From 290bd857d773fa63b0a38011b8f64ac420ed59ef Mon Sep 17 00:00:00 2001 From: Jeremi Joslin Date: Tue, 22 Sep 2026 16:33:43 +0700 Subject: [PATCH 01/11] chore(release): prepare v0.33.0 beta-45 metadata Signed-off-by: Jeremi Joslin --- Cargo.lock | 126 +++++++++--------- Cargo.toml | 124 ++++++++--------- crates/registry-breg-client-node/index.js | 108 +++++++-------- .../package-lock.json | 4 +- crates/registry-breg-client-node/package.json | 2 +- crates/registry-breg-client-py/Cargo.toml | 2 +- crates/registry-breg-client-py/pyproject.toml | 2 +- crates/registry-casework-client-node/index.js | 108 +++++++-------- .../package-lock.json | 4 +- .../package.json | 2 +- crates/registry-casework-client-py/Cargo.toml | 2 +- .../pyproject.toml | 2 +- .../registry-discovery-client-node/index.js | 110 +++++++-------- .../npm/darwin-arm64/package.json | 2 +- .../npm/linux-arm64-gnu/package.json | 2 +- .../npm/linux-x64-gnu/package.json | 2 +- .../package-lock.json | 4 +- .../package.json | 2 +- .../registry-discovery-client-py/Cargo.toml | 2 +- .../pyproject.toml | 2 +- crates/registry-evidence-client-node/index.js | 108 +++++++-------- .../npm/darwin-arm64/package.json | 2 +- .../npm/linux-arm64-gnu/package.json | 2 +- .../npm/linux-x64-gnu/package.json | 2 +- .../package-lock.json | 4 +- .../package.json | 2 +- crates/registry-evidence-client-py/Cargo.toml | 2 +- .../pyproject.toml | 2 +- crates/registry-relay-client-node/index.js | 108 +++++++-------- .../npm/darwin-arm64/package.json | 2 +- .../npm/linux-arm64-gnu/package.json | 2 +- .../npm/linux-x64-gnu/package.json | 2 +- .../package-lock.json | 4 +- .../registry-relay-client-node/package.json | 2 +- crates/registry-relay-client-py/Cargo.toml | 2 +- .../registry-relay-client-py/pyproject.toml | 2 +- crates/registry-stack-client-node/native.js | 2 +- .../npm/darwin-arm64/package.json | 2 +- .../npm/linux-arm64-gnu/package.json | 2 +- .../npm/linux-x64-gnu/package.json | 2 +- .../package-lock.json | 4 +- .../registry-stack-client-node/package.json | 2 +- .../registry-stack-client-py/pyproject.toml | 2 +- .../python/registry_client/__init__.py | 2 +- docs/site/src/content/docs/changelog.mdx | 69 ++++++++++ products/casework/CHANGELOG.md | 2 + .../generated/registry-evidence.openapi.json | 2 +- products/manifest/CHANGELOG.md | 4 + products/manifest/docs/release-notes.md | 4 + products/manifest/fuzz/Cargo.lock | 6 +- products/platform/CHANGELOG.md | 7 + products/platform/fuzz/Cargo.lock | 14 +- products/scheduling/CHANGELOG.md | 4 +- release/manifests/registry-stack-beta-45.yaml | 33 +++++ release/notes/v0.33.0.md | 102 ++++++++++++++ 55 files changed, 674 insertions(+), 451 deletions(-) create mode 100644 release/manifests/registry-stack-beta-45.yaml create mode 100644 release/notes/v0.33.0.md diff --git a/Cargo.lock b/Cargo.lock index b6c6ec62a6..edee5e8e33 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -4820,7 +4820,7 @@ checksum = "d6f6ff9a378485b298a5286656da665ba74413d36db0979633275d2e708145d4" [[package]] name = "registry-breg" -version = "0.32.0" +version = "0.33.0" dependencies = [ "async-trait", "axum", @@ -4884,7 +4884,7 @@ dependencies = [ [[package]] name = "registry-breg-client" -version = "0.32.0" +version = "0.33.0" dependencies = [ "async-trait", "axum", @@ -4909,7 +4909,7 @@ dependencies = [ [[package]] name = "registry-breg-client-node" -version = "0.32.0" +version = "0.33.0" dependencies = [ "napi", "napi-build", @@ -4926,7 +4926,7 @@ dependencies = [ [[package]] name = "registry-breg-client-py" -version = "0.32.0" +version = "0.33.0" dependencies = [ "pyo3", "pyo3-build-config", @@ -4942,7 +4942,7 @@ dependencies = [ [[package]] name = "registry-bregctl" -version = "0.32.0" +version = "0.33.0" dependencies = [ "anstream", "anstyle", @@ -4991,7 +4991,7 @@ dependencies = [ [[package]] name = "registry-casework" -version = "0.32.0" +version = "0.33.0" dependencies = [ "async-trait", "axum", @@ -5042,7 +5042,7 @@ dependencies = [ [[package]] name = "registry-casework-breg" -version = "0.32.0" +version = "0.33.0" dependencies = [ "async-trait", "base64 0.22.1", @@ -5067,7 +5067,7 @@ dependencies = [ [[package]] name = "registry-casework-client" -version = "0.32.0" +version = "0.33.0" dependencies = [ "async-trait", "axum", @@ -5092,7 +5092,7 @@ dependencies = [ [[package]] name = "registry-casework-client-node" -version = "0.32.0" +version = "0.33.0" dependencies = [ "napi", "napi-build", @@ -5107,7 +5107,7 @@ dependencies = [ [[package]] name = "registry-casework-client-py" -version = "0.32.0" +version = "0.33.0" dependencies = [ "pyo3", "pyo3-build-config", @@ -5121,7 +5121,7 @@ dependencies = [ [[package]] name = "registry-casework-core" -version = "0.32.0" +version = "0.33.0" dependencies = [ "async-trait", "chrono", @@ -5142,7 +5142,7 @@ dependencies = [ [[package]] name = "registry-caseworkctl" -version = "0.32.0" +version = "0.33.0" dependencies = [ "anyhow", "base64 0.22.1", @@ -5175,7 +5175,7 @@ dependencies = [ [[package]] name = "registry-cli-docs" -version = "0.32.0" +version = "0.33.0" dependencies = [ "clap", "registry-breg", @@ -5197,7 +5197,7 @@ dependencies = [ [[package]] name = "registry-cli-reference" -version = "0.32.0" +version = "0.33.0" dependencies = [ "clap", "serde", @@ -5205,7 +5205,7 @@ dependencies = [ [[package]] name = "registry-discovery" -version = "0.32.0" +version = "0.33.0" dependencies = [ "axum", "axum-test", @@ -5233,7 +5233,7 @@ dependencies = [ [[package]] name = "registry-discovery-client" -version = "0.32.0" +version = "0.33.0" dependencies = [ "axum", "base64 0.22.1", @@ -5265,7 +5265,7 @@ dependencies = [ [[package]] name = "registry-discovery-client-node" -version = "0.32.0" +version = "0.33.0" dependencies = [ "napi", "napi-build", @@ -5278,7 +5278,7 @@ dependencies = [ [[package]] name = "registry-discovery-client-py" -version = "0.32.0" +version = "0.33.0" dependencies = [ "pyo3", "pyo3-build-config", @@ -5291,7 +5291,7 @@ dependencies = [ [[package]] name = "registry-discovery-profile" -version = "0.32.0" +version = "0.33.0" dependencies = [ "registry-platform-canonical-json", "serde", @@ -5303,7 +5303,7 @@ dependencies = [ [[package]] name = "registry-discoveryctl" -version = "0.32.0" +version = "0.33.0" dependencies = [ "axum", "clap", @@ -5328,7 +5328,7 @@ dependencies = [ [[package]] name = "registry-evidence" -version = "0.32.0" +version = "0.33.0" dependencies = [ "assert-json-diff", "async-trait", @@ -5387,7 +5387,7 @@ dependencies = [ [[package]] name = "registry-evidence-authoring" -version = "0.32.0" +version = "0.33.0" dependencies = [ "anyhow", "jsonschema", @@ -5401,7 +5401,7 @@ dependencies = [ [[package]] name = "registry-evidence-client" -version = "0.32.0" +version = "0.33.0" dependencies = [ "base64 0.22.1", "chrono", @@ -5428,7 +5428,7 @@ dependencies = [ [[package]] name = "registry-evidence-client-node" -version = "0.32.0" +version = "0.33.0" dependencies = [ "base64 0.22.1", "chrono", @@ -5452,7 +5452,7 @@ dependencies = [ [[package]] name = "registry-evidence-client-py" -version = "0.32.0" +version = "0.33.0" dependencies = [ "base64 0.22.1", "chrono", @@ -5476,7 +5476,7 @@ dependencies = [ [[package]] name = "registry-evidence-oid4vci" -version = "0.32.0" +version = "0.33.0" dependencies = [ "async-trait", "axum", @@ -5513,7 +5513,7 @@ dependencies = [ [[package]] name = "registry-evidence-verifier" -version = "0.32.0" +version = "0.33.0" dependencies = [ "base64 0.22.1", "chrono", @@ -5533,7 +5533,7 @@ dependencies = [ [[package]] name = "registry-evidencectl" -version = "0.32.0" +version = "0.33.0" dependencies = [ "anyhow", "axum", @@ -5573,7 +5573,7 @@ dependencies = [ [[package]] name = "registry-language-server" -version = "0.32.0" +version = "0.33.0" dependencies = [ "anyhow", "futures", @@ -5592,7 +5592,7 @@ dependencies = [ [[package]] name = "registry-linkml" -version = "0.32.0" +version = "0.33.0" dependencies = [ "serde", "serde_json", @@ -5602,7 +5602,7 @@ dependencies = [ [[package]] name = "registry-manifest-cli" -version = "0.32.0" +version = "0.33.0" dependencies = [ "registry-manifest-core", "serde", @@ -5613,7 +5613,7 @@ dependencies = [ [[package]] name = "registry-manifest-core" -version = "0.32.0" +version = "0.33.0" dependencies = [ "oxiri", "oxjsonld", @@ -5628,7 +5628,7 @@ dependencies = [ [[package]] name = "registry-platform-audit" -version = "0.32.0" +version = "0.33.0" dependencies = [ "async-trait", "hmac 0.13.0", @@ -5650,7 +5650,7 @@ dependencies = [ [[package]] name = "registry-platform-authcommon" -version = "0.32.0" +version = "0.33.0" dependencies = [ "base64 0.22.1", "proptest", @@ -5667,11 +5667,11 @@ dependencies = [ [[package]] name = "registry-platform-buildinfo" -version = "0.32.0" +version = "0.33.0" [[package]] name = "registry-platform-calendar" -version = "0.32.0" +version = "0.33.0" dependencies = [ "chrono", "chrono-tz", @@ -5680,7 +5680,7 @@ dependencies = [ [[package]] name = "registry-platform-canonical-json" -version = "0.32.0" +version = "0.33.0" dependencies = [ "ryu-js", "serde", @@ -5690,7 +5690,7 @@ dependencies = [ [[package]] name = "registry-platform-config" -version = "0.32.0" +version = "0.33.0" dependencies = [ "base64 0.22.1", "registry-platform-crypto", @@ -5706,7 +5706,7 @@ dependencies = [ [[package]] name = "registry-platform-crypto" -version = "0.32.0" +version = "0.33.0" dependencies = [ "async-trait", "aws-lc-rs", @@ -5733,7 +5733,7 @@ dependencies = [ [[package]] name = "registry-platform-hooks" -version = "0.32.0" +version = "0.33.0" dependencies = [ "async-trait", "hex", @@ -5753,7 +5753,7 @@ dependencies = [ [[package]] name = "registry-platform-httpsec" -version = "0.32.0" +version = "0.33.0" dependencies = [ "axum", "http", @@ -5769,7 +5769,7 @@ dependencies = [ [[package]] name = "registry-platform-httputil" -version = "0.32.0" +version = "0.33.0" dependencies = [ "async-trait", "axum", @@ -5803,7 +5803,7 @@ dependencies = [ [[package]] name = "registry-platform-oidc" -version = "0.32.0" +version = "0.33.0" dependencies = [ "axum", "base64 0.22.1", @@ -5819,7 +5819,7 @@ dependencies = [ [[package]] name = "registry-platform-script" -version = "0.32.0" +version = "0.33.0" dependencies = [ "rhai", "serde", @@ -5829,7 +5829,7 @@ dependencies = [ [[package]] name = "registry-platform-sdjwt" -version = "0.32.0" +version = "0.33.0" dependencies = [ "async-trait", "base64 0.22.1", @@ -5847,7 +5847,7 @@ dependencies = [ [[package]] name = "registry-platform-sqlite" -version = "0.32.0" +version = "0.33.0" dependencies = [ "rusqlite", "rustix 1.1.4", @@ -5860,7 +5860,7 @@ dependencies = [ [[package]] name = "registry-platform-testing" -version = "0.32.0" +version = "0.33.0" dependencies = [ "async-trait", "axum", @@ -5883,7 +5883,7 @@ dependencies = [ [[package]] name = "registry-record" -version = "0.32.0" +version = "0.33.0" dependencies = [ "serde", "serde_json", @@ -5893,7 +5893,7 @@ dependencies = [ [[package]] name = "registry-relay-client" -version = "0.32.0" +version = "0.33.0" dependencies = [ "async-trait", "axum", @@ -5913,7 +5913,7 @@ dependencies = [ [[package]] name = "registry-relay-client-node" -version = "0.32.0" +version = "0.33.0" dependencies = [ "axum", "napi", @@ -5930,7 +5930,7 @@ dependencies = [ [[package]] name = "registry-relay-client-py" -version = "0.32.0" +version = "0.33.0" dependencies = [ "pyo3", "pyo3-build-config", @@ -5946,11 +5946,11 @@ dependencies = [ [[package]] name = "registry-relay-http-contract" -version = "0.32.0" +version = "0.33.0" [[package]] name = "registry-relay-v2" -version = "0.32.0" +version = "0.33.0" dependencies = [ "async-trait", "axum", @@ -6006,7 +6006,7 @@ dependencies = [ [[package]] name = "registry-relayctl" -version = "0.32.0" +version = "0.33.0" dependencies = [ "clap", "hex", @@ -6023,7 +6023,7 @@ dependencies = [ [[package]] name = "registry-render" -version = "0.32.0" +version = "0.33.0" dependencies = [ "axum", "base64 0.22.1", @@ -6061,7 +6061,7 @@ dependencies = [ [[package]] name = "registry-review-client" -version = "0.32.0" +version = "0.33.0" dependencies = [ "axum", "chrono", @@ -6080,7 +6080,7 @@ dependencies = [ [[package]] name = "registry-review-protocol" -version = "0.32.0" +version = "0.33.0" dependencies = [ "chrono", "registry-platform-canonical-json", @@ -6093,7 +6093,7 @@ dependencies = [ [[package]] name = "registry-scheduling" -version = "0.32.0" +version = "0.33.0" dependencies = [ "async-trait", "axum", @@ -6139,7 +6139,7 @@ dependencies = [ [[package]] name = "registry-scheduling-client" -version = "0.32.0" +version = "0.33.0" dependencies = [ "axum", "chrono", @@ -6156,7 +6156,7 @@ dependencies = [ [[package]] name = "registry-scheduling-core" -version = "0.32.0" +version = "0.33.0" dependencies = [ "chrono", "registry-platform-calendar", @@ -6172,7 +6172,7 @@ dependencies = [ [[package]] name = "registry-schedulingctl" -version = "0.32.0" +version = "0.33.0" dependencies = [ "anyhow", "chrono", @@ -6193,7 +6193,7 @@ dependencies = [ [[package]] name = "registry-stack-client" -version = "0.32.0" +version = "0.33.0" dependencies = [ "registry-breg-client", "registry-casework-client", @@ -6206,7 +6206,7 @@ dependencies = [ [[package]] name = "registry-thunderid-tooling" -version = "0.32.0" +version = "0.33.0" dependencies = [ "base64 0.22.1", "getrandom 0.4.3", diff --git a/Cargo.toml b/Cargo.toml index 1c9bceba23..f15857e310 100644 --- a/Cargo.toml +++ b/Cargo.toml @@ -72,7 +72,7 @@ exclude = [ resolver = "2" [workspace.package] -version = "0.32.0" +version = "0.33.0" edition = "2021" rust-version = "1.95" license = "Apache-2.0" @@ -83,67 +83,67 @@ repository = "https://github.com/registrystack/registry-stack" unsafe_code = "forbid" [workspace.dependencies] -registry-review-client = { path = "crates/registry-review-client", version = "0.32.0" } -registry-review-protocol = { path = "crates/registry-review-protocol", version = "0.32.0" } -registry-thunderid-tooling = { path = "crates/registry-thunderid-tooling", version = "0.32.0" } -registry-casework = { path = "crates/registry-casework", version = "0.32.0" } -registry-casework-client-node = { path = "crates/registry-casework-client-node", version = "0.32.0" } -registry-casework-client-py = { path = "crates/registry-casework-client-py", version = "0.32.0" } -registry-caseworkctl = { path = "crates/registry-caseworkctl", version = "0.32.0" } -registry-casework-client = { path = "crates/registry-casework-client", version = "0.32.0" } -registry-casework-breg = { path = "crates/registry-casework-breg", version = "0.32.0" } -registry-casework-core = { path = "crates/registry-casework-core", version = "0.32.0" } -registry-discovery = { path = "crates/registry-discovery", version = "0.32.0", default-features = false } -registry-discovery-client = { path = "crates/registry-discovery-client", version = "0.32.0" } -registry-discovery-client-node = { path = "crates/registry-discovery-client-node", version = "0.32.0" } -registry-discovery-client-py = { path = "crates/registry-discovery-client-py", version = "0.32.0" } -registry-discovery-profile = { path = "crates/registry-discovery-profile", version = "0.32.0" } -registry-discoveryctl = { path = "crates/registry-discoveryctl", version = "0.32.0" } -registry-evidence = { path = "crates/registry-evidence", version = "0.32.0" } -registry-evidence-authoring = { path = "crates/registry-evidence-authoring", version = "0.32.0" } -registry-evidence-client = { path = "crates/registry-evidence-client", version = "0.32.0" } -registry-evidence-client-node = { path = "crates/registry-evidence-client-node", version = "0.32.0" } -registry-evidence-client-py = { path = "crates/registry-evidence-client-py", version = "0.32.0" } -registry-evidence-oid4vci = { path = "crates/registry-evidence-oid4vci", version = "0.32.0" } -registry-evidence-verifier = { path = "crates/registry-evidence-verifier", version = "0.32.0" } -registry-evidencectl = { path = "crates/registry-evidencectl", version = "0.32.0" } -registry-language-server = { path = "crates/registry-language-server", version = "0.32.0" } -registry-linkml = { path = "crates/registry-linkml", version = "0.32.0" } -registry-manifest-core = { path = "crates/registry-manifest-core", version = "0.32.0" } -registry-record = { path = "crates/registry-record", version = "0.32.0" } -registry-render = { path = "crates/registry-render", version = "0.32.0" } -registry-breg-client = { path = "crates/registry-breg-client", version = "0.32.0" } -registry-breg-client-node = { path = "crates/registry-breg-client-node", version = "0.32.0" } -registry-breg-client-py = { path = "crates/registry-breg-client-py", version = "0.32.0" } -registry-relay-http-contract = { path = "crates/registry-relay-http-contract", version = "0.32.0" } -registry-relay-client = { path = "crates/registry-relay-client", version = "0.32.0" } -registry-relay-client-node = { path = "crates/registry-relay-client-node", version = "0.32.0" } -registry-relay-client-py = { path = "crates/registry-relay-client-py", version = "0.32.0" } -registry-relay-v2 = { path = "crates/registry-relay-v2", version = "0.32.0" } -registry-relayctl = { path = "crates/registry-relayctl", version = "0.32.0" } -registry-scheduling = { path = "crates/registry-scheduling", version = "0.32.0" } -registry-scheduling-core = { path = "crates/registry-scheduling-core", version = "0.32.0" } -registry-schedulingctl = { path = "crates/registry-schedulingctl", version = "0.32.0" } -registry-scheduling-client = { path = "crates/registry-scheduling-client", version = "0.32.0" } -registry-breg = { path = "crates/registry-breg", version = "0.32.0", default-features = false } -registry-bregctl = { path = "crates/registry-bregctl", version = "0.32.0" } -registry-stack-client = { path = "crates/registry-stack-client", version = "0.32.0" } -registry-platform-audit = { path = "crates/registry-platform-audit", version = "0.32.0" } -registry-platform-authcommon = { path = "crates/registry-platform-authcommon", version = "0.32.0" } -registry-platform-buildinfo = { path = "crates/registry-platform-buildinfo", version = "0.32.0" } -registry-platform-calendar = { path = "crates/registry-platform-calendar", version = "0.32.0" } -registry-cli-reference = { path = "crates/registry-cli-reference", version = "0.32.0" } -registry-platform-canonical-json = { path = "crates/registry-platform-canonical-json", version = "0.32.0" } -registry-platform-config = { path = "crates/registry-platform-config", version = "0.32.0" } -registry-platform-crypto = { path = "crates/registry-platform-crypto", version = "0.32.0" } -registry-platform-hooks = { path = "crates/registry-platform-hooks", version = "0.32.0" } -registry-platform-httpsec = { path = "crates/registry-platform-httpsec", version = "0.32.0", default-features = false } -registry-platform-httputil = { path = "crates/registry-platform-httputil", version = "0.32.0" } -registry-platform-oidc = { path = "crates/registry-platform-oidc", version = "0.32.0" } -registry-platform-script = { path = "crates/registry-platform-script", version = "0.32.0" } -registry-platform-sdjwt = { path = "crates/registry-platform-sdjwt", version = "0.32.0" } -registry-platform-sqlite = { path = "crates/registry-platform-sqlite", version = "0.32.0" } -registry-platform-testing = { path = "crates/registry-platform-testing", version = "0.32.0" } +registry-review-client = { path = "crates/registry-review-client", version = "0.33.0" } +registry-review-protocol = { path = "crates/registry-review-protocol", version = "0.33.0" } +registry-thunderid-tooling = { path = "crates/registry-thunderid-tooling", version = "0.33.0" } +registry-casework = { path = "crates/registry-casework", version = "0.33.0" } +registry-casework-client-node = { path = "crates/registry-casework-client-node", version = "0.33.0" } +registry-casework-client-py = { path = "crates/registry-casework-client-py", version = "0.33.0" } +registry-caseworkctl = { path = "crates/registry-caseworkctl", version = "0.33.0" } +registry-casework-client = { path = "crates/registry-casework-client", version = "0.33.0" } +registry-casework-breg = { path = "crates/registry-casework-breg", version = "0.33.0" } +registry-casework-core = { path = "crates/registry-casework-core", version = "0.33.0" } +registry-discovery = { path = "crates/registry-discovery", version = "0.33.0", default-features = false } +registry-discovery-client = { path = "crates/registry-discovery-client", version = "0.33.0" } +registry-discovery-client-node = { path = "crates/registry-discovery-client-node", version = "0.33.0" } +registry-discovery-client-py = { path = "crates/registry-discovery-client-py", version = "0.33.0" } +registry-discovery-profile = { path = "crates/registry-discovery-profile", version = "0.33.0" } +registry-discoveryctl = { path = "crates/registry-discoveryctl", version = "0.33.0" } +registry-evidence = { path = "crates/registry-evidence", version = "0.33.0" } +registry-evidence-authoring = { path = "crates/registry-evidence-authoring", version = "0.33.0" } +registry-evidence-client = { path = "crates/registry-evidence-client", version = "0.33.0" } +registry-evidence-client-node = { path = "crates/registry-evidence-client-node", version = "0.33.0" } +registry-evidence-client-py = { path = "crates/registry-evidence-client-py", version = "0.33.0" } +registry-evidence-oid4vci = { path = "crates/registry-evidence-oid4vci", version = "0.33.0" } +registry-evidence-verifier = { path = "crates/registry-evidence-verifier", version = "0.33.0" } +registry-evidencectl = { path = "crates/registry-evidencectl", version = "0.33.0" } +registry-language-server = { path = "crates/registry-language-server", version = "0.33.0" } +registry-linkml = { path = "crates/registry-linkml", version = "0.33.0" } +registry-manifest-core = { path = "crates/registry-manifest-core", version = "0.33.0" } +registry-record = { path = "crates/registry-record", version = "0.33.0" } +registry-render = { path = "crates/registry-render", version = "0.33.0" } +registry-breg-client = { path = "crates/registry-breg-client", version = "0.33.0" } +registry-breg-client-node = { path = "crates/registry-breg-client-node", version = "0.33.0" } +registry-breg-client-py = { path = "crates/registry-breg-client-py", version = "0.33.0" } +registry-relay-http-contract = { path = "crates/registry-relay-http-contract", version = "0.33.0" } +registry-relay-client = { path = "crates/registry-relay-client", version = "0.33.0" } +registry-relay-client-node = { path = "crates/registry-relay-client-node", version = "0.33.0" } +registry-relay-client-py = { path = "crates/registry-relay-client-py", version = "0.33.0" } +registry-relay-v2 = { path = "crates/registry-relay-v2", version = "0.33.0" } +registry-relayctl = { path = "crates/registry-relayctl", version = "0.33.0" } +registry-scheduling = { path = "crates/registry-scheduling", version = "0.33.0" } +registry-scheduling-core = { path = "crates/registry-scheduling-core", version = "0.33.0" } +registry-schedulingctl = { path = "crates/registry-schedulingctl", version = "0.33.0" } +registry-scheduling-client = { path = "crates/registry-scheduling-client", version = "0.33.0" } +registry-breg = { path = "crates/registry-breg", version = "0.33.0", default-features = false } +registry-bregctl = { path = "crates/registry-bregctl", version = "0.33.0" } +registry-stack-client = { path = "crates/registry-stack-client", version = "0.33.0" } +registry-platform-audit = { path = "crates/registry-platform-audit", version = "0.33.0" } +registry-platform-authcommon = { path = "crates/registry-platform-authcommon", version = "0.33.0" } +registry-platform-buildinfo = { path = "crates/registry-platform-buildinfo", version = "0.33.0" } +registry-platform-calendar = { path = "crates/registry-platform-calendar", version = "0.33.0" } +registry-cli-reference = { path = "crates/registry-cli-reference", version = "0.33.0" } +registry-platform-canonical-json = { path = "crates/registry-platform-canonical-json", version = "0.33.0" } +registry-platform-config = { path = "crates/registry-platform-config", version = "0.33.0" } +registry-platform-crypto = { path = "crates/registry-platform-crypto", version = "0.33.0" } +registry-platform-hooks = { path = "crates/registry-platform-hooks", version = "0.33.0" } +registry-platform-httpsec = { path = "crates/registry-platform-httpsec", version = "0.33.0", default-features = false } +registry-platform-httputil = { path = "crates/registry-platform-httputil", version = "0.33.0" } +registry-platform-oidc = { path = "crates/registry-platform-oidc", version = "0.33.0" } +registry-platform-script = { path = "crates/registry-platform-script", version = "0.33.0" } +registry-platform-sdjwt = { path = "crates/registry-platform-sdjwt", version = "0.33.0" } +registry-platform-sqlite = { path = "crates/registry-platform-sqlite", version = "0.33.0" } +registry-platform-testing = { path = "crates/registry-platform-testing", version = "0.33.0" } anstream = { version = "1" } anstyle = { version = "1" } diff --git a/crates/registry-breg-client-node/index.js b/crates/registry-breg-client-node/index.js index 201992df60..4744b152ae 100644 --- a/crates/registry-breg-client-node/index.js +++ b/crates/registry-breg-client-node/index.js @@ -77,8 +77,8 @@ function requireNative() { try { const binding = require('@registrystack/breg-client-native-android-arm64') const bindingPackageVersion = require('@registrystack/breg-client-native-android-arm64/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -93,8 +93,8 @@ function requireNative() { try { const binding = require('@registrystack/breg-client-native-android-arm-eabi') const bindingPackageVersion = require('@registrystack/breg-client-native-android-arm-eabi/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -114,8 +114,8 @@ function requireNative() { try { const binding = require('@registrystack/breg-client-native-win32-x64-gnu') const bindingPackageVersion = require('@registrystack/breg-client-native-win32-x64-gnu/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -130,8 +130,8 @@ function requireNative() { try { const binding = require('@registrystack/breg-client-native-win32-x64-msvc') const bindingPackageVersion = require('@registrystack/breg-client-native-win32-x64-msvc/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -147,8 +147,8 @@ function requireNative() { try { const binding = require('@registrystack/breg-client-native-win32-ia32-msvc') const bindingPackageVersion = require('@registrystack/breg-client-native-win32-ia32-msvc/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -163,8 +163,8 @@ function requireNative() { try { const binding = require('@registrystack/breg-client-native-win32-arm64-msvc') const bindingPackageVersion = require('@registrystack/breg-client-native-win32-arm64-msvc/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -182,8 +182,8 @@ function requireNative() { try { const binding = require('@registrystack/breg-client-native-darwin-universal') const bindingPackageVersion = require('@registrystack/breg-client-native-darwin-universal/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -198,8 +198,8 @@ function requireNative() { try { const binding = require('@registrystack/breg-client-native-darwin-x64') const bindingPackageVersion = require('@registrystack/breg-client-native-darwin-x64/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -214,8 +214,8 @@ function requireNative() { try { const binding = require('@registrystack/breg-client-native-darwin-arm64') const bindingPackageVersion = require('@registrystack/breg-client-native-darwin-arm64/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -234,8 +234,8 @@ function requireNative() { try { const binding = require('@registrystack/breg-client-native-freebsd-x64') const bindingPackageVersion = require('@registrystack/breg-client-native-freebsd-x64/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -250,8 +250,8 @@ function requireNative() { try { const binding = require('@registrystack/breg-client-native-freebsd-arm64') const bindingPackageVersion = require('@registrystack/breg-client-native-freebsd-arm64/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -271,8 +271,8 @@ function requireNative() { try { const binding = require('@registrystack/breg-client-native-linux-x64-musl') const bindingPackageVersion = require('@registrystack/breg-client-native-linux-x64-musl/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -287,8 +287,8 @@ function requireNative() { try { const binding = require('@registrystack/breg-client-native-linux-x64-gnu') const bindingPackageVersion = require('@registrystack/breg-client-native-linux-x64-gnu/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -305,8 +305,8 @@ function requireNative() { try { const binding = require('@registrystack/breg-client-native-linux-arm64-musl') const bindingPackageVersion = require('@registrystack/breg-client-native-linux-arm64-musl/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -321,8 +321,8 @@ function requireNative() { try { const binding = require('@registrystack/breg-client-native-linux-arm64-gnu') const bindingPackageVersion = require('@registrystack/breg-client-native-linux-arm64-gnu/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -339,8 +339,8 @@ function requireNative() { try { const binding = require('@registrystack/breg-client-native-linux-arm-musleabihf') const bindingPackageVersion = require('@registrystack/breg-client-native-linux-arm-musleabihf/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -355,8 +355,8 @@ function requireNative() { try { const binding = require('@registrystack/breg-client-native-linux-arm-gnueabihf') const bindingPackageVersion = require('@registrystack/breg-client-native-linux-arm-gnueabihf/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -373,8 +373,8 @@ function requireNative() { try { const binding = require('@registrystack/breg-client-native-linux-loong64-musl') const bindingPackageVersion = require('@registrystack/breg-client-native-linux-loong64-musl/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -389,8 +389,8 @@ function requireNative() { try { const binding = require('@registrystack/breg-client-native-linux-loong64-gnu') const bindingPackageVersion = require('@registrystack/breg-client-native-linux-loong64-gnu/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -407,8 +407,8 @@ function requireNative() { try { const binding = require('@registrystack/breg-client-native-linux-riscv64-musl') const bindingPackageVersion = require('@registrystack/breg-client-native-linux-riscv64-musl/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -423,8 +423,8 @@ function requireNative() { try { const binding = require('@registrystack/breg-client-native-linux-riscv64-gnu') const bindingPackageVersion = require('@registrystack/breg-client-native-linux-riscv64-gnu/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -440,8 +440,8 @@ function requireNative() { try { const binding = require('@registrystack/breg-client-native-linux-ppc64-gnu') const bindingPackageVersion = require('@registrystack/breg-client-native-linux-ppc64-gnu/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -456,8 +456,8 @@ function requireNative() { try { const binding = require('@registrystack/breg-client-native-linux-s390x-gnu') const bindingPackageVersion = require('@registrystack/breg-client-native-linux-s390x-gnu/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -476,8 +476,8 @@ function requireNative() { try { const binding = require('@registrystack/breg-client-native-openharmony-arm64') const bindingPackageVersion = require('@registrystack/breg-client-native-openharmony-arm64/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -492,8 +492,8 @@ function requireNative() { try { const binding = require('@registrystack/breg-client-native-openharmony-x64') const bindingPackageVersion = require('@registrystack/breg-client-native-openharmony-x64/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -508,8 +508,8 @@ function requireNative() { try { const binding = require('@registrystack/breg-client-native-openharmony-arm') const bindingPackageVersion = require('@registrystack/breg-client-native-openharmony-arm/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -648,8 +648,8 @@ if (!nativeBinding || forceWasi) { if (!candidateFailed) { if (process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { const bindingPackageVersion = require('@registrystack/breg-client-native-wasm32-wasi/package.json').version - if (bindingPackageVersion !== '0.32.0') { - throw new Error(`WASI binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0') { + throw new Error(`WASI binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } } wasiBinding = require('@registrystack/breg-client-native-wasm32-wasi') diff --git a/crates/registry-breg-client-node/package-lock.json b/crates/registry-breg-client-node/package-lock.json index 5387a7c916..4ad5926160 100644 --- a/crates/registry-breg-client-node/package-lock.json +++ b/crates/registry-breg-client-node/package-lock.json @@ -1,12 +1,12 @@ { "name": "@registrystack/breg-client-native", - "version": "0.32.0", + "version": "0.33.0", "lockfileVersion": 3, "requires": true, "packages": { "": { "name": "@registrystack/breg-client-native", - "version": "0.32.0", + "version": "0.33.0", "license": "Apache-2.0", "devDependencies": { "@napi-rs/cli": "3.8.2", diff --git a/crates/registry-breg-client-node/package.json b/crates/registry-breg-client-node/package.json index 822cae65cc..bfa4921c4e 100644 --- a/crates/registry-breg-client-node/package.json +++ b/crates/registry-breg-client-node/package.json @@ -1,6 +1,6 @@ { "name": "@registrystack/breg-client-native", - "version": "0.32.0", + "version": "0.33.0", "description": "Internal Node.js native binding used by @registrystack/client.", "private": true, "license": "Apache-2.0", diff --git a/crates/registry-breg-client-py/Cargo.toml b/crates/registry-breg-client-py/Cargo.toml index 399434a3dd..f5bde69c2b 100644 --- a/crates/registry-breg-client-py/Cargo.toml +++ b/crates/registry-breg-client-py/Cargo.toml @@ -22,7 +22,7 @@ extension-module = ["pyo3/extension-module"] pyo3.workspace = true # Keep the Rust SDK name distinct from this extension's Python module name. # Cargo passes both crates to Rustdoc, so sharing a name makes doctests ambiguous. -breg-client-sdk = { package = "registry-breg-client", path = "../registry-breg-client", version = "0.32.0" } +breg-client-sdk = { package = "registry-breg-client", path = "../registry-breg-client", version = "0.33.0" } registry-platform-crypto.workspace = true registry-platform-httputil.workspace = true serde.workspace = true diff --git a/crates/registry-breg-client-py/pyproject.toml b/crates/registry-breg-client-py/pyproject.toml index 0c692a2a09..4c3d85ad38 100644 --- a/crates/registry-breg-client-py/pyproject.toml +++ b/crates/registry-breg-client-py/pyproject.toml @@ -4,7 +4,7 @@ build-backend = "maturin" [project] name = "registry-breg-client-native" -version = "0.32.0" +version = "0.33.0" description = "Internal Base Registry Engine binding used by registry-stack-client." readme = "README.md" license = { text = "Apache-2.0" } diff --git a/crates/registry-casework-client-node/index.js b/crates/registry-casework-client-node/index.js index e54a0bd5b7..4a0a937b64 100644 --- a/crates/registry-casework-client-node/index.js +++ b/crates/registry-casework-client-node/index.js @@ -77,8 +77,8 @@ function requireNative() { try { const binding = require('@registrystack/casework-client-native-android-arm64') const bindingPackageVersion = require('@registrystack/casework-client-native-android-arm64/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -93,8 +93,8 @@ function requireNative() { try { const binding = require('@registrystack/casework-client-native-android-arm-eabi') const bindingPackageVersion = require('@registrystack/casework-client-native-android-arm-eabi/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -114,8 +114,8 @@ function requireNative() { try { const binding = require('@registrystack/casework-client-native-win32-x64-gnu') const bindingPackageVersion = require('@registrystack/casework-client-native-win32-x64-gnu/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -130,8 +130,8 @@ function requireNative() { try { const binding = require('@registrystack/casework-client-native-win32-x64-msvc') const bindingPackageVersion = require('@registrystack/casework-client-native-win32-x64-msvc/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -147,8 +147,8 @@ function requireNative() { try { const binding = require('@registrystack/casework-client-native-win32-ia32-msvc') const bindingPackageVersion = require('@registrystack/casework-client-native-win32-ia32-msvc/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -163,8 +163,8 @@ function requireNative() { try { const binding = require('@registrystack/casework-client-native-win32-arm64-msvc') const bindingPackageVersion = require('@registrystack/casework-client-native-win32-arm64-msvc/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -182,8 +182,8 @@ function requireNative() { try { const binding = require('@registrystack/casework-client-native-darwin-universal') const bindingPackageVersion = require('@registrystack/casework-client-native-darwin-universal/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -198,8 +198,8 @@ function requireNative() { try { const binding = require('@registrystack/casework-client-native-darwin-x64') const bindingPackageVersion = require('@registrystack/casework-client-native-darwin-x64/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -214,8 +214,8 @@ function requireNative() { try { const binding = require('@registrystack/casework-client-native-darwin-arm64') const bindingPackageVersion = require('@registrystack/casework-client-native-darwin-arm64/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -234,8 +234,8 @@ function requireNative() { try { const binding = require('@registrystack/casework-client-native-freebsd-x64') const bindingPackageVersion = require('@registrystack/casework-client-native-freebsd-x64/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -250,8 +250,8 @@ function requireNative() { try { const binding = require('@registrystack/casework-client-native-freebsd-arm64') const bindingPackageVersion = require('@registrystack/casework-client-native-freebsd-arm64/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -271,8 +271,8 @@ function requireNative() { try { const binding = require('@registrystack/casework-client-native-linux-x64-musl') const bindingPackageVersion = require('@registrystack/casework-client-native-linux-x64-musl/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -287,8 +287,8 @@ function requireNative() { try { const binding = require('@registrystack/casework-client-native-linux-x64-gnu') const bindingPackageVersion = require('@registrystack/casework-client-native-linux-x64-gnu/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -305,8 +305,8 @@ function requireNative() { try { const binding = require('@registrystack/casework-client-native-linux-arm64-musl') const bindingPackageVersion = require('@registrystack/casework-client-native-linux-arm64-musl/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -321,8 +321,8 @@ function requireNative() { try { const binding = require('@registrystack/casework-client-native-linux-arm64-gnu') const bindingPackageVersion = require('@registrystack/casework-client-native-linux-arm64-gnu/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -339,8 +339,8 @@ function requireNative() { try { const binding = require('@registrystack/casework-client-native-linux-arm-musleabihf') const bindingPackageVersion = require('@registrystack/casework-client-native-linux-arm-musleabihf/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -355,8 +355,8 @@ function requireNative() { try { const binding = require('@registrystack/casework-client-native-linux-arm-gnueabihf') const bindingPackageVersion = require('@registrystack/casework-client-native-linux-arm-gnueabihf/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -373,8 +373,8 @@ function requireNative() { try { const binding = require('@registrystack/casework-client-native-linux-loong64-musl') const bindingPackageVersion = require('@registrystack/casework-client-native-linux-loong64-musl/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -389,8 +389,8 @@ function requireNative() { try { const binding = require('@registrystack/casework-client-native-linux-loong64-gnu') const bindingPackageVersion = require('@registrystack/casework-client-native-linux-loong64-gnu/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -407,8 +407,8 @@ function requireNative() { try { const binding = require('@registrystack/casework-client-native-linux-riscv64-musl') const bindingPackageVersion = require('@registrystack/casework-client-native-linux-riscv64-musl/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -423,8 +423,8 @@ function requireNative() { try { const binding = require('@registrystack/casework-client-native-linux-riscv64-gnu') const bindingPackageVersion = require('@registrystack/casework-client-native-linux-riscv64-gnu/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -440,8 +440,8 @@ function requireNative() { try { const binding = require('@registrystack/casework-client-native-linux-ppc64-gnu') const bindingPackageVersion = require('@registrystack/casework-client-native-linux-ppc64-gnu/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -456,8 +456,8 @@ function requireNative() { try { const binding = require('@registrystack/casework-client-native-linux-s390x-gnu') const bindingPackageVersion = require('@registrystack/casework-client-native-linux-s390x-gnu/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -476,8 +476,8 @@ function requireNative() { try { const binding = require('@registrystack/casework-client-native-openharmony-arm64') const bindingPackageVersion = require('@registrystack/casework-client-native-openharmony-arm64/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -492,8 +492,8 @@ function requireNative() { try { const binding = require('@registrystack/casework-client-native-openharmony-x64') const bindingPackageVersion = require('@registrystack/casework-client-native-openharmony-x64/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -508,8 +508,8 @@ function requireNative() { try { const binding = require('@registrystack/casework-client-native-openharmony-arm') const bindingPackageVersion = require('@registrystack/casework-client-native-openharmony-arm/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -648,8 +648,8 @@ if (!nativeBinding || forceWasi) { if (!candidateFailed) { if (process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { const bindingPackageVersion = require('@registrystack/casework-client-native-wasm32-wasi/package.json').version - if (bindingPackageVersion !