QRun-IO/qbit-webhooks
3
0 Fork 0
Code Issues Pull Requests 3 Actions Packages Projects Releases 9 Wiki Activity

9 Releases 10 Tags

RSS Feed
  • v1.0.0-RC.6 711e5322d4
    Compare

    qbit-webhooks 1.0.0-RC.6 Pre-Release

    KofTwentyTwo released this 2026-10-16 16:28:51 +00:00 | 10 commits to develop since this release

    qbit-webhooks 1.0.0-RC.6 release candidate. RC.5 and earlier remain immutable. Requires QQQ 4.1.0-RC.8 or later.

    Since RC.5

    • fix(help): help bundle version comes from the build, not a hardcoded SNAPSHOT (#20)
    • test(help): bundle version test compares with the artifact version (#21)
    • fix: qbit metadata version comes from the build (#22)
    • ci(release-rc): pass secrets so the shared workflow can sign the RC tag (#23)
    • fix(webhooks): filtered JSON drill links on health tile and home KPIs (#25)

    The help bundle ships the qbit's in-app help through QQQ help bundles (core < qbit < host < user edit), so hosts no longer need staging copies.

    No GA approval is implied.

    The signed annotated tag v1.0.0-RC.6 fixes source 711e532 on release/1.0.

    Downloads
  • v1.0.0-RC.5 120b5c19f9
    Compare

    qbit-webhooks 1.0.0-RC.5 Pre-Release

    KofTwentyTwo released this 2026-10-15 03:38:38 +00:00 | 22 commits to develop since this release

    qbit-webhooks 1.0.0-RC.5 release candidate. RC.4 and earlier remain immutable. Requires QQQ 4.1.0-RC.8 or later.

    Since RC.4

    • feat(help): qbit-webhooks help bundle via QQQ help bundles, with coverage gate (#19)
    • feat(health): register webhook endpoint and dispatcher checks with core central health (#16)

    The help bundle ships the qbit's in-app help through QQQ help bundles (core < qbit < host < user edit), so hosts no longer need staging copies.

    No GA approval is implied.

    The signed annotated tag v1.0.0-RC.5 fixes source 120b5c1 on release/1.0.

    Downloads
  • v1.0.0-RC.4 dca2c80043
    Compare

    qbit-webhooks 1.0.0-RC.4 Pre-Release

    KofTwentyTwo released this 2026-10-14 23:29:07 +00:00 | 32 commits to develop since this release

    qbit-webhooks 1.0.0-RC.4 release candidate. RC.3 and earlier remain immutable. Requires QQQ 4.1.0-RC.6 or later.

    Since RC.3

    • Foreign keys between the webhooks tables, with an orphan-safe upgrade (#17).
    • Guided empty states, a Setup card and a tables guardrail (#18).
    • CI: qqq-orb 0.6.9 (#15).

    Schema note: these are additive foreign keys (and indexes). Deleting a config row that other rows still reference is now refused instead of leaving orphans.

    No GA approval is implied.

    The signed annotated tag v1.0.0-RC.4 fixes source dca2c80 on release/1.0.

    Downloads
  • v1.0.0-RC.3 f2e1957e72
    Compare

    qbit-webhooks 1.0.0-RC.3 Pre-Release

    KofTwentyTwo released this 2026-10-14 12:45:25 +00:00 | 43 commits to develop since this release

    qbit-webhooks 1.0.0-RC.3 release candidate. RC.2 and earlier remain immutable.

    Since RC.2

    • Moves to QQQ 4.1.0-RC.6 and qbit-build-parent 2.1.0 with guardrails enforced (#14)

    No GA approval is implied.

    The signed annotated tag v1.0.0-RC.3 fixes source f2e1957 on release/1.0.

    Downloads
  • v1.0.0-RC.2 743790923f
    Compare

    qbit-webhooks 1.0.0-RC.2 Pre-Release

    KofTwentyTwo released this 2026-10-14 01:07:22 +00:00 | 47 commits to develop since this release

    qbit-webhooks 1.0.0-RC.2 is published to Maven Central (com.kingsrook.qbits:qbit-webhooks:1.0.0-RC.2) from release/1.0 on 2026-10-14. It uses the core WebhookSigner and SSRF-safe HTTP client from QQQ 4.1.0-RC.5 in place of its internal copy (#13). It builds against QQQ 4.1.0-RC.5 with no SNAPSHOT dependencies. This is a prerelease.

    The signed annotated tag v1.0.0-RC.2 fixes source 7437909 on release/1.0.

