release: v0.1.1 — security, correctness, CI

Patch release rolling up all post-v0.1.0 work:
- Pentest remediation (5 findings, 2 HIGH — Strix.ai)
- Audit #8 (21 findings, 0 open)
- Thrift Correctness Phase (47 new tests, parquet-format 2.9.0 alignment)
- 73 → 92 enterprise compliance gap fixes (FIPS 140-3, EU AI Act,
  MiFID II, GDPR, DORA)
- EventBus + FeatureReader hot-path performance (lock-free, RG cache)
- Local KMS key store (additive — IKmsClient, on-premise deployments)
- 17-job CI: Ubuntu, macOS, Windows MSVC, ASan/UBSan/TSan, fuzz,
  mutation, codecov, codeql, sbom, license-check
- 779 → 830 unit tests (844/844 in local server-pq build)

Public C++ API: no breaks. Rust: ParquetReader::schema() now returns
SchemaRef<'a> (lifetime-bound) to fix CWE-416 — see CHANGELOG migration.

Version bumps: CMakeLists.txt, Doxyfile, CITATION.cff, pyproject.toml,
both Cargo.toml, all four packaging manifests (conan, conda, homebrew,
vcpkg).

Author: Johnson-Ogundeji

CHANGELOG.md

@@ -7,6 +7,24 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.1.1] — 2026-05-01
+
+This release rolls up all post-v0.1.0 security, correctness, and CI work:
+external pentest remediation (5 findings, 2 HIGH), Audit #8 (21 findings),
+Thrift Correctness Phase (47 new tests), 73 → 92 enterprise compliance gap
+fixes, EventBus and FeatureReader performance improvements, local KMS key
+store for on-premise deployments, and Windows MSVC + Ubuntu CI green across
+17 jobs. 779 → 830 unit tests, all passing. No public C++ API breaks; the
+Rust `ParquetReader::schema()` return type changed from `Schema` to
+`SchemaRef<'a>` to fix CWE-416 — see migration note below.
+
+### Migration
+
+- **Rust**: `ParquetReader::schema()` now returns `SchemaRef<'a>` (lifetime
+  bound to the reader). Existing `let s = reader.schema();` continues to
+  compile; storing the schema beyond the reader's lifetime now fails at
+  compile time as intended.
+
 **2026-03-30 — External Pentest Remediation (Strix.ai)**
 
 ### Security — External Pentest Remediation (5 findings, Strix.ai)
@@ -411,5 +429,6 @@ Initial public release of Signet Forge.
   - *Keygen*: parse_hex_hash bare "0x" rejection, expiry_date overflow clamp [1,36500 days], semicolon injection prevention in custom claims
 - 423 total unit tests + 5 Rust integration tests + 5 doc-compile tests, all passing across all 5 hardening passes plus static audit follow-up
 
-[Unreleased]: https://github.com/SIGNETSTACK/signet-forge/compare/v0.1.0...HEAD
+[Unreleased]: https://github.com/SIGNETSTACK/signet-forge/compare/v0.1.1...HEAD
+[0.1.1]: https://github.com/SIGNETSTACK/signet-forge/compare/v0.1.0...v0.1.1
 [0.1.0]: https://github.com/SIGNETSTACK/signet-forge/releases/tag/v0.1.0

CITATION.cff

@@ -18,8 +18,8 @@ license: AGPL-3.0-or-later
 license-url: "https://github.com/SIGNETSTACK/SIGNET_FORGE/blob/main/LICENSE"
 repository-code: "https://github.com/SIGNETSTACK/SIGNET_FORGE"
 url: "https://signetstack.github.io/SIGNET_FORGE/"
-version: 0.1.0
-date-released: 2026-03-04
+version: 0.1.1
+date-released: 2026-05-01
 keywords:
   - parquet
   - cpp20

CMakeLists.txt

@@ -1,7 +1,7 @@
 cmake_minimum_required(VERSION 3.21)
 
 project(signet_forge
-    VERSION 0.1.0
+    VERSION 0.1.1
     DESCRIPTION "SignetStack — Standalone C++20 Parquet library with AI-native extensions"
     HOMEPAGE_URL "https://github.com/SIGNETSTACK/signet-forge"
     LANGUAGES CXX

Doxyfile

@@ -3,7 +3,7 @@
 
 PROJECT_NAME           = "Signet Forge"
 PROJECT_BRIEF          = "C++20 Parquet library with AI-native extensions"
-PROJECT_NUMBER         = 0.1.0
+PROJECT_NUMBER         = 0.1.1
 OUTPUT_DIRECTORY       =
 PROJECT_LOGO           = doxygen/logo.png
 INPUT                  = include/signet doxygen wasm

packaging/conan/conanfile.py

@@ -6,7 +6,7 @@
 
 class SignetForgeConan(ConanFile):
     name = "signet_forge"
-    version = "0.1.0"
+    version = "0.1.1"
     license = "AGPL-3.0-or-later"
     author = "SIGNETSTACK"
     url = "https://github.com/SIGNETSTACK/signet-forge"

packaging/conda/meta.yaml

@@ -1,5 +1,5 @@
 {% set name = "signet-forge" %}
-{% set version = "0.1.0" %}
+{% set version = "0.1.1" %}
 
 package:
   name: {{ name|lower }}

packaging/homebrew/signet-forge.rb

@@ -1,7 +1,7 @@
 class SignetForge < Formula
   desc "Standalone C++20 Parquet library with AI-native extensions"
   homepage "https://github.com/SIGNETSTACK/signet-forge"
-  url "https://github.com/SIGNETSTACK/signet-forge/archive/refs/tags/v0.1.0.tar.gz"
+  url "https://github.com/SIGNETSTACK/signet-forge/archive/refs/tags/v0.1.1.tar.gz"
   sha256 "PLACEHOLDER"  # Updated on release
   license "AGPL-3.0-or-later"
   head "https://github.com/SIGNETSTACK/signet-forge.git", branch: "main"

packaging/vcpkg/vcpkg.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://raw.githubusercontent.com/microsoft/vcpkg-tool/main/docs/vcpkg.schema.json",
   "name": "signet-forge",
-  "version": "0.1.0",
+  "version": "0.1.1",
   "description": "Standalone C++20 Parquet library with AI-native extensions",
   "homepage": "https://github.com/SIGNETSTACK/signet-forge",
   "license": "AGPL-3.0-or-later",

pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "scikit_build_core.build"
 
 [project]
 name = "signet-forge"
-version = "0.1.0"
+version = "0.1.1"
 description = "Standalone C++20 Parquet library with AI-native extensions — Python bindings"
 readme = "README.md"
 # Licensed under AGPL-3.0-or-later (open source) with a Commercial License Exception

rust/signet-forge-sys/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "signet-forge-sys"
-version = "0.1.0"
+version = "0.1.1"
 edition = "2021"
 authors = ["Johnson Ogundeji"]
 license = "AGPL-3.0-or-later"