== '0.32.0') { - throw new Error(`WASI binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0') { + throw new Error(`WASI binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } } wasiBinding = require('@registrystack/casework-client-native-wasm32-wasi') diff --git a/crates/registry-casework-client-node/package-lock.json b/crates/registry-casework-client-node/package-lock.json index e549b61c31..aa87fc50bc 100644 --- a/crates/registry-casework-client-node/package-lock.json +++ b/crates/registry-casework-client-node/package-lock.json @@ -1,12 +1,12 @@ { "name": "@registrystack/casework-client-native", - "version": "0.32.0", + "version": "0.33.0", "lockfileVersion": 3, "requires": true, "packages": { "": { "name": "@registrystack/casework-client-native", - "version": "0.32.0", + "version": "0.33.0", "license": "Apache-2.0", "devDependencies": { "@napi-rs/cli": "3.8.2", diff --git a/crates/registry-casework-client-node/package.json b/crates/registry-casework-client-node/package.json index 4fcc0a7c0f..815df84255 100644 --- a/crates/registry-casework-client-node/package.json +++ b/crates/registry-casework-client-node/package.json @@ -1,6 +1,6 @@ { "name": "@registrystack/casework-client-native", - "version": "0.32.0", + "version": "0.33.0", "description": "Internal Node.js native binding used by @registrystack/client.", "private": true, "license": "Apache-2.0", diff --git a/crates/registry-casework-client-py/Cargo.toml b/crates/registry-casework-client-py/Cargo.toml index 2f1f904aef..dfdbe64189 100644 --- a/crates/registry-casework-client-py/Cargo.toml +++ b/crates/registry-casework-client-py/Cargo.toml @@ -21,7 +21,7 @@ extension-module = ["pyo3/extension-module"] [dependencies] pyo3.workspace = true # Keep the SDK name distinct from this extension's Python module name. -casework-client-sdk = { package = "registry-casework-client", path = "../registry-casework-client", version = "0.32.0" } +casework-client-sdk = { package = "registry-casework-client", path = "../registry-casework-client", version = "0.33.0" } serde.workspace = true serde_json.workspace = true tokio.workspace = true diff --git a/crates/registry-casework-client-py/pyproject.toml b/crates/registry-casework-client-py/pyproject.toml index e71db98f2f..cda5ac3882 100644 --- a/crates/registry-casework-client-py/pyproject.toml +++ b/crates/registry-casework-client-py/pyproject.toml @@ -4,7 +4,7 @@ build-backend = "maturin" [project] name = "registry-casework-client-native" -version = "0.32.0" +version = "0.33.0" description = "Internal Casework binding used by registry-stack-client." readme = "README.md" license = { text = "Apache-2.0" } diff --git a/crates/registry-discovery-client-node/index.js b/crates/registry-discovery-client-node/index.js index 1362073aae..5113bdcaf4 100644 --- a/crates/registry-discovery-client-node/index.js +++ b/crates/registry-discovery-client-node/index.js @@ -77,8 +77,8 @@ function requireNative() { try { const binding = require('@registrystack/discovery-client-android-arm64') const bindingPackageVersion = require('@registrystack/discovery-client-android-arm64/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -93,8 +93,8 @@ function requireNative() { try { const binding = require('@registrystack/discovery-client-android-arm-eabi') const bindingPackageVersion = require('@registrystack/discovery-client-android-arm-eabi/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -114,8 +114,8 @@ function requireNative() { try { const binding = require('@registrystack/discovery-client-win32-x64-gnu') const bindingPackageVersion = require('@registrystack/discovery-client-win32-x64-gnu/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -130,8 +130,8 @@ function requireNative() { try { const binding = require('@registrystack/discovery-client-win32-x64-msvc') const bindingPackageVersion = require('@registrystack/discovery-client-win32-x64-msvc/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -147,8 +147,8 @@ function requireNative() { try { const binding = require('@registrystack/discovery-client-win32-ia32-msvc') const bindingPackageVersion = require('@registrystack/discovery-client-win32-ia32-msvc/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -163,8 +163,8 @@ function requireNative() { try { const binding = require('@registrystack/discovery-client-win32-arm64-msvc') const bindingPackageVersion = require('@registrystack/discovery-client-win32-arm64-msvc/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -182,8 +182,8 @@ function requireNative() { try { const binding = require('@registrystack/discovery-client-darwin-universal') const bindingPackageVersion = require('@registrystack/discovery-client-darwin-universal/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -198,8 +198,8 @@ function requireNative() { try { const binding = require('@registrystack/discovery-client-darwin-x64') const bindingPackageVersion = require('@registrystack/discovery-client-darwin-x64/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -214,8 +214,8 @@ function requireNative() { try { const binding = require('@registrystack/discovery-client-darwin-arm64') const bindingPackageVersion = require('@registrystack/discovery-client-darwin-arm64/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -234,8 +234,8 @@ function requireNative() { try { const binding = require('@registrystack/discovery-client-freebsd-x64') const bindingPackageVersion = require('@registrystack/discovery-client-freebsd-x64/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -250,8 +250,8 @@ function requireNative() { try { const binding = require('@registrystack/discovery-client-freebsd-arm64') const bindingPackageVersion = require('@registrystack/discovery-client-freebsd-arm64/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -271,8 +271,8 @@ function requireNative() { try { const binding = require('@registrystack/discovery-client-linux-x64-musl') const bindingPackageVersion = require('@registrystack/discovery-client-linux-x64-musl/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -287,8 +287,8 @@ function requireNative() { try { const binding = require('@registrystack/discovery-client-linux-x64-gnu') const bindingPackageVersion = require('@registrystack/discovery-client-linux-x64-gnu/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -305,8 +305,8 @@ function requireNative() { try { const binding = require('@registrystack/discovery-client-linux-arm64-musl') const bindingPackageVersion = require('@registrystack/discovery-client-linux-arm64-musl/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -321,8 +321,8 @@ function requireNative() { try { const binding = require('@registrystack/discovery-client-linux-arm64-gnu') const bindingPackageVersion = require('@registrystack/discovery-client-linux-arm64-gnu/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -339,8 +339,8 @@ function requireNative() { try { const binding = require('@registrystack/discovery-client-linux-arm-musleabihf') const bindingPackageVersion = require('@registrystack/discovery-client-linux-arm-musleabihf/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -355,8 +355,8 @@ function requireNative() { try { const binding = require('@registrystack/discovery-client-linux-arm-gnueabihf') const bindingPackageVersion = require('@registrystack/discovery-client-linux-arm-gnueabihf/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -373,8 +373,8 @@ function requireNative() { try { const binding = require('@registrystack/discovery-client-linux-loong64-musl') const bindingPackageVersion = require('@registrystack/discovery-client-linux-loong64-musl/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -389,8 +389,8 @@ function requireNative() { try { const binding = require('@registrystack/discovery-client-linux-loong64-gnu') const bindingPackageVersion = require('@registrystack/discovery-client-linux-loong64-gnu/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -407,8 +407,8 @@ function requireNative() { try { const binding = require('@registrystack/discovery-client-linux-riscv64-musl') const bindingPackageVersion = require('@registrystack/discovery-client-linux-riscv64-musl/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -423,8 +423,8 @@ function requireNative() { try { const binding = require('@registrystack/discovery-client-linux-riscv64-gnu') const bindingPackageVersion = require('@registrystack/discovery-client-linux-riscv64-gnu/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -440,8 +440,8 @@ function requireNative() { try { const binding = require('@registrystack/discovery-client-linux-ppc64-gnu') const bindingPackageVersion = require('@registrystack/discovery-client-linux-ppc64-gnu/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -456,8 +456,8 @@ function requireNative() { try { const binding = require('@registrystack/discovery-client-linux-s390x-gnu') const bindingPackageVersion = require('@registrystack/discovery-client-linux-s390x-gnu/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -476,8 +476,8 @@ function requireNative() { try { const binding = require('@registrystack/discovery-client-openharmony-arm64') const bindingPackageVersion = require('@registrystack/discovery-client-openharmony-arm64/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -492,8 +492,8 @@ function requireNative() { try { const binding = require('@registrystack/discovery-client-openharmony-x64') const bindingPackageVersion = require('@registrystack/discovery-client-openharmony-x64/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -508,8 +508,8 @@ function requireNative() { try { const binding = require('@registrystack/discovery-client-openharmony-arm') const bindingPackageVersion = require('@registrystack/discovery-client-openharmony-arm/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -619,7 +619,7 @@ if (!nativeBinding || forceWasi) { } return null } - if (!wasiBindingLoaded && (!__napiWasiFlavorRequested || __napiWasiFlavor === "wasm32-wasi")) { + if (!__napiWasiFlavorRequested || __napiWasiFlavor === "wasm32-wasi") { let candidateError = null let candidateFailed = false try { @@ -648,8 +648,8 @@ if (!nativeBinding || forceWasi) { if (!candidateFailed) { if (process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { const bindingPackageVersion = require('@registrystack/discovery-client-wasm32-wasi/package.json').version - if (bindingPackageVersion !== '0.32.0') { - throw new Error(`WASI binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0') { + throw new Error(`WASI binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } } wasiBinding = require('@registrystack/discovery-client-wasm32-wasi') diff --git a/crates/registry-discovery-client-node/npm/darwin-arm64/package.json b/crates/registry-discovery-client-node/npm/darwin-arm64/package.json index bcde2bc99f..14974c136f 100644 --- a/crates/registry-discovery-client-node/npm/darwin-arm64/package.json +++ b/crates/registry-discovery-client-node/npm/darwin-arm64/package.json @@ -1,6 +1,6 @@ { "name": "@registrystack/discovery-client-darwin-arm64", - "version": "0.32.0", + "version": "0.33.0", "cpu": ["arm64"], "main": "discovery-client.darwin-arm64.node", "files": ["discovery-client.darwin-arm64.node"], diff --git a/crates/registry-discovery-client-node/npm/linux-arm64-gnu/package.json b/crates/registry-discovery-client-node/npm/linux-arm64-gnu/package.json index b4fa03c3a2..424b9f2b95 100644 --- a/crates/registry-discovery-client-node/npm/linux-arm64-gnu/package.json +++ b/crates/registry-discovery-client-node/npm/linux-arm64-gnu/package.json @@ -1,6 +1,6 @@ { "name": "@registrystack/discovery-client-linux-arm64-gnu", - "version": "0.32.0", + "version": "0.33.0", "cpu": ["arm64"], "main": "discovery-client.linux-arm64-gnu.node", "files": ["discovery-client.linux-arm64-gnu.node"], diff --git a/crates/registry-discovery-client-node/npm/linux-x64-gnu/package.json b/crates/registry-discovery-client-node/npm/linux-x64-gnu/package.json index f710fc6e02..1929380424 100644 --- a/crates/registry-discovery-client-node/npm/linux-x64-gnu/package.json +++ b/crates/registry-discovery-client-node/npm/linux-x64-gnu/package.json @@ -1,6 +1,6 @@ { "name": "@registrystack/discovery-client-linux-x64-gnu", - "version": "0.32.0", + "version": "0.33.0", "cpu": ["x64"], "main": "discovery-client.linux-x64-gnu.node", "files": ["discovery-client.linux-x64-gnu.node"], diff --git a/crates/registry-discovery-client-node/package-lock.json b/crates/registry-discovery-client-node/package-lock.json index 291075406c..e2eec4c8b8 100644 --- a/crates/registry-discovery-client-node/package-lock.json +++ b/crates/registry-discovery-client-node/package-lock.json @@ -1,12 +1,12 @@ { "name": "@registrystack/discovery-client", - "version": "0.32.0", + "version": "0.33.0", "lockfileVersion": 3, "requires": true, "packages": { "": { "name": "@registrystack/discovery-client", - "version": "0.32.0", + "version": "0.33.0", "license": "Apache-2.0", "devDependencies": { "@napi-rs/cli": "3.8.2", diff --git a/crates/registry-discovery-client-node/package.json b/crates/registry-discovery-client-node/package.json index b86759e643..a95486ebd3 100644 --- a/crates/registry-discovery-client-node/package.json +++ b/crates/registry-discovery-client-node/package.json @@ -1,6 +1,6 @@ { "name": "@registrystack/discovery-client", - "version": "0.32.0", + "version": "0.33.0", "description": "Node.js binding for the Registry Discovery client, via napi-rs.", "license": "Apache-2.0", "publishConfig": { "access": "public", "provenance": true }, diff --git a/crates/registry-discovery-client-py/Cargo.toml b/crates/registry-discovery-client-py/Cargo.toml index 43f67b0237..178f89b9fc 100644 --- a/crates/registry-discovery-client-py/Cargo.toml +++ b/crates/registry-discovery-client-py/Cargo.toml @@ -19,7 +19,7 @@ workspace = true extension-module = ["pyo3/extension-module"] [dependencies] -discovery-client-sdk = { package = "registry-discovery-client", path = "../registry-discovery-client", version = "0.32.0" } +discovery-client-sdk = { package = "registry-discovery-client", path = "../registry-discovery-client", version = "0.33.0" } pyo3.workspace = true serde.workspace = true serde_json.workspace = true diff --git a/crates/registry-discovery-client-py/pyproject.toml b/crates/registry-discovery-client-py/pyproject.toml index 9093f35757..bfc2c37aaf 100644 --- a/crates/registry-discovery-client-py/pyproject.toml +++ b/crates/registry-discovery-client-py/pyproject.toml @@ -4,7 +4,7 @@ build-backend = "maturin" [project] name = "registry-discovery-client" -version = "0.32.0" +version = "0.33.0" description = "Python binding for the Registry Discovery client, via PyO3." readme = "README.md" license = { text = "Apache-2.0" } diff --git a/crates/registry-evidence-client-node/index.js b/crates/registry-evidence-client-node/index.js index 453ffbe732..407d334206 100644 --- a/crates/registry-evidence-client-node/index.js +++ b/crates/registry-evidence-client-node/index.js @@ -77,8 +77,8 @@ function requireNative() { try { const binding = require('@registrystack/evidence-client-android-arm64') const bindingPackageVersion = require('@registrystack/evidence-client-android-arm64/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -93,8 +93,8 @@ function requireNative() { try { const binding = require('@registrystack/evidence-client-android-arm-eabi') const bindingPackageVersion = require('@registrystack/evidence-client-android-arm-eabi/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -114,8 +114,8 @@ function requireNative() { try { const binding = require('@registrystack/evidence-client-win32-x64-gnu') const bindingPackageVersion = require('@registrystack/evidence-client-win32-x64-gnu/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -130,8 +130,8 @@ function requireNative() { try { const binding = require('@registrystack/evidence-client-win32-x64-msvc') const bindingPackageVersion = require('@registrystack/evidence-client-win32-x64-msvc/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -147,8 +147,8 @@ function requireNative() { try { const binding = require('@registrystack/evidence-client-win32-ia32-msvc') const bindingPackageVersion = require('@registrystack/evidence-client-win32-ia32-msvc/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -163,8 +163,8 @@ function requireNative() { try { const binding = require('@registrystack/evidence-client-win32-arm64-msvc') const bindingPackageVersion = require('@registrystack/evidence-client-win32-arm64-msvc/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -182,8 +182,8 @@ function requireNative() { try { const binding = require('@registrystack/evidence-client-darwin-universal') const bindingPackageVersion = require('@registrystack/evidence-client-darwin-universal/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -198,8 +198,8 @@ function requireNative() { try { const binding = require('@registrystack/evidence-client-darwin-x64') const bindingPackageVersion = require('@registrystack/evidence-client-darwin-x64/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -214,8 +214,8 @@ function requireNative() { try { const binding = require('@registrystack/evidence-client-darwin-arm64') const bindingPackageVersion = require('@registrystack/evidence-client-darwin-arm64/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -234,8 +234,8 @@ function requireNative() { try { const binding = require('@registrystack/evidence-client-freebsd-x64') const bindingPackageVersion = require('@registrystack/evidence-client-freebsd-x64/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -250,8 +250,8 @@ function requireNative() { try { const binding = require('@registrystack/evidence-client-freebsd-arm64') const bindingPackageVersion = require('@registrystack/evidence-client-freebsd-arm64/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -271,8 +271,8 @@ function requireNative() { try { const binding = require('@registrystack/evidence-client-linux-x64-musl') const bindingPackageVersion = require('@registrystack/evidence-client-linux-x64-musl/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -287,8 +287,8 @@ function requireNative() { try { const binding = require('@registrystack/evidence-client-linux-x64-gnu') const bindingPackageVersion = require('@registrystack/evidence-client-linux-x64-gnu/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -305,8 +305,8 @@ function requireNative() { try { const binding = require('@registrystack/evidence-client-linux-arm64-musl') const bindingPackageVersion = require('@registrystack/evidence-client-linux-arm64-musl/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -321,8 +321,8 @@ function requireNative() { try { const binding = require('@registrystack/evidence-client-linux-arm64-gnu') const bindingPackageVersion = require('@registrystack/evidence-client-linux-arm64-gnu/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -339,8 +339,8 @@ function requireNative() { try { const binding = require('@registrystack/evidence-client-linux-arm-musleabihf') const bindingPackageVersion = require('@registrystack/evidence-client-linux-arm-musleabihf/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -355,8 +355,8 @@ function requireNative() { try { const binding = require('@registrystack/evidence-client-linux-arm-gnueabihf') const bindingPackageVersion = require('@registrystack/evidence-client-linux-arm-gnueabihf/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -373,8 +373,8 @@ function requireNative() { try { const binding = require('@registrystack/evidence-client-linux-loong64-musl') const bindingPackageVersion = require('@registrystack/evidence-client-linux-loong64-musl/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -389,8 +389,8 @@ function requireNative() { try { const binding = require('@registrystack/evidence-client-linux-loong64-gnu') const bindingPackageVersion = require('@registrystack/evidence-client-linux-loong64-gnu/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -407,8 +407,8 @@ function requireNative() { try { const binding = require('@registrystack/evidence-client-linux-riscv64-musl') const bindingPackageVersion = require('@registrystack/evidence-client-linux-riscv64-musl/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -423,8 +423,8 @@ function requireNative() { try { const binding = require('@registrystack/evidence-client-linux-riscv64-gnu') const bindingPackageVersion = require('@registrystack/evidence-client-linux-riscv64-gnu/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -440,8 +440,8 @@ function requireNative() { try { const binding = require('@registrystack/evidence-client-linux-ppc64-gnu') const bindingPackageVersion = require('@registrystack/evidence-client-linux-ppc64-gnu/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -456,8 +456,8 @@ function requireNative() { try { const binding = require('@registrystack/evidence-client-linux-s390x-gnu') const bindingPackageVersion = require('@registrystack/evidence-client-linux-s390x-gnu/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -476,8 +476,8 @@ function requireNative() { try { const binding = require('@registrystack/evidence-client-openharmony-arm64') const bindingPackageVersion = require('@registrystack/evidence-client-openharmony-arm64/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -492,8 +492,8 @@ function requireNative() { try { const binding = require('@registrystack/evidence-client-openharmony-x64') const bindingPackageVersion = require('@registrystack/evidence-client-openharmony-x64/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -508,8 +508,8 @@ function requireNative() { try { const binding = require('@registrystack/evidence-client-openharmony-arm') const bindingPackageVersion = require('@registrystack/evidence-client-openharmony-arm/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -648,8 +648,8 @@ if (!nativeBinding || forceWasi) { if (!candidateFailed) { if (process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { const bindingPackageVersion = require('@registrystack/evidence-client-wasm32-wasi/package.json').version - if (bindingPackageVersion !== '0.32.0') { - throw new Error(`WASI binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0') { + throw new Error(`WASI binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } } wasiBinding = require('@registrystack/evidence-client-wasm32-wasi') diff --git a/crates/registry-evidence-client-node/npm/darwin-arm64/package.json b/crates/registry-evidence-client-node/npm/darwin-arm64/package.json index 7d02ae6f22..f592e76288 100644 --- a/crates/registry-evidence-client-node/npm/darwin-arm64/package.json +++ b/crates/registry-evidence-client-node/npm/darwin-arm64/package.json @@ -1,6 +1,6 @@ { "name": "@registrystack/evidence-client-darwin-arm64", - "version": "0.32.0", + "version": "0.33.0", "cpu": ["arm64"], "main": "evidence-client.darwin-arm64.node", "files": ["evidence-client.darwin-arm64.node"], diff --git a/crates/registry-evidence-client-node/npm/linux-arm64-gnu/package.json b/crates/registry-evidence-client-node/npm/linux-arm64-gnu/package.json index 8142544f19..3e64ad526b 100644 --- a/crates/registry-evidence-client-node/npm/linux-arm64-gnu/package.json +++ b/crates/registry-evidence-client-node/npm/linux-arm64-gnu/package.json @@ -1,6 +1,6 @@ { "name": "@registrystack/evidence-client-linux-arm64-gnu", - "version": "0.32.0", + "version": "0.33.0", "cpu": ["arm64"], "main": "evidence-client.linux-arm64-gnu.node", "files": ["evidence-client.linux-arm64-gnu.node"], diff --git a/crates/registry-evidence-client-node/npm/linux-x64-gnu/package.json b/crates/registry-evidence-client-node/npm/linux-x64-gnu/package.json index 9e5c778a0a..79cdb8950c 100644 --- a/crates/registry-evidence-client-node/npm/linux-x64-gnu/package.json +++ b/crates/registry-evidence-client-node/npm/linux-x64-gnu/package.json @@ -1,6 +1,6 @@ { "name": "@registrystack/evidence-client-linux-x64-gnu", - "version": "0.32.0", + "version": "0.33.0", "cpu": ["x64"], "main": "evidence-client.linux-x64-gnu.node", "files": ["evidence-client.linux-x64-gnu.node"], diff --git a/crates/registry-evidence-client-node/package-lock.json b/crates/registry-evidence-client-node/package-lock.json index 4bc2091890..7d113813f9 100644 --- a/crates/registry-evidence-client-node/package-lock.json +++ b/crates/registry-evidence-client-node/package-lock.json @@ -1,12 +1,12 @@ { "name": "@registrystack/evidence-client", - "version": "0.32.0", + "version": "0.33.0", "lockfileVersion": 3, "requires": true, "packages": { "": { "name": "@registrystack/evidence-client", - "version": "0.32.0", + "version": "0.33.0", "license": "Apache-2.0", "devDependencies": { "@napi-rs/cli": "3.8.2" diff --git a/crates/registry-evidence-client-node/package.json b/crates/registry-evidence-client-node/package.json index 8e32dccf14..d4d012504e 100644 --- a/crates/registry-evidence-client-node/package.json +++ b/crates/registry-evidence-client-node/package.json @@ -1,6 +1,6 @@ { "name": "@registrystack/evidence-client", - "version": "0.32.0", + "version": "0.33.0", "description": "Node.js binding for the Evidence relying-party client, via napi-rs.", "license": "Apache-2.0", "publishConfig": { "access": "public", "provenance": true }, diff --git a/crates/registry-evidence-client-py/Cargo.toml b/crates/registry-evidence-client-py/Cargo.toml index 742abcfd0b..e145e2dc72 100644 --- a/crates/registry-evidence-client-py/Cargo.toml +++ b/crates/registry-evidence-client-py/Cargo.toml @@ -29,7 +29,7 @@ chrono.workspace = true # multiple candidates for rmeta dependency`, which no `use` path syntax can # resolve). One consistent alias, used everywhere this crate reaches the SDK, # avoids that rather than special-casing test code against production code. -evidence-client-sdk = { package = "registry-evidence-client", path = "../registry-evidence-client", version = "0.32.0" } +evidence-client-sdk = { package = "registry-evidence-client", path = "../registry-evidence-client", version = "0.33.0" } pyo3.workspace = true registry-platform-crypto.workspace = true registry-platform-httputil.workspace = true diff --git a/crates/registry-evidence-client-py/pyproject.toml b/crates/registry-evidence-client-py/pyproject.toml index 5068bc2ad6..c6e6fcaa47 100644 --- a/crates/registry-evidence-client-py/pyproject.toml +++ b/crates/registry-evidence-client-py/pyproject.toml @@ -4,7 +4,7 @@ build-backend = "maturin" [project] name = "registry-evidence-client" -version = "0.32.0" +version = "0.33.0" description = "Python binding for the