Ctrlk
Get SupportWebsite
For the complete documentation index, see llms.txt. This page is also available as Markdown.

Releases

Release notes across the NFH fabric services

Expand a release to see what changed across the services.

This page is the single source of truth for release notes across all NFH fabric services. Product-specific release-notes pages have been retired in its favor.

🚀 2026-09-15

Discovr v1.7.0

  • RFC 9535–compliant JSONPath filter compiler, translating JSONPath expressions into typed SQL predicates, with a conformance test suite.

  • Fixed a tokenizer infinite-loop (denial-of-service risk) and an existence-predicate false-negative in JSONPath evaluation.

  • RFC 9535 comparison operators now correctly handle type casts, with inline function-call denylisting for security hardening.

  • Query-timeout and parse-failure are now distinguished; the legacy-probe statement timeout is now actually enforced.

  • Schema validation for discover / on_discover payloads is now optional and off by default (discovery.schema.validation-enabled), resolving startup hangs under bad network conditions.

ONIX v1.9.1

  • New JSONata-based translator plugin (jsonatatranslator) wired into the request-mapper flow, so mappings can use injected JSONata expressions instead of being hard-coded.

  • Catalog crawler no longer aborts the entire poll tick when a single network ID fails lookup — other networks keep polling.

  • Updated grpc-go and amqp091-go to address Dependabot-flagged vulnerabilities.

  • Internal caching added for JSONata expression compilation, reducing repeated parsing overhead.

DeDi v0.8.2

  • Security patches and stability improvements.

🚀 2026-08-31

ONIX v1.9.0

  • Decentralized-catalog crawling and publishing support, including a new signed /crawl/status endpoint and an on-demand crawl trigger.

  • Catalog publish payloads now get referential and business validation before acceptance.

  • Fixed off-by-one and falsy-zero bugs in the catalog crawler's park/abandon budget logic.

  • Fixed a logging bug that dropped error attributes on Warn/Info/Debug records.

  • Hardened post-write verification for published catalog files.

🚀 2026-08-14

Discovr v1.6.0

  • New catalog-crawler service, pushing decentralized catalogs into Discover's index so they're searchable via discover; runs independently with no consumer configuration needed.

  • Fixed catalog metadata not propagating to resources absent from a MERGE publish, and offers being dropped on MERGE publishes that omitted them.

  • Fixed catalog metadata incorrectly propagating from offer-only publishes.

Registry v1.0.3

  • More flexible lookup URL format for subscriber/record references, including looking up records directly by name.

  • Enhanced logging for DeDi/Beckn parameters.

  • Fixed parsing of reference URLs that omit the scheme (host:port).

  • Fixed stale record/subscriber index entries not being cleaned up on record storage.

DeDi v0.9.0

  • Added domain crawling support.

ONIX v1.8.2

  • VC validator now rejects Data Integrity proofs missing verificationMethod.

  • Internal error-handling refactor (consolidated CodedErr type) — no consumer-facing change.

🚀 2026-07-31

ONIX v1.8.1

  • Adapter now logs its version at startup and exposes it at runtime.

  • Patched kin-openapi, grpc-go, and golang.org/x/crypto (13 Dependabot-flagged SSH CVEs).

  • Breaking: NACK error responses now use Beckn v2.0.0 ErrorCode taxonomy strings instead of HTTP-status-mapped codes. No action needed unless integrator logic keys off the old codes.

CATALG v1.5.1

  • Fixed the on_publish callback retry path to use a bounded, config-driven retry budget instead of unbounded retries.

  • Fixed a silent record drop when the DLT produce step itself failed — now acknowledges correctly.

Registry v1.0.2

  • NFO (subscriber reference) registries now auto-publish to the global root registry, with no manual approval needed.

  • Routine dependency patching.

DeDi v0.8.0

  • New x402 Agent-Ready Authentication — wallet-signature auth as an additional option alongside existing token auth.

  • Added search to enum multi-select fields.

  • Fixed CPU-aware worker allocation and chain-task concurrency; the bulk-upload status API's missing progress fields; the bulk-upload + DNS TXT dialog box; record-form focus and blank-field handling; empty form fields in schema payloads.

  • A 402 response is now correctly classified as unauthorized.

🚀 Week 29 · 2026

ONIX v1.8.0

  • Schema version mediation plugin and a W3C Verifiable Credential validator (did:key / did:jwk / did:web, with revocation checks).

  • Network-agnostic DeDi registry subscriber resolution; context.network_id is now validated against the caller's network memberships.

CATALG v1.5.0

  • New Catalog Pull API (POST /catalog/pull + on_pull callback); 5 MB payloads supported end-to-end.

  • Error codes standardized to the Beckn v2.0 ErrorCode enum; on_publish now sends one consolidated report per request.

Discovr v1.5.0

  • on_pull callback ingestion; opt-in ?active / ?validity discover filters; legacy_ack_nack_support flag (default off).

Registry v1.0.1

  • Faster caching for new registries; cache-refresh and record-lookup stability fixes.

DeDi v0.7.0

  • Typed deletion confirmations; form-based / JSON-paste schema builder; Beckn subscriber verification UI; namespace creation and anchoring now run in the background.

🚀 Week 27 · 2026

NFH fabric Release Week 27-2026 is live!

We've successfully deployed this week's release across the NFH fabric services. Here's what's new:

ONIX v1.7.2

  • Audit log now captures ACK/NACK response bodies and Beckn signature headers for full traceability.

  • Sign validator now tolerates configurable clock skew (default 5s) on inbound signature timestamps — fixes NTP drift issues between network participants.

CATALG v1.4.0

  • Catalog-level bppId and bppUri are now preserved through the publish pipeline.

  • Subscription update endpoint restored per Beckn v2.0 spec (POST /catalog/subscription?subscriptionId=).

  • Request correlation IDs (messageId / transactionId) now attached to every log line for improved traceability.

  • DeDi registry-entry cache is now configurable.

Discovr v1.4.0

  • Discover responses now echo catalog-level bppId, bppUri, provider.availableAt, and catalog.isActive.

  • All 7 JSONPath / Geo / Text query combinations now routed correctly.

  • Discover results can be scoped by context.networkId.

  • Multi-location publish now fully supported.

PreviousRoadmap

Last updated

Was this helpful?