TS-4 screen: 0 hits.
What ships in 0.81.0
secrets:resolver (env|file|keychain|command;$SECRETS_PATH/<name>mounts;SecretStr;fail-closed; behind
GRAQLE_USE_SECRETS_RESOLVER, default off).GatewayBackendfor corporate OpenAI-compatible gateways (org/RPC headers, reservedAuthorization, sidecarbase_url, client-sidemodel_allowlist, 401→refresh-once via R5 commandprovider) +
create_gateway_backend()factory.After merge → release
Push
v0.81.0tag → CI publishes to PyPI via Trusted Publishing (ci.ymlpublishjob,refs/tags/v*).Release Gate (PyPI)CI check infra-fails (prediction provider FileNotFoundError) — unrelated to thischange, not a publish blocker.
🤖 Generated with Claude Code