Evidence relying-party client, via PyO3." readme = "README.md" license = { text = "Apache-2.0" } diff --git a/crates/registry-relay-client-node/index.js b/crates/registry-relay-client-node/index.js index 7cc8f79c10..4692696ccf 100644 --- a/crates/registry-relay-client-node/index.js +++ b/crates/registry-relay-client-node/index.js @@ -77,8 +77,8 @@ function requireNative() { try { const binding = require('@registrystack/relay-client-android-arm64') const bindingPackageVersion = require('@registrystack/relay-client-android-arm64/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -93,8 +93,8 @@ function requireNative() { try { const binding = require('@registrystack/relay-client-android-arm-eabi') const bindingPackageVersion = require('@registrystack/relay-client-android-arm-eabi/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -114,8 +114,8 @@ function requireNative() { try { const binding = require('@registrystack/relay-client-win32-x64-gnu') const bindingPackageVersion = require('@registrystack/relay-client-win32-x64-gnu/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -130,8 +130,8 @@ function requireNative() { try { const binding = require('@registrystack/relay-client-win32-x64-msvc') const bindingPackageVersion = require('@registrystack/relay-client-win32-x64-msvc/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -147,8 +147,8 @@ function requireNative() { try { const binding = require('@registrystack/relay-client-win32-ia32-msvc') const bindingPackageVersion = require('@registrystack/relay-client-win32-ia32-msvc/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -163,8 +163,8 @@ function requireNative() { try { const binding = require('@registrystack/relay-client-win32-arm64-msvc') const bindingPackageVersion = require('@registrystack/relay-client-win32-arm64-msvc/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -182,8 +182,8 @@ function requireNative() { try { const binding = require('@registrystack/relay-client-darwin-universal') const bindingPackageVersion = require('@registrystack/relay-client-darwin-universal/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -198,8 +198,8 @@ function requireNative() { try { const binding = require('@registrystack/relay-client-darwin-x64') const bindingPackageVersion = require('@registrystack/relay-client-darwin-x64/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -214,8 +214,8 @@ function requireNative() { try { const binding = require('@registrystack/relay-client-darwin-arm64') const bindingPackageVersion = require('@registrystack/relay-client-darwin-arm64/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -234,8 +234,8 @@ function requireNative() { try { const binding = require('@registrystack/relay-client-freebsd-x64') const bindingPackageVersion = require('@registrystack/relay-client-freebsd-x64/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -250,8 +250,8 @@ function requireNative() { try { const binding = require('@registrystack/relay-client-freebsd-arm64') const bindingPackageVersion = require('@registrystack/relay-client-freebsd-arm64/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -271,8 +271,8 @@ function requireNative() { try { const binding = require('@registrystack/relay-client-linux-x64-musl') const bindingPackageVersion = require('@registrystack/relay-client-linux-x64-musl/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -287,8 +287,8 @@ function requireNative() { try { const binding = require('@registrystack/relay-client-linux-x64-gnu') const bindingPackageVersion = require('@registrystack/relay-client-linux-x64-gnu/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -305,8 +305,8 @@ function requireNative() { try { const binding = require('@registrystack/relay-client-linux-arm64-musl') const bindingPackageVersion = require('@registrystack/relay-client-linux-arm64-musl/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -321,8 +321,8 @@ function requireNative() { try { const binding = require('@registrystack/relay-client-linux-arm64-gnu') const bindingPackageVersion = require('@registrystack/relay-client-linux-arm64-gnu/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -339,8 +339,8 @@ function requireNative() { try { const binding = require('@registrystack/relay-client-linux-arm-musleabihf') const bindingPackageVersion = require('@registrystack/relay-client-linux-arm-musleabihf/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -355,8 +355,8 @@ function requireNative() { try { const binding = require('@registrystack/relay-client-linux-arm-gnueabihf') const bindingPackageVersion = require('@registrystack/relay-client-linux-arm-gnueabihf/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -373,8 +373,8 @@ function requireNative() { try { const binding = require('@registrystack/relay-client-linux-loong64-musl') const bindingPackageVersion = require('@registrystack/relay-client-linux-loong64-musl/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -389,8 +389,8 @@ function requireNative() { try { const binding = require('@registrystack/relay-client-linux-loong64-gnu') const bindingPackageVersion = require('@registrystack/relay-client-linux-loong64-gnu/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -407,8 +407,8 @@ function requireNative() { try { const binding = require('@registrystack/relay-client-linux-riscv64-musl') const bindingPackageVersion = require('@registrystack/relay-client-linux-riscv64-musl/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -423,8 +423,8 @@ function requireNative() { try { const binding = require('@registrystack/relay-client-linux-riscv64-gnu') const bindingPackageVersion = require('@registrystack/relay-client-linux-riscv64-gnu/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -440,8 +440,8 @@ function requireNative() { try { const binding = require('@registrystack/relay-client-linux-ppc64-gnu') const bindingPackageVersion = require('@registrystack/relay-client-linux-ppc64-gnu/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -456,8 +456,8 @@ function requireNative() { try { const binding = require('@registrystack/relay-client-linux-s390x-gnu') const bindingPackageVersion = require('@registrystack/relay-client-linux-s390x-gnu/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -476,8 +476,8 @@ function requireNative() { try { const binding = require('@registrystack/relay-client-openharmony-arm64') const bindingPackageVersion = require('@registrystack/relay-client-openharmony-arm64/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -492,8 +492,8 @@ function requireNative() { try { const binding = require('@registrystack/relay-client-openharmony-x64') const bindingPackageVersion = require('@registrystack/relay-client-openharmony-x64/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -508,8 +508,8 @@ function requireNative() { try { const binding = require('@registrystack/relay-client-openharmony-arm') const bindingPackageVersion = require('@registrystack/relay-client-openharmony-arm/package.json').version - if (bindingPackageVersion !== '0.32.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { - throw new Error(`Native binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0' && process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { + throw new Error(`Native binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } return binding } catch (e) { @@ -648,8 +648,8 @@ if (!nativeBinding || forceWasi) { if (!candidateFailed) { if (process.env.NAPI_RS_ENFORCE_VERSION_CHECK && process.env.NAPI_RS_ENFORCE_VERSION_CHECK !== '0') { const bindingPackageVersion = require('@registrystack/relay-client-wasm32-wasi/package.json').version - if (bindingPackageVersion !== '0.32.0') { - throw new Error(`WASI binding package version mismatch, expected 0.32.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) + if (bindingPackageVersion !== '0.33.0') { + throw new Error(`WASI binding package version mismatch, expected 0.33.0 but got ${bindingPackageVersion}. You can reinstall dependencies to fix this issue.`) } } wasiBinding = require('@registrystack/relay-client-wasm32-wasi') diff --git a/crates/registry-relay-client-node/npm/darwin-arm64/package.json b/crates/registry-relay-client-node/npm/darwin-arm64/package.json index 2ab3be2b79..faefa7f583 100644 --- a/crates/registry-relay-client-node/npm/darwin-arm64/package.json +++ b/crates/registry-relay-client-node/npm/darwin-arm64/package.json @@ -1,6 +1,6 @@ { "name": "@registrystack/relay-client-darwin-arm64", - "version": "0.32.0", + "version": "0.33.0", "cpu": [ "arm64" ], diff --git a/crates/registry-relay-client-node/npm/linux-arm64-gnu/package.json b/crates/registry-relay-client-node/npm/linux-arm64-gnu/package.json index bb45a4cd3b..418d21247b 100644 --- a/crates/registry-relay-client-node/npm/linux-arm64-gnu/package.json +++ b/crates/registry-relay-client-node/npm/linux-arm64-gnu/package.json @@ -1,6 +1,6 @@ { "name": "@registrystack/relay-client-linux-arm64-gnu", - "version": "0.32.0", + "version": "0.33.0", "cpu": [ "arm64" ], diff --git a/crates/registry-relay-client-node/npm/linux-x64-gnu/package.json b/crates/registry-relay-client-node/npm/linux-x64-gnu/package.json index cc2bff265e..a075da0ee5 100644 --- a/crates/registry-relay-client-node/npm/linux-x64-gnu/package.json +++ b/crates/registry-relay-client-node/npm/linux-x64-gnu/package.json @@ -1,6 +1,6 @@ { "name": "@registrystack/relay-client-linux-x64-gnu", - "version": "0.32.0", + "version": "0.33.0", "cpu": [ "x64" ], diff --git a/crates/registry-relay-client-node/package-lock.json b/crates/registry-relay-client-node/package-lock.json index ad06581d05..d269d370bf 100644 --- a/crates/registry-relay-client-node/package-lock.json +++ b/crates/registry-relay-client-node/package-lock.json @@ -1,12 +1,12 @@ { "name": "@registrystack/relay-client", - "version": "0.32.0", + "version": "0.33.0", "lockfileVersion": 3, "requires": true, "packages": { "": { "name": "@registrystack/relay-client", - "version": "0.32.0", + "version": "0.33.0", "license": "Apache-2.0", "devDependencies": { "@napi-rs/cli": "3.8.2", diff --git a/crates/registry-relay-client-node/package.json b/crates/registry-relay-client-node/package.json index 38c5e53d29..1152460065 100644 --- a/crates/registry-relay-client-node/package.json +++ b/crates/registry-relay-client-node/package.json @@ -1,6 +1,6 @@ { "name": "@registrystack/relay-client", - "version": "0.32.0", + "version": "0.33.0", "description": "Node.js binding for the Registry Relay V2 client, via napi-rs.", "license": "Apache-2.0", "publishConfig": { "access": "public", "provenance": true }, diff --git a/crates/registry-relay-client-py/Cargo.toml b/crates/registry-relay-client-py/Cargo.toml index dfa159211c..1a151d7baf 100644 --- a/crates/registry-relay-client-py/Cargo.toml +++ b/crates/registry-relay-client-py/Cargo.toml @@ -22,7 +22,7 @@ extension-module = ["pyo3/extension-module"] pyo3.workspace = true registry-platform-crypto.workspace = true registry-platform-httputil.workspace = true -relay-client-sdk = { package = "registry-relay-client", path = "../registry-relay-client", version = "0.32.0" } +relay-client-sdk = { package = "registry-relay-client", path = "../registry-relay-client", version = "0.33.0" } serde.workspace = true serde_json.workspace = true tokio.workspace = true diff --git a/crates/registry-relay-client-py/pyproject.toml b/crates/registry-relay-client-py/pyproject.toml index fde730ab4f..1bff30a2f4 100644 --- a/crates/registry-relay-client-py/pyproject.toml +++ b/crates/registry-relay-client-py/pyproject.toml @@ -4,7 +4,7 @@ build-backend = "maturin" [project] name = "registry-relay-client" -version = "0.32.0" +version = "0.33.0" description = "Python binding for the Registry Relay V2 client, via PyO3." readme = "README.md" license = { text = "Apache-2.0" } diff --git a/crates/registry-stack-client-node/native.js b/crates/registry-stack-client-node/native.js index 4f47fe8a3e..52a22b2064 100644 --- a/crates/registry-stack-client-node/native.js +++ b/crates/registry-stack-client-node/native.js @@ -1,6 +1,6 @@ 'use strict'; -const PACKAGE_VERSION = '0.32.0'; +const PACKAGE_VERSION = '0.33.0'; const PRODUCTS = new Set(['discovery', 'evidence', 'relay', 'breg', 'casework']); function target() { diff --git a/crates/registry-stack-client-node/npm/darwin-arm64/package.json b/crates/registry-stack-client-node/npm/darwin-arm64/package.json index bc6120b146..ef449b9cea 100644 --- a/crates/registry-stack-client-node/npm/darwin-arm64/package.json +++ b/crates/registry-stack-client-node/npm/darwin-arm64/package.json @@ -1,6 +1,6 @@ { "name": "@registrystack/client-darwin-arm64", - "version": "0.32.0", + "version": "0.33.0", "description": "Registry Stack unified native clients for macOS arm64.", "license": "Apache-2.0", "publishConfig": { "access": "public" }, diff --git a/crates/registry-stack-client-node/npm/linux-arm64-gnu/package.json b/crates/registry-stack-client-node/npm/linux-arm64-gnu/package.json index 7bd84b5a3a..41f0dbc63e 100644 --- a/crates/registry-stack-client-node/npm/linux-arm64-gnu/package.json +++ b/crates/registry-stack-client-node/npm/linux-arm64-gnu/package.json @@ -1,6 +1,6 @@ { "name": "@registrystack/client-linux-arm64-gnu", - "version": "0.32.0", + "version": "0.33.0", "description": "Registry Stack unified native clients for Linux arm64 glibc.", "license": "Apache-2.0", "publishConfig": { "access": "public" }, diff --git a/crates/registry-stack-client-node/npm/linux-x64-gnu/package.json b/crates/registry-stack-client-node/npm/linux-x64-gnu/package.json index c7e9455193..71b19cb76e 100644 --- a/crates/registry-stack-client-node/npm/linux-x64-gnu/package.json +++ b/crates/registry-stack-client-node/npm/linux-x64-gnu/package.json @@ -1,6 +1,6 @@ { "name": "@registrystack/client-linux-x64-gnu", - "version": "0.32.0", + "version": "0.33.0", "description": "Registry Stack unified native clients for Linux x64 