Prepare SDK v0.33.1 release
Summary
Prepare a patch release of the changes already on main since v0.33.0. Synchronize versions, lockfiles and install examples across all five SDKs with make bump VERSION=0.33.1. No additional dependency or API changes in this PR.
Key release contents:
- Prevent replaying redirected non-idempotent writes after a hop returns 401: #269.
- Refuse redirects on Go OAuth token exchanges and refresh requests: #271.
- Kotlin DPoP proof/nonce handling and safe token revocation: #268 and #270.
- Rust certificate-trust advisory fixes: #273; dependency and release-tooling maintenance already merged.
Patch version: no breaking public surface changes. HEY CLI will consume this version via basecamp/hey-cli#592 after publication.
Verification
- Ran make check through mise: Smithy/model/drift checks, Go, Rust (including cargo deny and package dry-run), TypeScript (545/545 tests), Kotlin and Kotlin generation checks pass.
- Full local make check stops at Swift because swift is not installed on this host; Swift CI must pass before release.
- Separately ran conformance for all locally available languages: Go 220/220, Rust 220/220, Kotlin 220/220; TypeScript 215/215 applicable, 5 explicitly not applicable (220 total).
- Reviewed all 16 changed files: version substitutions only, no third-party lockfile drift; git diff --check passes.
Publication is explicitly authorized by the operator, but no tags have been pushed yet. Release follows only after checks and reviews settle.
Summary by cubic
Prepares the v0.33.1 patch release by bumping version numbers and lockfiles across all five SDKs (Go, Kotlin, Rust, Swift, TypeScript), with no API or behavior changes.
The release bundles fixes already on main: redirect handling for non-idempotent writes after 401s, refusal of redirects on Go OAuth token exchanges, Kotlin DPoP nonce handling and safe token revocation, and Rust certificate-trust dependency fixes.
Verification
- Ran
make checkfor all languages except Swift (not installed); Swift CI must pass before release. - Conformance suites pass: Go, Rust, Kotlin 220/220; TypeScript 215/215 applicable, 5 intentionally not applicable.