medizininformatik-initiative/aether v0.14.0

on GitHub

This is a correctness and test-hardening release. Three bug fixes close real defects: the OAuth2 token cache was not keyed by issuer/clientID and could hand one service another service's token; ExpandEnvVars silently ignored the documented $VAR and lowercase ${var} forms; and pipeline continue read a --no-progress flag that was never registered. Alongside these, a large test sweep hardens job locking, concurrent state writes under -race, the download stall watchdog, HTTP-client retry/replay behavior, flattening Provenance handling, and pure-function coverage, and the docs were cleaned of orphaned artifacts and inaccurate CLI help.

What's Changed

Bug Fixes

• fix(oauth2): token cache not keyed by issuer/clientID serves wrong token across services — the cache ignored issuer and client ID, so a token minted for one service could be served to another. Keying the cache by issuer/clientID prevents cross-service token leakage. (closes #534) #544
• fix(config): ExpandEnvVars ignores documented $VAR and lowercase ${var} forms — only a subset of the documented syntax was expanded; the bare $VAR and lowercase ${var} forms were left literal. Expansion now matches the documented behavior. (closes #535) #547
• fix(cli): register --no-progress on pipeline continue — the flag was read at runtime but never registered on the command, so passing it errored. It is now registered. (closes #555) #556

Internal & CI

• test(locks): cover job locking — acquire, contention, release-on-error, double-release. (closes #536) #543
• test(state): real concurrent job-state writes under -race, replacing the skipped race test. (closes #537) #548
• test(torch): exercise mid-body download stall watchdog. (closes #539) #545
• test(httpclient): pin MaxAttempts==0 behavior and request-body replay across retries. (closes #540) #550
• test(flattening): malformed Provenance chains and per-group batch-budget clamp. (closes #541) #546
• test(retry): table tests for backoff and network-error classification; replace hand-rolled string helpers. (closes #538) #549
• test: pure-function coverage sweep — throughput, utils, fhir, transitions, state deletion, compression close. (closes #542) #551
• docs: remove orphaned point-in-time artifacts from docs/. (closes #554) #557
• docs: fix inaccurate CLI help texts and documentation. (closes #553) #558

Dependency Updates

• Docker: update chrislusf/seaweedfs tag to v4.39 #552

Full Changelog