From 00dc3c5b9c3396e93b8dc365d569bfa713b9c20a Mon Sep 17 00:00:00 2001 From: Vasil Date: Tue, 27 Oct 2026 22:17:44 +0100 Subject: [PATCH] chore(release): 1.2.0 --- CHANGELOG.md | 5 ++++- SECURITY.md | 2 +- 2 files changed, 5 insertions(+), 2 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index f50bdc6..bd48c1f 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -8,6 +8,8 @@ All notable changes to light-tokenmeter are listed here. The format follows ## [Unreleased] +## [1.2.0] - 2026-10-27 + ### Added - `tool_call` on usage events (`server`, `tool`, `response_bytes`), sent by an MCP gateway such as Keystone's for each tool call it forwards, stored in Postgres and ClickHouse as `tool_server`, @@ -103,7 +105,8 @@ incompatibly only in a new major version. Upgrade from 0.1.x in one step. First release: append-only, idempotent usage events over HTTP and gRPC, daily summaries with filters and groupings, and usage by meta. -[Unreleased]: https://github.com/ai-process/light-tokenmeter/compare/v1.1.0...HEAD +[Unreleased]: https://github.com/ai-process/light-tokenmeter/compare/v1.2.0...HEAD +[1.2.0]: https://github.com/ai-process/light-tokenmeter/compare/v1.1.0...v1.2.0 [1.1.0]: https://github.com/ai-process/light-tokenmeter/compare/v1.0.0...v1.1.0 [1.0.0]: https://github.com/ai-process/light-tokenmeter/compare/0.1.2...v1.0.0 [0.1.2]: https://github.com/ai-process/light-tokenmeter/compare/0.1.1...0.1.2 diff --git a/SECURITY.md b/SECURITY.md index 7348b8c..8f3bb15 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -17,7 +17,7 @@ Actions' OIDC identity (keyless: there is no key to leak), and carry an SBOM and Each platform manifest is signed too. Use cosign 3 and pin the identity to the exact tag: ```bash -V=v1.1.0 +V=v1.2.0 cosign verify coyl/light-tokenmeter:${V#v} \ --certificate-identity "https://github.com/ai-process/light-tokenmeter/.github/workflows/docker-publish.yml@refs/tags/$V" \ --certificate-oidc-issuer https://token.actions.githubusercontent.com