Bump SDK version to 0.3.0

Merged
JE
11d ago
+19-19

Version bump across every SDK for the v0.3.0 release: version constants, manifests, lockfiles and the Swift version assertion, by scripts/bump-version.sh 0.3.0. No code changes.

Minor, not patch: #215 changes public API in Go, Swift and Rust (below), and pre-1.0 a breaking change takes the minor.

Release notes (v0.2.4 → v0.3.0)

New

  • Rust SDK's first tagged release from this repo (#159, #161–#164, #173). crates.io already has fizzy-sdk 0.2.4 from the bootstrap, so 0.3.0 goes through trusted publishing (release-crates, required reviewers).

Breaking

  • Sign-in follows Fizzy's real magic-link contract (#215).
    • Go: CreateSession returns *generated.PendingAuthentication; RedeemMagicLink(ctx, code) returns *generated.SessionAuthorization; Login returns (*SessionAuthorization, error). New PendingToken() and ResumeMagicLinkFlow(...). Removed CreateSessionRequest/Response, RedeemMagicLinkRequest/Response and UserID.
    • Swift: start(email:) → start(emailAddress:) -> PendingAuthentication; redeem(token:) → redeem(code:) -> SessionAuthorization; completeSignup(fullName:sessionToken:) returns nothing; PendingSession, RedeemResult, SignupResult removed.
    • Rust: RedeemMagicLinkRequestContent.token renamed code.
  • Model corrected where Fizzy's controllers disagree with it (#211): list_notifications drops the ignored read query; CreateCard requires board_id and drops column_id, assignee_ids and tag_names, which Fizzy never permitted; postpone_card, triage_card, un_triage_card and unpin_card are no longer idempotent and retry once at most.

Fixes and hardening

  • Webhook signature read from the X-Webhook-Signature header Fizzy sends (#168).
  • Request URLs redacted from transport errors in every SDK (#174, #175, #177, #178).
  • Retry caps: Go floors at one attempt (#180); Kotlin's is a ceiling on the operation budget (#182); the conformance suite pins both (#183); Ruby classifies a read timeout as a network error (#181).
  • Swift conformance runner (#185); rubric audit refreshed (#214).

Toolchain and security

  • Go 1.26.9 and the modules Trivy flags (#212); rustls 0.23.46 for RUSTSEC-2026-0346 to -0349 (#213); dependency bumps.

Before tagging

  • #201 (wait up to 5.5 h for reviewer-approved publishes) is open. Without it release-github gives up after 30 minutes, so either land #201 first or approve every publish environment within 30 minutes of make release VERSION=0.3.0.
  • #216 (Go WithResilience gates never consulted) is open and not fixed here; it was already true in 0.2.4.

After the release

fizzy-mcp-server resyncs its model with scripts/sync-model.sh at v0.3.0 (it is at v0.2.4, c721fc36); #211's corrections reach its flat catalog through that resync.