Changelog

Keep-a-Changelog format. Mirrors the repo CHANGELOG.md.

The canonical changelog lives in the repo:

• CHANGELOG.md on GitHub

This page mirrors the highlights. For the exact current log, read the file above.

1.1.0, 2026-04-22

Pilot-readiness release.

Added

• Python SDK (cohesion-sdk on PyPI).
• TypeScript SDK (@cohesionauth/sdk on npm).
• OpenAPI 3.1 spec at /api-docs/openapi.yaml and interactive playground at /api-docs/playground.
• Postman collection.
• 7 integration examples.
• Customer dashboard at dashboard.cohesionauth.com.
• Status page at /status.
• Developer docs at /docs/ (this site).
• MCP server v1.1.1 preview stubs (not yet functional).
• Trust & Compliance Pack (DPA, DPIA, SOC 2 runway doc, incident-response runbook, Art 14 mapping).
• CI workflow with SBOM generation and gitleaks scan.

Changed

• Documentation now centralized under /docs/ instead of scattered READMEs.

Deprecated

• api_key body field deprecated 2026-04-17, sunset 2026-07-15. Use X-API-Key header.

1.0.0, 2026-04-17

Baseline release: original 13-endpoint surface, peppered SHA-256 keys, 80 ms auth timing floor, two-layer rate limit. (Surface area has since grown to 50 endpoints across eight categories; see additive-authorization stack in scoring-api/CLAUDE.md and entries below.)

Next step

• Versioning for deprecation policy.