Skip to content

Latch

v1.0.2 Feature

This release adds 3 notable features for engineering teams evaluating rollout.

Published 16d Network Security
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

chacha20-poly1305 cryptography security go hybrid-cryptography kyber
+7 more
ml-kem post-quantum-cryptography rust tcp tokio udp zero-allocation

Summary

AI summary

Logging migrated to Go's log/slog with structured metadata and verified zero‑allocation performance under high load.

Full changelog

This patch release focuses on production observability and rigorous performance auditing. We have completely overhauled the logging layer and validated the core proxy engine under high-load benchmarking conditions.

Key Changes

  • Structured Production Logging: Fully migrated the logging infrastructure from standard text output to Go's native log/slog library. Log messages now include structured metadata attributes (e.g., remote_addr, local_addr) and fully support configurable severity levels (Debug, Info, Warn, Error).
  • High-Load Performance Benchmarks: Introduced micro-benchmarking (BenchmarkProxyPipe) inside the network test suite to measure throughput and track regression under continuous simulated data transfer.
  • Verified Zero-Allocation Pipeline: Profiled the application under load using go test -bench. Results confirm 0 B/op and 0 allocs/op on the critical data transmission path, verifying that sync.Pool buffer allocation and the new slog implementation introduce zero memory pressure or GC overhead.
  • Test Suite Stabilization: Fixed intermittent race conditions and refined port lifecycle management in the end-to-end integration tests to ensure deterministic local and CI execution.

Performance Evaluation Metrics

Executed on Intel(R) Core(TM) i5-14600KF (Go architecture: amd64, OS: windows):

BenchmarkProxyPipe-20      975308      1129 ns/op        0 B/op        0 allocs/op

To audit memory allocations and execute the micro-benchmarks locally, run:

go test -run=^$ -bench=BenchmarkProxyPipe -benchmem ./internal/network/tests/...

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track Latch

Get notified when new releases ship.

Sign up free

About Latch

All releases →

Related context

Beta — feedback welcome: [email protected]