    Downloads
  • v1.0.0-RC.1 3d87ba7107
    Compare

    qbit-webhooks 1.0.0-RC.1 Pre-Release

    KofTwentyTwo released this 2026-10-12 23:49:10 +00:00 | 53 commits to develop since this release

    qbit-webhooks 1.0.0-RC.1 is the first release candidate of webhooks 1.0: signed, SSRF-safe, replica-safe outbound webhooks. It is published to Maven Central (com.kingsrook.qbits:qbit-webhooks:1.0.0-RC.1) from release/1.0 on 2026-10-12. Design: qqq#1105, approved by the owner. It includes #8 (1.0) and #11 (the 0.x sources removed). It builds against QQQ 4.1.0-RC.4 and carries an internal copy of the core webhook signer and safe HTTP client; the core versions (qqq#1109) ship in QQQ 4.1.0-RC.5 and replace the copy in a later RC. Breaking versus 0.x (see the changelog). This is a prerelease.

    The signed annotated tag v1.0.0-RC.1 fixes source 3d87ba7 (the orb's version bump on the release branch).

    Notes from the changelog:

    A rebuild of the qbit on QQQ 4.1 (design: QRun-IO/qqq#1105, docs/DESIGN.md). Breaking: see docs/migration-0.x-to-1.0.md.

    Added

    • Signing:
      • Standard Webhooks signing (webhook-id, webhook-timestamp, webhook-signature: v1,..., webhook-attempt).
      • Per-endpoint secrets, stored encrypted (AES-256-GCM) or as environment references; rotation with an overlap; an admin-only secret value widget.
    • SSRF-safe sending:
      • Private, loopback, link-local and metadata ranges are blocked.
      • DNS is resolved once and the connection pinned; redirects are not followed.
      • TLS 1.2+, connect, read and total timeouts, and a response size cap.
      • An admin-only internal allowlist per endpoint.
    • Event sources:
      • Delete events.
      • Process completed and failed events.
      • The ESB as an event source (WebhooksEsbSource), with own-event skipping and CloudEvent-id dedup.
      • Custom events (Webhooks.fire) and a channel API for other qbits (Webhooks.deliver).
    • Delivery engine:
      • An event id and idempotency key on every delivery.
      • Atomic claims safe across replicas (a unique attempt row) with leases.
      • Dead letters with Replay, and serial delivery per endpoint.
      • Rate limits per endpoint, 429 Retry-After handling without blocking the runner, and auto-disable after failed probations.
      • Retention purge.
    • Subscriptions:
      • Record filters (QQQ query filter JSON), record security matching and a read-permission check on subscribe.
      • Detail levels, include and exclude field lists.
    • Alerts: raised through the Alerts producer SPI when present.
    • App:
      • A home dashboard (delivery volume, failures, dead letters, attention list, latency).
      • Plain-language table and record actions with the standard review and result screens.
    • Integrations: ESB, Quick Search and API hooks (WebhooksIntegrations).
    • Repository: Postgres DDL in docs/ddl; JaCoCo gate; Checkstyle in verify; Maven wrapper; repo-standard files.

    Changed

    • Tables renamed to webhooks_endpoint, webhooks_endpoint_secret, webhooks_subscription, webhooks_delivery, webhooks_delivery_attempt; permissions to webhooks.view / manage / admin.
    • Payload envelope is now {id, type, timestamp, source, sourceEventId, data}.
    • One scheduled delivery process replaces the per-webhook jobs.
    • httpTimeoutMillis is now honoured.
    • Builds against QQQ 4.1.0-RC.4 by default.

    Removed

    • webhookEventContent (the payload is a column of webhooks_delivery).
    Downloads
  • v0.3.0 7d465d401a
    Compare

    v0.3.0 - Java 21 LTS Stable

    KofTwentyTwo released this 2025-12-28 22:44:42 +00:00 | 91 commits to develop since this release

    Java 21 LTS migration with qbit-build-parent 1.5.1 and qqq 0.35.0 compatibility.

    Downloads
  • v0.2.1 f59fdb68d1
    Compare

    Release 0.2.1 Stable

    KofTwentyTwo released this 2025-12-25 03:31:01 +00:00 | 95 commits to develop since this release

    Artifacts

    Maven Central:

    Backfilled release via meta-manager

    Full Changelog: https://github.com/QRun-IO/qbit-webhooks/compare/v0.2.0...v0.2.1

    Downloads
  • v0.2.0 72d96899d0
    Compare

    Release 0.2.0 Stable

    KofTwentyTwo released this 2025-12-25 03:31:02 +00:00 | 96 commits to develop since this release

    Artifacts

    Maven Central:

    Backfilled release via meta-manager

    What's Changed

    New Contributors

    Full Changelog: https://github.com/QRun-IO/qbit-webhooks/commits/v0.2.0

    Downloads