glibc.", "license": "Apache-2.0", "publishConfig": { "access": "public" }, diff --git a/crates/registry-stack-client-node/package-lock.json b/crates/registry-stack-client-node/package-lock.json index 8a9b7e1021..f7f4c4bb80 100644 --- a/crates/registry-stack-client-node/package-lock.json +++ b/crates/registry-stack-client-node/package-lock.json @@ -1,12 +1,12 @@ { "name": "@registrystack/client", - "version": "0.32.0", + "version": "0.33.0", "lockfileVersion": 3, "requires": true, "packages": { "": { "name": "@registrystack/client", - "version": "0.32.0", + "version": "0.33.0", "license": "Apache-2.0", "devDependencies": { "@types/node": "22.20.1", diff --git a/crates/registry-stack-client-node/package.json b/crates/registry-stack-client-node/package.json index c8afe09842..fe905061d8 100644 --- a/crates/registry-stack-client-node/package.json +++ b/crates/registry-stack-client-node/package.json @@ -1,6 +1,6 @@ { "name": "@registrystack/client", - "version": "0.32.0", + "version": "0.33.0", "description": "Unified Node.js client for Registry Stack products.", "license": "Apache-2.0", "homepage": "https://docs.registrystack.org/reference/client-api/", diff --git a/crates/registry-stack-client-py/pyproject.toml b/crates/registry-stack-client-py/pyproject.toml index 07983852db..bd6dceda2b 100644 --- a/crates/registry-stack-client-py/pyproject.toml +++ b/crates/registry-stack-client-py/pyproject.toml @@ -1,6 +1,6 @@ [project] name = "registry-stack-client" -version = "0.32.0" +version = "0.33.0" description = "Unified Python client for Registry Stack products." readme = "README.md" license = { text = "Apache-2.0" } diff --git a/crates/registry-stack-client-py/python/registry_client/__init__.py b/crates/registry-stack-client-py/python/registry_client/__init__.py index d94ff2921e..7480ea2e1a 100644 --- a/crates/registry-stack-client-py/python/registry_client/__init__.py +++ b/crates/registry-stack-client-py/python/registry_client/__init__.py @@ -7,4 +7,4 @@ import registry_client.relay as relay __all__ = ["breg", "casework", "discovery", "evidence", "relay"] -__version__ = "0.32.0" +__version__ = "0.33.0" diff --git a/docs/site/src/content/docs/changelog.mdx b/docs/site/src/content/docs/changelog.mdx index 2a643e4ba0..f1f8cf1bc2 100644 --- a/docs/site/src/content/docs/changelog.mdx +++ b/docs/site/src/content/docs/changelog.mdx @@ -18,6 +18,75 @@ relevant product pages on this site rather than duplicating release notes. ## Unreleased +## v0.33.0 beta-45 + +- Registry Scheduling joins the release with published openings, exact-time + offerings, arrival windows, holds, and accountable appointments. Each + commitment requires a task grant bounded to the offering's service, + location, and action. The release publishes a Scheduling container image, + without a binary or installer asset. See the + [Registry Scheduling API](../reference/apis/registry-scheduling/). + +{/* Evidence: crates/registry-scheduling/src/service.rs; + crates/registry-scheduling/src/auth.rs; + release/scripts/release_candidate.py, _candidate_image_names() and _relay_v2_payload_inventory(). */} + +- BREAKING: Registry Casework replaces hosted decisions with source-neutral + review requests, tasks, kinds, results, and accountability. Base Registry + Engine (BReg) delegates governed change-request review to Casework through a + review authority binding. The Casework migration drops the experimental + hosted tables without carrying their data forward. See + [review BReg changes in Casework](../tutorials/review-breg-changes-in-casework/). + +{/* Evidence: crates/registry-casework/migrations/0015_unified_reviews.sql; + crates/registry-casework/src/review.rs; + crates/registry-breg/src/review_store.rs. */} + +- BREAKING: BReg entity `events` are now shared `hooks`, and deliveries carry a + signed hook envelope instead of the earlier bare body. Rewrite each entity + declaration, drain the existing outbox before upgrading, update receivers, + and regenerate project locks. BReg now requires PostgreSQL 17 or newer. + +{/* Evidence: crates/registry-breg/src/contract.rs, EntitySource; + crates/registry-platform-hooks/src/envelope.rs; + crates/registry-breg/src/postgres/schema.rs, verify_postgres_17_or_newer(). */} + +- BReg ships WebAssembly action handlers enabled by default, field encryption + for restricted fields, and durable resumable ingestion runs. Existing Rhai + and declarative action handlers keep working. See + [field encryption for restricted fields](../explanation/breg-field-encryption/) + and the [BReg client capabilities](../reference/breg-client-capabilities/). + +{/* Evidence: crates/registry-breg/Cargo.toml, features; + crates/registry-breg/src/field_encryption.rs; + crates/registry-breg/src/api/ingestion.rs. */} + +- Registry Render is available from source with offline CLI, HTTP service, and + Rust library modes for deterministic Typst PDF rendering. v0.33.0 does not + publish a Render release asset or container image. See the + [Registry Render overview](../start/registry-render/). + +{/* Evidence: crates/registry-render/src/cli.rs, Command; + crates/registry-render/src/lib.rs, render; + release/manifests/registry-stack-beta-45.yaml, artifacts. */} + +- Evidence tooling adds machine-readable reports, an offline-complete starter, + and self-checking local target generation. Object answer schemas must now + declare `properties` and `additionalProperties: false`. + +{/* Evidence: crates/registry-evidencectl/src/lib.rs, OutputFormat; + crates/registry-evidence-authoring/src/validate.rs; + products/breg/evidence/offline-starter/. */} + +- The BReg clients expose typed applied-request results and durable ingestion + runs. `bregctl explain` and `caseworkctl` machine-readable output now use + versioned, closed JSON report contracts. + +{/* Evidence: crates/registry-breg-client/src/lifecycle.rs; + crates/registry-breg-client/src/ingestion.rs; + products/breg/contracts/explain/; + products/casework/contracts/cli/. */} + ## v0.32.0 beta-44 - Exchanged access tokens carry `registry_assertion_issuer`, derived from the diff --git a/products/casework/CHANGELOG.md b/products/casework/CHANGELOG.md index 719ad9bf33..800c222af1 100644 --- a/products/casework/CHANGELOG.md +++ b/products/casework/CHANGELOG.md @@ -2,6 +2,8 @@ ## Unreleased +## v0.33.0 - 2026-09-22 + - BREAKING: replace hosted decisions with unified reviews. Remove `hosted.rs` and its routes: `POST /v1/hosted-items` and the paired `GET /v1/hosted-items/terminal`, `GET /v1/hosted-items/{itemId}`, diff --git a/products/evidence/generated/registry-evidence.openapi.json b/products/evidence/generated/registry-evidence.openapi.json index bd1b12d632..c83f24c80f 100644 --- a/products/evidence/generated/registry-evidence.openapi.json +++ b/products/evidence/generated/registry-evidence.openapi.json @@ -1804,7 +1804,7 @@ "info": { "description": "Minimum-disclosure signed assertion service, Version 1.", "title": "Registry Evidence API", - "version": "0.32.0" + "version": "0.33.0" }, "openapi": "3.1.0", "paths": { diff --git a/products/manifest/CHANGELOG.md b/products/manifest/CHANGELOG.md index 35e63cf817..93fbe6c60e 100644 --- a/products/manifest/CHANGELOG.md +++ b/products/manifest/CHANGELOG.md @@ -7,6 +7,10 @@ This project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.htm ## [Unreleased] +## [0.33.0] - 2026-09-22 + +- Registry Manifest has no user-visible changes in this release. + ## [0.32.0] - 2026-09-15 - Registry Manifest has no user-visible changes in this release. diff --git a/products/manifest/docs/release-notes.md b/products/manifest/docs/release-notes.md index 2c0ea58f49..6aa1810d05 100644 --- a/products/manifest/docs/release-notes.md +++ b/products/manifest/docs/release-notes.md @@ -2,6 +2,10 @@ ## Unreleased +## 0.33.0 + +- Registry Manifest has no user-visible changes in this release. + ## 0.32.0 - Registry Manifest has no user-visible changes in this release. diff --git a/products/manifest/fuzz/Cargo.lock b/products/manifest/fuzz/Cargo.lock index bde7d2fcf2..e3848913b1 100644 --- a/products/manifest/fuzz/Cargo.lock +++ b/products/manifest/fuzz/Cargo.lock @@ -188,7 +188,7 @@ checksum = "f8dcc9c7d52a811697d2151c701e0d08956f92b0e24136cf4cf27b57a6a0d9bf" [[package]] name = "registry-manifest-cli" -version = "0.32.0" +version = "0.33.0" dependencies = [ "registry-manifest-core", "serde", @@ -199,7 +199,7 @@ dependencies = [ [[package]] name = "registry-manifest-core" -version = "0.32.0" +version = "0.33.0" dependencies = [ "oxiri", "registry-platform-canonical-json", @@ -223,7 +223,7 @@ dependencies = [ [[package]] name = "registry-platform-canonical-json" -version = "0.32.0" +version = "0.33.0" dependencies = [ "ryu-js", "serde", diff --git a/products/platform/CHANGELOG.md b/products/platform/CHANGELOG.md index 85ad226f6a..07062c414d 100644 --- a/products/platform/CHANGELOG.md +++ b/products/platform/CHANGELOG.md @@ -2,11 +2,18 @@ ## Unreleased +## v0.33.0 - 2026-09-22 + - Read a token response that states an empty `scope` as granting no scope instead of refusing it as malformed. Keycloak states `"scope": ""` for a grant whose client scopes are all kept out of the token scope; a private-key-JWT provider that requested no scope now uses that credential, and one that requested scopes refuses it as narrowed. +- Add the shared hook declaration, signed delivery envelope, retained delivery + worker, and product apply seam used by BReg and Casework. +- Add the feature-gated Rhai and WebAssembly execution adapters used by BReg + action handlers. The WebAssembly feature remains non-default in the shared + platform crate and is enabled by BReg's default feature set. ## v0.32.0 - 2026-09-15 diff --git a/products/platform/fuzz/Cargo.lock b/products/platform/fuzz/Cargo.lock index c4b1e0bbab..00bca6c7d0 100644 --- a/products/platform/fuzz/Cargo.lock +++ b/products/platform/fuzz/Cargo.lock @@ -1514,7 +1514,7 @@ dependencies = [ [[package]] name = "registry-platform-authcommon" -version = "0.32.0" +version = "0.33.0" dependencies = [ "base64", "registry-platform-crypto", @@ -1529,7 +1529,7 @@ dependencies = [ [[package]] name = "registry-platform-canonical-json" -version = "0.32.0" +version = "0.33.0" dependencies = [ "ryu-js", "serde", @@ -1539,7 +1539,7 @@ dependencies = [ [[package]] name = "registry-platform-crypto" -version = "0.32.0" +version = "0.33.0" dependencies = [ "async-trait", "aws-lc-rs", @@ -1581,7 +1581,7 @@ dependencies = [ [[package]] name = "registry-platform-httputil" -version = "0.32.0" +version = "0.33.0" dependencies = [ "async-trait", "base64", @@ -1607,7 +1607,7 @@ dependencies = [ [[package]] name = "registry-platform-oidc" -version = "0.32.0" +version = "0.33.0" dependencies = [ "base64", "jsonwebtoken", @@ -1622,7 +1622,7 @@ dependencies = [ [[package]] name = "registry-platform-sdjwt" -version = "0.32.0" +version = "0.33.0" dependencies = [ "base64", "getrandom 0.4.3", @@ -1638,7 +1638,7 @@ dependencies = [ [[package]] name = "registry-platform-sqlite" -version = "0.32.0" +version = "0.33.0" dependencies = [ "rusqlite", "rustix", diff --git a/products/scheduling/CHANGELOG.md b/products/scheduling/CHANGELOG.md index 79f519af84..d073029e9e 100644 --- a/products/scheduling/CHANGELOG.md +++ b/products/scheduling/CHANGELOG.md @@ -2,10 +2,12 @@ ## Unreleased +## v0.33.0 - 2026-09-22 + - Publish the scheduling MVP: published openings, exact-time offerings over interchangeable resource pools, published arrival windows with channel subquotas, holds, and accountable appointments, over PostgreSQL. The - contract is unreleased and carries no frozen compatibility promise. + contract is pre-1.0 and may change in a later minor release. - Keep the capacity ledger inside the runtime's own transaction. A hold or appointment is created, moved, or released only inside that transaction, and no other product may write the ledger; eligibility stays with the source diff --git a/release/manifests/registry-stack-beta-45.yaml b/release/manifests/registry-stack-beta-45.yaml new file mode 100644 index 0000000000..5df7195885 --- /dev/null +++ b/release/manifests/registry-stack-beta-45.yaml @@ -0,0 +1,33 @@ +stack: + release: beta-45 + version: 0.33.0 + source_repo: registrystack/registry-stack + source_tag: v0.33.0 + +artifacts: + registry-manifest: 0.33.0 + relay: 0.33.0 + relayctl: 0.33.0 + evidence: 0.33.0 + evidencectl: 0.33.0 + evidence-oid4vci: 0.33.0 + evidencectl-installer: 0.33.0 + relay-installer: 0.33.0 + registry-docs: 0.33.0 + discovery: 0.33.0 + breg: 0.33.0 + bregctl: 0.33.0 + breg-installer: 0.33.0 + casework: 0.33.0 + caseworkctl: 0.33.0 + casework-installer: 0.33.0 + scheduling: 0.33.0 + registry-client-node: 0.33.0 + registry-client-python: 0.33.0 + +identifier_catalog: + path: products/identifiers/generated/catalog.v1.json + sha256: 800de6c787568677a26e2ccf4b0bc0fb5aaada4ac51e044a1b956b27fa3a1748 + entry_count: 160 + +external: {} diff --git a/release/notes/v0.33.0.md b/release/notes/v0.33.0.md new file mode 100644 index 0000000000..1e5966b9db --- /dev/null +++ b/release/notes/v0.33.0.md @@ -0,0 +1,102 @@ +# Registry Stack v0.33.0 + +Registry Stack v0.33.0 is the beta-45 release. It introduces Registry +Scheduling, moves governed review ownership into Registry Casework, and adds +durable ingestion, field encryption, and WebAssembly action handlers to Base +Registry Engine. + +## Compatibility and migration + +- Base Registry Engine now requires PostgreSQL 17 or newer. Upgrade the + database before deploying the v0.33.0 runtime. +- BREAKING: BReg entity `events` are now `hooks`. Rename each member, add + `phase: after`, replace `webhook: {destinationId: ...}` with + `handler: {kind: url, destinationId: ...