0.0.15, 11 October 2026

Release bills of materials are signed with cosign 3, as one Sigstore bundle per file in place of separate .sig and .crt files.
make verify-release now stops at the first bill of materials that fails verification.
Dependency and CI updates.

0.0.14, 1 October 2026

Memory safety, macOS: the os_log sink declared the variadic syslog(3) with a fixed argument list, so on Apple Silicon it could read a stale stack word as the message pointer. Present since 0.0.9; fixed.
fire() costs about half as much per thread with eight threads logging at once, and no longer builds the caller attribute on the calling thread. Breaking for code that builds a LogEvent literal.
Breaking (rlg-otlp): the blocking exporter uses the crate's own HTTP/1.1 client and no longer depends on ureq.
The count of dropped events is now exact when the buffer is full.

rlg-mcp moves to the official MCP SDK and serves stdio, streamable HTTP and HTTP+SSE.
rlg and rlg-report print shell completions and manual pages, and make install installs them.
fire() is about 40% cheaper on the calling thread, with byte-identical output.
Breaking (rlg-otlp): it sends plain OTLP/HTTP to a local OpenTelemetry Collector and rejects https:// endpoints; the grpc feature, a scaffold, is removed.
82 crates leave the dependency tree, including reqwest, tonic and notify; configuration hot reload now polls the file.
rlg compiles on Windows again, and CI checks it there.

Every change is in CHANGELOG.md, and the releases are on GitHub and crates.io.