Axia LDAP & AD Web Console Files

Released images, and two fixes to what reaches a caller and a log. Upgrading from 0.2.0 needs no action.

Security

• A bulk row that fails for an unexpected reason says so in general terms, in the response and in the audit trail, instead of carrying the exception's own text — which could be the LDAP library's, host names included. The exception itself is logged at Error.
• With Observability:Console:Json set to false, the plain-text console writes control characters in logged values as escapes (\r, \n, \u001b), so a request path containing %0D%0A can no longer start a log line of its own or restyle the terminal. The JSON sinks already escaped them.

Added

• Images: every release publishes ghcr.io/nelsar/axia-api and ghcr.io/nelsar/axia-console for linux/amd64 and linux/arm64, tagged x.y.z, x.y and latest, with build provenance and an SBOM. See Production deployment.

Changed

• The quick start runs the released images: docker compose up pulls them instead of building for several minutes. docker compose up --build still builds the checkout.
• Dependencies: ASP.NET Core's JWT bearer authentication 10.0.13, FluentValidation 12.2.0 and MediatR 12.5.0.

Fixed

• A bulk row that succeeded said so in English whatever language the caller used; it is now translated like every other message.