Tags: Keyrunes/keyrunes

keyrunes 0.3.0

JWT property-based and fuzz suite (tests/jwt_property_test.rs, 12 tests) plus
unit coverage for the pure logic that cargo-mutants found untested.

Lib tests 45 -> 70. Mutation score in the examined scope: 15/39 viable
mutants caught -> 37/42.

Refactors driven by the mutation run (behaviour unchanged):
- api/health: overall_status() and status_code_for() extracted out of
  health_check so the verdict is testable without a PgPool.
- handler/logging: request_severity() extracted out of the middleware.

chore(audit): exempt scc RUSTSEC-2026-0205 + spin yanked (deferred up…

…stream)

RUSTSEC-2026-0205: scc unsoundness fixed in 3.8.4, blocked by serial_test 3.x not stable.
spin 0.9.8 yanked: fixed in 0.12.2, blocked by lazy_static 1.5.0 + flume 0.11.x pinning 0.9.x.

Both exempt with re-check date 2026-10-14 (90 days).
KeyRunes does not use scc or spin directly — only via dev-dependencies.
GitHub Actions will now report 0 audit warnings.

chore: Update Changelog and fixed version in Cargo.toml

build: prepare queries offline to docker image

build: add ignore in cargo audit false positive

Version 0.1.0 - Alpha release