From 28384941de503e7f95f48d0f365c92b253a811f0 Mon Sep 17 00:00:00 2001 From: Matt Jones <47545907+SoundMatt@users.noreply.github.com> Date: Thu, 30 Jul 2026 13:23:51 -0700 Subject: [PATCH] chore: renumber v0.5.49 -> v0.5.50 (version string already tagged) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The previous PR (#95) bumped c-FuSa to v0.5.49, but that version string turns out to already be tagged/released: v0.5.49 was published on 2026-07-29 against PR #93's merge commit, whose version.h still read "0.5.48" at the time — a pre-existing off-by-one in that earlier release, unrelated to #95's actual content. Attempting to tag v0.5.49 for #95's commit failed with "Reference already exists", surfacing the collision. Renumbers CMakeLists.txt/version.h/.fusa.json/README's version badge from 0.5.49 to 0.5.50 and retitles the CHANGELOG section, with a note on both explaining the renumbering so the history isn't confusing later. No functional changes — this is purely a version-string fix. 40/40 tests pass; `cfusa check --dir .` exits 0. Signed-off-by: Matt Jones Signed-off-by: Matt Jones <47545907+SoundMatt@users.noreply.github.com> --- .fusa.json | 2 +- CHANGELOG.md | 8 +++++++- CMakeLists.txt | 2 +- README.md | 2 +- include/cfusa/version.h | 10 +++++++--- 5 files changed, 17 insertions(+), 7 deletions(-) diff --git a/.fusa.json b/.fusa.json index bbb9c5b..20f2c59 100644 --- a/.fusa.json +++ b/.fusa.json @@ -1,6 +1,6 @@ { "configVersion": "1.0", - "project": {"name": "c-FuSa", "version": "0.5.49"}, + "project": {"name": "c-FuSa", "version": "0.5.50"}, "standard": "iso26262", "strict": false, "max_function_lines": 75, diff --git a/CHANGELOG.md b/CHANGELOG.md index 299226f..5f20740 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -5,7 +5,13 @@ All notable changes to c-FuSa are documented here. The format follows [Keep a Changelog](https://keepachangelog.com/en/1.0.0/) and the project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html). -## v0.5.49 — 2026-07-30 +## v0.5.50 — 2026-07-30 + +_Renumbered from v0.5.49: the tag/release `v0.5.49` had already been +published (2026-07-29, PR #93) against a commit whose `version.h` still +read "0.5.48" — a pre-existing off-by-one in that release, unrelated to +this change. To avoid re-using an already-shipped version string, this +release is v0.5.50 instead._ External third-party audit remediation. Two of the findings are **live-exploitable command/argument-injection vulnerabilities**, independently diff --git a/CMakeLists.txt b/CMakeLists.txt index fc7fccb..afb4527 100644 --- a/CMakeLists.txt +++ b/CMakeLists.txt @@ -1,6 +1,6 @@ cmake_minimum_required(VERSION 3.16) project(cfusa - VERSION 0.5.49 + VERSION 0.5.50 DESCRIPTION "C functional safety toolkit" LANGUAGES C ) diff --git a/README.md b/README.md index f144a58..fbdb270 100644 --- a/README.md +++ b/README.md @@ -5,7 +5,7 @@ [![CI](https://github.com/SoundMatt/c-FuSa/actions/workflows/ci.yml/badge.svg)](https://github.com/SoundMatt/c-FuSa/actions/workflows/ci.yml) [![CodeQL](https://github.com/SoundMatt/c-FuSa/actions/workflows/codeql.yml/badge.svg)](https://github.com/SoundMatt/c-FuSa/actions/workflows/codeql.yml) [![License: MPL-2.0](https://img.shields.io/badge/License-MPL_2.0-brightgreen.svg)](LICENSE) -[![Version](https://img.shields.io/badge/version-0.5.49-blue.svg)](CHANGELOG.md) +[![Version](https://img.shields.io/badge/version-0.5.50-blue.svg)](CHANGELOG.md) > **c-FuSa is not a certification product.** It is an engineering accelerator — helping you produce and maintain safety evidence faster. diff --git a/include/cfusa/version.h b/include/cfusa/version.h index 73c91ac..74625cc 100644 --- a/include/cfusa/version.h +++ b/include/cfusa/version.h @@ -3,9 +3,13 @@ #define CFUSA_VERSION_MAJOR 0 #define CFUSA_VERSION_MINOR 5 -#define CFUSA_VERSION_PATCH 49 -#define CFUSA_VERSION_STRING "0.5.49" -/* v0.5.49 — 2026-07-30 external audit remediation: corrects a Critical +#define CFUSA_VERSION_PATCH 50 +#define CFUSA_VERSION_STRING "0.5.50" +/* v0.5.50 (previously landed as v0.5.49, but the tag/release "v0.5.49" had + * already been published against a stale commit whose version.h still read + * "0.5.48" — see the PR that introduced this bump for the full story; + * renumbered to v0.5.50 to avoid re-using an already-shipped version + * string) — 2026-07-30 external audit remediation: corrects a Critical * mis-implementation of ISO 26262-3:2018 Table 4 in the shared * cfusa_compute_asil() (19/36 S x E x C cells were over-assigned; the * dogfooded .fusa-hara.json and the "exhaustive" 36-cell test both