ROOT / DOCS / CHANGELOG
# CHANGELOG
Notable changes to nebu, per release.
Full release artifacts — binaries, container images, checksums — live on GitHub Releases.
## UNRELEASED
[ MAIN · HEAD ]-
·
Reference hooks: added
examples/hooks/with three drop-inruntime.Hooksimplementations —rate_limit.go(token-bucket, stdlib only),metrics.go(Prometheus counters + histograms), andtracing.go(OpenTelemetry spans). Each follows the same drop-in-file pattern as the existingprogress.go. Smoke-tested end-to-end viahooks-demoagainst ledgers 62080000-62080010. -
·
Docs: archive-mode examples now default to the public
aws-public-blockchain/v1.1/stellar/ledgers/pubnetS3 bucket (regionus-east-2). No AWS account required — the Stellar SDK's S3 datastore falls back toAnonymousCredentialswhen no credentials are present. Verified end-to-end: fetching 10 ledgers anonymously and piping throughtoken-transferproduces 8,713 well-formed events. -
·
Website: full redesign rolled out to
docs/. New pages — man(1), processors, schemas, this changelog — plus sharedassets/nebu.cssandassets/nebu.js. Install script mirrored todocs/install.shsocurl -sSL https://nebu.withobsrvr.com/install.sh | shresolves.
## v0.6.7
[ SECURITY ]
[ GITHUB → ]
-
·
Updated AWS SDK v2 dependencies across the root module and all reference processor modules to address the EventStream decoder DoS advisory:
- →
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream→v1.7.8 - →
github.com/aws/aws-sdk-go-v2/service/s3→v1.99.0
- →
-
·
Pulled related AWS SDK internals forward (
aws-sdk-go-v2,smithy-go) viago mod tidy. -
·
Verified
google.golang.org/grpcis atv1.80.0, newer than the fix version for the:pathauthorization-bypass advisory (v1.79.3).
## v0.6.6
[ GITHUB → ]- · Removed an unused command and cleaned up documentation (#24).
## v0.6.5
[ GITHUB → ]- · Updated library dependencies.
## v0.6.4
[ GITHUB → ]- · Documentation updates (#19).
## v0.6.3
[ GITHUB → ]-
·
Fixed
_nebu_versionin event envelopes for processors installed viago install. -
·
Pinned all reference processors to
github.com/withObsrvr/nebu v0.6.2, so runtime build-info fallback now reports the real version instead ofdev. - · No other code changes in this release.
## v0.6.2
[ GITHUB → ]-
·
Unblocked
go installfor in-tree processors. -
·
nebu --versionnow reads runtime build info when ldflags are absent. -
·
nebu installnow includes capturedgo installoutput in failures. -
·
Fixed
usdc-filterto read the correcttransfer.assetCodefield. - · Added Claude Code skill docs and worked pipeline examples.
## v0.6.0
[ MINOR ]
[ GITHUB → ]
-
·
Added runtime hooks via
Runtime.Use(Hooks{...}). - · Added deterministic fatal-priority preemption.
- · Added CI enforcement for stable API snapshots.
## v0.5.0
[ MINOR · CONTRACT ]
[ GITHUB → ]
[ CONTRACT ]
This release declared the stable contract surface. From this version on, breaking changes to
pkg/processor / pkg/source require a major bump and a deprecation window.
-
·
Declared the stable contract surface:
pkg/processor,pkg/source,registry.yamlv1, and--describe-json. - · Formalized transform and sink interfaces.
-
·
Split
pkg/sourceinto a dep-free interface package with concrete implementations elsewhere. - · Added the registry specification.
[ OLDER ]
Full release history including v0.4.x, v0.3.x, and earlier lives in the CHANGELOG.md in the repo and on GitHub Releases.
## LEGEND
[ MINOR ]
— added features, backwards-compatible.
[ MAJOR ]
— breaking changes to the stable contract.
[ CONTRACT ]
— touches
pkg/processor or pkg/source.
[ SECURITY ]
— advisory fix. Upgrade promptly.
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
OBSRVR
2026-04-13
NEBU(7)