Skip to main content

Changelog

This page lists the changes in each Priompt release, newest first. Version numbers follow the server repository (github.com/priompt/priompt); the other repositories have their own tags, listed with the release they shipped in.

v0.7.4​

Released 2026-10-19. Ships with proto, db-adapters, auth, and cli v0.7.2. The SDKs are unchanged.

Server

  • ListBranches and ListCommits: list every branch of a prompt and its tip, and every commit, including commits a rollback left off every branch (#45). See gRPC API.
  • Expired NATS tokens: the broker closes a subscriber's connection when its API token or JWT expires (#47). See Security.

Modules

  • cli v0.7.2 (promptctl): diff skips prompts that differ from the ref only in line endings, instead of printing no changes (cli#11).
  • auth v0.7.2: authn.Identity carries the credential's expiry.
  • proto and db-adapters v0.7.2: the two new RPCs and their store queries.

Web UI (from the ui repository's main; needs server v0.7.4)

  • The Branches tab lists every branch of the prompt, and Show another branch is gone (ui#7).
  • The Rollback list shows every commit of the prompt, so you can roll forward to any of them (ui#8).
  • A production build (pnpm build) finds the proto file (ui#20).

v0.7.3​

Released 2026-10-18. Ships with proto, db-adapters, auth, and cli v0.7.1, priompt-sdk 0.7.1, and @priompt/client 0.1.1.

Upgrading Docker volumes

The image now runs as uid 10001 instead of root. Before you start it on a volume that an older image wrote, run docker run --rm -v <volume>:/data alpine chown -R 10001:10001 /data. See Install with Docker.

Security. These advisories are fixed in this release:

  • GHSA-6rcm-p855-wm85 (high): the NATS broker token gave every holder full rights across orgs. Subscribers now use their own API token, limited to their org.
  • GHSA-v49j-3wx9-7frw (medium): addresses with dots could share a NATS subject. Subjects now percent-encode segment bytes outside [A-Za-z0-9_-]. Use the SDK releases above.
  • GHSA-v7x7-f94j-4x29 (medium): DiffCommits didn't check that both commits belong to the requested prompt.

Server and priompt CLI

  • Docker: the database lives on the /data volume with the default command, and the image runs as a non-root user (#12).
  • Merge events: MergeBranch into main notifies subscribers with the verdict (#13).
  • TLS flags: -tls-cert without -tls-key, or the reverse, stops the server (#14).
  • watch: logs the NATS URL as nats://***@host (#15).
  • put and import: validate, and commit to main; identical content is a no-op (#16).
  • publish: prints unchanged … already served; no change event sent for a no-op, and still sends the event when the cache clear fails (#17).
  • Encryption key: a missing or wrong PRIOMPT_ENCRYPTION_KEY stops the server at startup (#18).
  • Semantic diff: a trailing newline doesn't change the verdict. The demo prompt now ends with a newline, so its version hash is 22e5cc10ac0f instead of e345dcf74d01 (#19).
  • init on Windows: prints PowerShell syntax (#20).
  • Template files: the CLI strips a UTF-8 byte-order mark, converts CRLF to LF, and rejects UTF-16 (#21).
  • Dev seed script: seed-dev.sh runs on Linux and macOS and from any directory (#22).
  • Branch publishes: republishing a branch tip's content is a no-op (#23).
  • ListPrompts: an empty prefix with an org-scoped token lists that org (#24).
  • Audit log: lines for JWT callers include sub (#25).

Modules

  • auth v0.7.1: a # after the first field starts a comment in tokens, clients, and groups files; two org words or two expiries on a line is an error (auth#2).
  • proto v0.7.1: an edit to the last line is one replace hunk (proto#5); buf lint passes (proto#3); created_at is documented as RFC3339Nano (proto#4).
  • cli v0.7.1 (promptctl): diff -fail-on exits 1 on a matching verdict, and added prompts read new (cli#3); -tls without -ca-cert trusts the system CA roots (cli#4); promote returns to the branch you started on (cli#5).
  • Every repository now carries the Apache-2.0 LICENSE file.

SDKs

  • priompt-sdk 0.7.1: subscribe(..., reload=) applies a reload policy to the cache (python-sdk#3); a wrong broker token or an unreachable broker raises ConnectionError (python-sdk#4); reads PRIOMPT_TOKEN (python-sdk#5); new subject encoding.
  • @priompt/client 0.1.1: uses @nats-io/transport-node (js-sdk#5); a wrong broker token rejects at once with Authorization Violation (js-sdk#6); reads PRIOMPT_TOKEN (js-sdk#7); new subject encoding. Not on npm yet; see Known issues.

Web UI (from the ui repository's main)

  • Check impact returns the real verdict (ui#4); the commit dialog saves the extended description (ui#5); Create branch keeps the selected prompt (ui#6).
  • Branches beyond the four conventional names can be shown by name (ui#7), and the Rollback list can roll forward, with Undo after a rollback (ui#8). Both are partial until priompt#45.
  • A branch switcher, Compare buttons, navbar search inside a namespace, and a namespace History tab that lists prompts (ui#9); assorted cosmetic fixes (ui#10).

v0.7.2​

Released 2026-10-17.

  • Version reporting: A binary built with go install github.com/priompt/priompt/cmd/[email protected] reports its module version in priompt version and in the startup log line. A go build in a checkout reports the git commit. Release builds still stamp both through -ldflags. In v0.7.1, go install builds reported dev.

v0.7.1​

Released 2026-10-17.

  • Public Go modules: The server is published as github.com/priompt/priompt and requires the published modules, with no replace directives. go install github.com/priompt/priompt/cmd/priompt@latest works without a clone.
  • Module releases: These modules were tagged v0.7.0 the same day, under their public paths:
    • github.com/priompt/proto: the gRPC contract, the JWT claims, validation, and the semantic diff.
    • github.com/priompt/db-adapters: the SQLite and PostgreSQL storage engine.
    • github.com/priompt/auth: priompt-auth and the authn package the server uses.
    • github.com/priompt/cli: promptctl.

v0.7.0​

Released 2026-10-17. The first tagged server release, and the first published container image.

  • Container image: Tagging v* publishes ghcr.io/priompt/priompt for linux/amd64 and linux/arm64, with provenance and an SBOM. The release runs only after the test workflow passes.
  • Build info: New priompt version command. serve logs its version and commit at startup, and the metrics endpoint exposes priompt_build_info{version,commit,goversion}.
  • Server-side versioning: Each prompt has a commit history with branches, merges, history, commit diffs, pinning by ref, and rollback. Change events carry the semantic diff verdict.
  • License: The server and both SDKs are licensed under Apache-2.0.

The client SDKs were prepared for their registries in the same cycle:

  • Python SDK 0.7.0: published as priompt-sdk. It imports as priompt_sdk.
  • Node SDK 0.1.0: published as @priompt/client.

Earlier versions​

Versions before v0.7.0 weren't tagged. They added these features:

VersionAdded
v0.6Token expiry and rotation, mTLS, Prometheus metrics and the audit log, per-org rate limits, backup and restore, schema migrations.
v0.5PostgreSQL storage, the shared Redis cache, and org-scoped tokens.
v0.4Change events over embedded NATS, and TTL sync for subscribers.
v0.3promptctl: commit, diff, log, promote, push, and pull.
v0.2Client (L1) and server (L2) caches with a TTL, keyed on the version hash.
v0.1The gRPC server, the Python client, and prompt validation.

For what's planned next, see Status and roadmap.