# CHANGELOG

Notable changes to nebu, per release.

Full release artifacts — binaries, container images, checksums — live on GitHub Releases.

• · Dependencies: github.com/stellar/go-stellar-sdk v0.5.0 → v0.6.0, and duckdb 1.5.1 → 1.5.4 in flake.nix.
• · Testing: the pkg/source/rpc integration tests now derive ledger ranges from the RPC health endpoint instead of hardcoded sequences, and assert Stream errors instead of logging them. New fully offline unit coverage for auth-header injection, Stream error paths, and cancellation; network-dependent tests skip under go test -short.
• · Docs: added AGENTS.md and docs/SMOKE_TESTING.md (bounded live-RPC end-to-end smoke test); skill-doc sync now covers every SKILL.md copy.
• · Skill: rewrote the nebu skill and added trigger evals (skills/nebu/evals/).
• · Reference hooks: added examples/hooks/ with three drop-in runtime.Hooks implementations — rate_limit.go (token-bucket, stdlib only), metrics.go (Prometheus counters + histograms), and tracing.go (OpenTelemetry spans). Each follows the same drop-in-file pattern as the existing progress.go. Smoke-tested end-to-end via hooks-demo against ledgers 62080000-62080010.
• · Docs: archive-mode examples now default to the public aws-public-blockchain/v1.1/stellar/ledgers/pubnet S3 bucket (region us-east-2). No AWS account required — the Stellar SDK's S3 datastore falls back to AnonymousCredentials when no credentials are present. Verified end-to-end: fetching 10 ledgers anonymously and piping through token-transfer produces 8,713 well-formed events.
• · Website: full redesign rolled out to docs/. New pages — man(1), processors, schemas, this changelog — plus shared assets/nebu.css and assets/nebu.js. Install script mirrored to docs/install.sh so curl -sSL https://nebu.withobsrvr.com/install.sh | sh resolves.

• · Updated AWS SDK v2 dependencies across the root module and all reference processor modules to address the EventStream decoder DoS advisory:
  • → github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream → v1.7.8
  • → github.com/aws/aws-sdk-go-v2/service/s3 → v1.99.0
• · Pulled related AWS SDK internals forward (aws-sdk-go-v2, smithy-go) via go mod tidy.
• · Verified google.golang.org/grpc is at v1.80.0, newer than the fix version for the :path authorization-bypass advisory (v1.79.3).

• · Removed an unused command and cleaned up documentation (#24).

• · Updated library dependencies.

• · Documentation updates (#19).

• · Fixed _nebu_version in event envelopes for processors installed via go install.
• · Pinned all reference processors to github.com/withObsrvr/nebu v0.6.2, so runtime build-info fallback now reports the real version instead of dev.
• · No other code changes in this release.

• · Unblocked go install for in-tree processors.
• · nebu --version now reads runtime build info when ldflags are absent.
• · nebu install now includes captured go install output in failures.
• · Fixed usdc-filter to read the correct transfer.assetCode field.
• · Added Claude Code skill docs and worked pipeline examples.

• · Added runtime hooks via Runtime.Use(Hooks{...}).
• · Added deterministic fatal-priority preemption.
• · Added CI enforcement for stable API snapshots.

• · Declared the stable contract surface: pkg/processor, pkg/source, registry.yaml v1, and --describe-json.
• · Formalized transform and sink interfaces.
• · Split pkg/source into a dep-free interface package with concrete implementations elsewhere.
• · Added the registry specification.

## LEGEND