Ovumcy v0.8.5

Release date: 2026-03-29

Highlights

• Public patch release that supersedes v0.8.4.
• Cleans up the last Go Report Card warnings that remained after the OIDC rollout without changing the runtime OIDC/login/logout behavior.

Security and quality

• OIDCConfig.Validate and OIDCLoginService.Authenticate are now decomposed into smaller helpers, which reduces cyclomatic complexity in the security-sensitive OIDC validation and identity-linking flow while keeping the same contract.
• The OIDC runtime config tests now use compact table-driven coverage instead of one long validation function, which makes the OIDC failure matrix easier to extend and review.
• The release was revalidated with gofmt -w -s, gocyclo -over 15 on the previously flagged files, go test ./..., and git diff --check.

Upgrade notes

• No new database migration is introduced in this patch release.
• Tagged images publish under ghcr.io/ovumcy/ovumcy-web:v0.8.5.
• Existing deployments can upgrade in place and pin OVUMCY_IMAGE=ghcr.io/ovumcy/ovumcy-web:v0.8.5 if they do not want to track future tags manually.

Full changelog

• Compare: https://github.com/ovumcy/ovumcy-web/compare/v0.8.4…v0.8.5
• Changelog entry: CHANGELOG.md section 0.8.5.