release: v0.3.2 (#34)

Bug-fix release covering two real shipping-user issues in v0.3.0:

- **PAM control keyword corrected.** `success=end` was not a valid
  `pam.conf(5)` value-keyword — libpam treated it as `ignore` and dropped
  Visage's authentication result, so face auth was silently falling through
  to the password prompt since v0.1.0. Swept across all 9 affected sites
  (README, docs, NixOS module, Debian pam-auth-update profile, research
  docs). Reported-by @SelfRef in #27. Debian/Ubuntu users auto-recover on
  next `.deb` upgrade via `postinst`'s `pam-auth-update --package` call;
  Arch and NixOS users get the fix from the new install.

- **`visaged` SIGTERM handler.** The shutdown signal was using
  `tokio::signal::ctrl_c()`, which is SIGINT-only on Unix. `systemctl
  stop|restart` and `visage-resume.service` post-hibernate send SIGTERM,
  which the daemon ignored — systemd then waited the default
  `TimeoutStopSec=90s` before SIGKILL. Fixes #26. Daemon now handles both
  SIGINT and SIGTERM via `tokio::signal::unix::signal` and `tokio::select!`,
  matching the pattern used elsewhere in our daemons.
  `visaged.service` adds `TimeoutStopSec=10s` as defense in depth.

Workspace version bumped 0.3.0 → 0.3.2 across `Cargo.toml`, `Cargo.lock`,
`packaging/aur/PKGBUILD`, and `packaging/nix/default.nix`. CHANGELOG
section renamed from `[Unreleased]` and dated.

Skipping v0.3.1 — that number was reserved for the dependency-bump
cohort (image, nix, tokio, uuid, GitHub Actions) plus the
community fork PRs (#25 Arch LTO fix, #29 X1 Carbon quirk). Those are
still blocked on fork-PR CI approval and will land as v0.3.3 once
unblocked.

Author: ccross2

CHANGELOG.md

@@ -2,6 +2,8 @@
 
 ## Unreleased
 
+## v0.3.2 — 2026-05-28
+
 ### Fixed
 
 - **PAM control keyword corrected: `success=end` → `success=done` across all 9 sites.**

Cargo.lock

@@ -10,7 +10,7 @@ members = [
 ]
 
 [workspace.package]
-version = "0.3.0"
+version = "0.3.2"
 edition = "2021"
 license = "MIT"
 repository = "https://github.com/sovren-software/visage"

Cargo.toml

@@ -2,7 +2,7 @@
 # https://github.com/sovren-software/visage
 
 pkgname=visage
-pkgver=0.3.0
+pkgver=0.3.2
 pkgrel=1
 pkgdesc="Linux face authentication via PAM — persistent daemon, IR camera support, ONNX inference"
 arch=('x86_64')
@@ -16,7 +16,7 @@ install="$pkgname.install"
 # Preserve user data and face database across upgrades
 backup=('var/lib/visage/faces.db')
 source=("$pkgname-$pkgver.tar.gz::https://github.com/sovren-software/visage/archive/refs/tags/v$pkgver.tar.gz")
-# TODO: compute real sha256sum at release time: sha256sum visage-0.3.0.tar.gz
+# TODO: compute real sha256sum at release time: sha256sum visage-0.3.2.tar.gz
 sha256sums=('SKIP')
 
 build() {

packaging/aur/PKGBUILD

@@ -19,7 +19,7 @@
 
 rustPlatform.buildRustPackage {
   pname = "visage";
-  version = "0.3.0";
+  version = "0.3.2";
 
   src = lib.cleanSource ../..;