diff --git a/.fusa.json b/.fusa.json index bbb9c5b..20f2c59 100644 --- a/.fusa.json +++ b/.fusa.json @@ -1,6 +1,6 @@ { "configVersion": "1.0", - "project": {"name": "c-FuSa", "version": "0.5.49"}, + "project": {"name": "c-FuSa", "version": "0.5.50"}, "standard": "iso26262", "strict": false, "max_function_lines": 75, diff --git a/CHANGELOG.md b/CHANGELOG.md index 299226f..5f20740 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -5,7 +5,13 @@ All notable changes to c-FuSa are documented here. The format follows [Keep a Changelog](https://keepachangelog.com/en/1.0.0/) and the project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html). -## v0.5.49 — 2026-07-30 +## v0.5.50 — 2026-07-30 + +_Renumbered from v0.5.49: the tag/release `v0.5.49` had already been +published (2026-07-29, PR #93) against a commit whose `version.h` still +read "0.5.48" — a pre-existing off-by-one in that release, unrelated to +this change. To avoid re-using an already-shipped version string, this +release is v0.5.50 instead._ External third-party audit remediation. Two of the findings are **live-exploitable command/argument-injection vulnerabilities**, independently diff --git a/CMakeLists.txt b/CMakeLists.txt index fc7fccb..afb4527 100644 --- a/CMakeLists.txt +++ b/CMakeLists.txt @@ -1,6 +1,6 @@ cmake_minimum_required(VERSION 3.16) project(cfusa - VERSION 0.5.49 + VERSION 0.5.50 DESCRIPTION "C functional safety toolkit" LANGUAGES C ) diff --git a/README.md b/README.md index f144a58..fbdb270 100644 --- a/README.md +++ b/README.md @@ -5,7 +5,7 @@ [![CI](https://github.com/SoundMatt/c-FuSa/actions/workflows/ci.yml/badge.svg)](https://github.com/SoundMatt/c-FuSa/actions/workflows/ci.yml) [![CodeQL](https://github.com/SoundMatt/c-FuSa/actions/workflows/codeql.yml/badge.svg)](https://github.com/SoundMatt/c-FuSa/actions/workflows/codeql.yml) [![License: MPL-2.0](https://img.shields.io/badge/License-MPL_2.0-brightgreen.svg)](LICENSE) -[![Version](https://img.shields.io/badge/version-0.5.49-blue.svg)](CHANGELOG.md) +[![Version](https://img.shields.io/badge/version-0.5.50-blue.svg)](CHANGELOG.md) > **c-FuSa is not a certification product.** It is an engineering accelerator — helping you produce and maintain safety evidence faster. diff --git a/include/cfusa/version.h b/include/cfusa/version.h index 73c91ac..74625cc 100644 --- a/include/cfusa/version.h +++ b/include/cfusa/version.h @@ -3,9 +3,13 @@ #define CFUSA_VERSION_MAJOR 0 #define CFUSA_VERSION_MINOR 5 -#define CFUSA_VERSION_PATCH 49 -#define CFUSA_VERSION_STRING "0.5.49" -/* v0.5.49 — 2026-07-30 external audit remediation: corrects a Critical +#define CFUSA_VERSION_PATCH 50 +#define CFUSA_VERSION_STRING "0.5.50" +/* v0.5.50 (previously landed as v0.5.49, but the tag/release "v0.5.49" had + * already been published against a stale commit whose version.h still read + * "0.5.48" — see the PR that introduced this bump for the full story; + * renumbered to v0.5.50 to avoid re-using an already-shipped version + * string) — 2026-07-30 external audit remediation: corrects a Critical * mis-implementation of ISO 26262-3:2018 Table 4 in the shared * cfusa_compute_asil() (19/36 S x E x C cells were over-assigned; the * dogfooded .fusa-hara.json and the "exhaustive" 36-cell test both