}`, and regenerate project locks. + Drain the existing outbox before upgrading: deliveries now carry the shared + hook envelope, and `X-Registry-Signature` covers those exact envelope bytes. + Update receivers before resuming delivery. +- BREAKING: BReg change requests delegate review to an external authority. + Replace authored `review.stages` with `review.authority` and + `review.policyId`, rename `application` to `onApproved`, remove the retired + `approve_request`, `reject_request`, and `request_revision` grants, and add + the matching runtime `reviewAuthorities` binding. `caseworkctl source add` + can write the paired BReg and Casework configuration for a new connection. +- BREAKING: Casework replaces experimental hosted decisions and every + `/v1/hosted-*` route with source-neutral review requests, tasks, kinds, + results, and accountability routes. Migration `0015_unified_reviews.sql` + drops the `casework_hosted_*` tables and does not carry their data forward. + Finish or recreate any retained hosted work before applying the migration, + then update callers to the review API. +- Casework accepts only RFC 9068 access tokens with `typ: at+jwt`. Update an + issuer that emits another token type before upgrading. +- Evidence authoring now requires object answer schemas to declare + `properties` and `additionalProperties: false`. Close older answer schemas + before running `evidencectl check`, `test`, or `build` with v0.33.0. +- Registry Scheduling joins the release as a container image. This release + does not publish a Scheduling binary or installer asset. + +## Registry Scheduling + +- Registry Scheduling publishes exact-time offerings over resource pools and + arrival windows with channel subquotas. It supports short holds, confirmed + appointments, rescheduling, cancellation, availability, and history over a + PostgreSQL capacity ledger. +- Every commitment is authorized by a task grant that exactly bounds service, + location, and action. Casework can approve those bounds, and the stock token + exchange carries them to Scheduling without sharing either product's state. +- `schedulingctl init`, `check`, `test`, `explain`, and `package` provide the + authoring lifecycle. The runtime also emits reminder and appointment observer + intents from its outbox, and `schedulingctl intents` lists undelivered work. + +## Review ownership and Casework + +- Casework now owns source-neutral review policy, reviewer tasks, decisions, + structured results, clocks, and retained accountability. BReg submits a + review request, reconciles its terminal result, and retains only the bounded + result needed to decide application. +- Review kinds can declare a closed result schema and require a result for an + outcome. A producer can narrow allowed result fields per request, while + Casework keeps reviewer identity and private reasons out of producer-visible + results. +- The Rust, Node.js, and Python Casework clients expose the unified review + routes. Casework reads remain available without actions while a moved source + binding awaits reconciliation. + +## Base Registry Engine + +- Action handlers can be WebAssembly modules under the Version 1 handler ABI. + The release binaries enable the bounded Pulley-backed executor by default; + Rhai and declarative handlers remain compatible. A custom build without the + `wasm` feature refuses a WASM-bearing package during load and rederivation. + WASM change-request planners and Version 2 handler ABIs remain refused. +- Restricted string, text, date, decimal, and structured fields can use + envelope encryption, with optional blind indexes for governed lookup. A + reviewed migration must choose whether to erase and rebaseline history or + retain pre-encryption plaintext history as an explicit accepted risk. +- Durable ingestion runs checkpoint a caller-driven bulk import one bounded + chunk at a time. The Rust, Node.js, and Python clients can resume, inspect, + cancel, and recover runs without server-side source-file storage or hidden + retries. +- The maintained BReg clients expose typed applied-request result references + and request history, and the `bregctl explain` reports now carry versioned, + closed JSON contracts for routes, model provenance, actions, change requests, + queries, access, and lifecycle enforcement. + +## Render, Evidence, and tooling + +- Registry Render is available from source as a deterministic Typst PDF + renderer with offline CLI, service, and Rust library modes. It seals template + bundles, validates record data, isolates rendering in bounded workers, and + appends a value-free audit event before returning a service render. It is not + a v0.33.0 release asset or container image. +- `evidencectl` adds machine-readable reports across access, key, JWKS, + tooling, audit, target, and source-suggestion commands. Its offline starter + passes authoring checks and fixtures without a live source, and local target + generation now binds authority to the project's authored access policies. +- `caseworkctl` publishes versioned, closed JSON report schemas for its + machine-readable command output. BReg and Casework explanation output now + identifies authored sources, engine lifecycle layers, and review contracts + more precisely. + +[Changes since v0.32.0](https://github.com/registrystack/registry-stack/compare/v0.32.0...v0.33.0). +This remains a pre-1.0 Beta release for self-hosted institutional pilots. From 6a460c2cf66bc9d286cbe4a5454571c392488c05 Mon Sep 17 00:00:00 2001 From: Jeremi Joslin Date: Tue, 22 Sep 2026 16:38:15 +0700 Subject: [PATCH 02/11] chore(release): admit bootstrapped Scheduling candidate package Signed-off-by: Jeremi Joslin --- release/scripts/cleanup-release-candidates.py | 1 + release/scripts/test_cleanup_release_candidates.py | 12 +++--------- 2 files changed, 4 insertions(+), 9 deletions(-) diff --git a/release/scripts/cleanup-release-candidates.py b/release/scripts/cleanup-release-candidates.py index 19f3e0e2e9..cfce6cac98 100755 --- a/release/scripts/cleanup-release-candidates.py +++ b/release/scripts/cleanup-release-candidates.py @@ -27,6 +27,7 @@ "evidence-candidate", "mint-candidate", "relay-candidate", + "scheduling-candidate", ) PUBLIC_PACKAGES = ( # Retired public names stay denylisted so cleanup can never delete history. diff --git a/release/scripts/test_cleanup_release_candidates.py b/release/scripts/test_cleanup_release_candidates.py index 4f1bb4a959..f81b703895 100644 --- a/release/scripts/test_cleanup_release_candidates.py +++ b/release/scripts/test_cleanup_release_candidates.py @@ -320,16 +320,10 @@ def test_casework_candidate_is_allowlisted_after_package_bootstrap(self) -> None self.assertIn("casework-candidate", self.module.CANDIDATE_PACKAGES) self.module.assert_candidate_package("casework-candidate") - def test_scheduling_remains_publicly_denylisted_before_candidate_onboarding( - self, - ) -> None: + def test_scheduling_candidate_is_allowlisted_after_package_bootstrap(self) -> None: self.assertIn("scheduling", self.module.PUBLIC_PACKAGES) - self.assertNotIn("scheduling-candidate", self.module.CANDIDATE_PACKAGES) - with self.assertRaisesRegex( - self.module.CleanupError, - "package is not in the exact candidate allowlist", - ): - self.module.assert_candidate_package("scheduling-candidate") + self.assertIn("scheduling-candidate", self.module.CANDIDATE_PACKAGES) + self.module.assert_candidate_package("scheduling-candidate") def test_malformed_or_future_timestamp_fails_without_deleting(self) -> None: for timestamp in ("not-a-date", "2026-07-25T12:00:01Z"): From 5f4f99b23c795e6316d6b49359fa89f780fae0bd Mon Sep 17 00:00:00 2001 From: Jeremi Joslin Date: Tue, 22 Sep 2026 16:43:03 +0700 Subject: [PATCH 03/11] fix v0.33 release prerequisites Signed-off-by: Jeremi Joslin --- crates/registry-bregctl/src/lib.rs | 6 +- crates/registry-bregctl/tests/cli.rs | 4 +- deny.toml | 16 +++-- .../explain/ActionsExplanation.schema.json | 2 +- products/breg/wasm-action-handlers.md | 66 ++++++++++--------- release/scripts/cleanup-release-candidates.py | 1 + .../test_cleanup_release_candidates.py | 12 +--- 7 files changed, 56 insertions(+), 51 deletions(-) diff --git a/crates/registry-bregctl/src/lib.rs b/crates/registry-bregctl/src/lib.rs index 113539fb3b..ae88be65b2 100644 --- a/crates/registry-bregctl/src/lib.rs +++ b/crates/registry-bregctl/src/lib.rs @@ -8224,14 +8224,14 @@ fn explain_actions(compiled: &CompiledRegistry) -> serde_json::Result { json!({ "moduleSha256": handler.module_sha256, // The preflight compatibility contract for a WASM - // handler: which servers run it, and the two typed - // refusal shapes everything else produces. + // handler: which servers run it and where package + // loading is refused before activation. "compatibility": { "minimumServer": "registry-breg built with the wasm feature", "serversBeforeWasmSupport": "refuse the package at load with a typed handler error and no state change", "serversBuiltWithoutTheFeature": - "load the package and fail each invocation with a typed handler failure", + "refuse the package during load because handler rederivation requires WASM support", "moduleSha256": handler.module_sha256, }, }), diff --git a/crates/registry-bregctl/tests/cli.rs b/crates/registry-bregctl/tests/cli.rs index dbf8421645..673edb14fb 100644 --- a/crates/registry-bregctl/tests/cli.rs +++ b/crates/registry-bregctl/tests/cli.rs @@ -3201,7 +3201,7 @@ accessProfiles: } /// A WASM handler summary carries its server-compatibility contract: the -/// minimum server that runs it, and the two refusal shapes older or +/// minimum server that runs it, and the load-time refusals older or /// feature-off servers produce. Rhai handlers carry no such member; their /// server contract is the baseline. #[test] @@ -3236,7 +3236,7 @@ fn explain_actions_reports_wasm_handler_server_compatibility() { ); assert_eq!( compatibility["serversBuiltWithoutTheFeature"], - "load the package and fail each invocation with a typed handler failure" + "refuse the package during load because handler rederivation requires WASM support" ); assert_eq!( compatibility["moduleSha256"], handler["moduleSha256"], diff --git a/deny.toml b/deny.toml index 5366243716..2b96d9c0e3 100644 --- a/deny.toml +++ b/deny.toml @@ -14,14 +14,18 @@ ignore = [ # RUSTSEC-2026-0249: `smartstring` 1.0.1 is unmaintained and has no patched # release. Its safe `From` conversion has reported undefined # behavior (bodil/smartstring#49), also reproduced through Rhai's - # `ImmutableString` (rhaiscript/rhai#816). Rhai 1.25.1 pulls it into + # `ImmutableString` (rhaiscript/rhai#816). Rhai 1.26.1 pulls it into # Evidence, its authoring tools, and the shared language server exposed # through `relayctl`, where the affected owned-string conversion is - # reachable. This ignore records accepted residual risk, not a fix. - # Reviewed 2026-08-13. Review when Rhai replaces `smartstring`, if a - # maintained patched release appears, after changes to Evidence's Rhai - # string flow, before accepting untrusted scripts, or if upstream publishes - # further security findings. + # reachable. Evidence accepts governed, hash-covered scripts only and + # bounds adapter strings, arrays, and maps before converting them for Rhai; + # these controls limit exposure but do not remove the reported unsoundness. + # This ignore records accepted residual risk, not a fix. Reviewed 2026-09-22 + # after selector-aware extraction added another bounded conversion path. + # Review by 2026-10-06, when Rhai replaces `smartstring`, if a maintained + # patched release appears, after further changes to Evidence's Rhai string + # flow, before accepting untrusted scripts, or if upstream publishes further + # security findings. "RUSTSEC-2026-0249", # The following advisories all arrive through the Typst rendering tree # (`typst`/`typst-pdf`/`krilla`/`typst-library`), which diff --git a/products/breg/contracts/explain/ActionsExplanation.schema.json b/products/breg/contracts/explain/ActionsExplanation.schema.json index 31bfc6c5dc..fff278ab7f 100644 --- a/products/breg/contracts/explain/ActionsExplanation.schema.json +++ b/products/breg/contracts/explain/ActionsExplanation.schema.json @@ -337,7 +337,7 @@ "const": "refuse the package at load with a typed handler error and no state change" }, "serversBuiltWithoutTheFeature": { - "const": "load the package and fail each invocation with a typed handler failure" + "const": "refuse the package during load because handler rederivation requires WASM support" }, "moduleSha256": { "type": "string" } } diff --git a/products/breg/wasm-action-handlers.md b/products/breg/wasm-action-handlers.md index 32f1af4741..a64aa903ca 100644 --- a/products/breg/wasm-action-handlers.md +++ b/products/breg/wasm-action-handlers.md @@ -9,8 +9,10 @@ configuration, and the upgrade and rollback paths. Authoring help lives in - An authored handler kind (`kind: wasm` with a project-local `module:` path beside `script:`), a backend-tagged compiled representation, an optional - operator configuration section, and a cargo feature (`wasm`, default off) - gating execution. Default builds contain no wasmtime dependency at all. + operator configuration section, and a cargo feature (`wasm`) gating + admission and execution. Maintained `registry-breg` and `registry-bregctl` + builds enable the feature by default. A custom `--no-default-features` build + omits WASM support and the Wasmtime dependency. - A WASM handler is v1-only, input-only, and resolver-free. WASM change-request planners and v2 handlers are refused typed at admission. - The execution backend is Pulley by default (no runtime code generation) with @@ -27,32 +29,34 @@ configuration, and the upgrade and rollback paths. Authoring help lives in |---|---|---|---| | Existing Rhai or declarative package | Loads and runs (the baseline) | Loads and runs | Loads and runs | | Newly authored Rhai or declarative package | Loads and runs | Loads and runs | Loads and runs | -| Newly authored wasm-handler package | Refused typed at package load, no state change | Loads; each invocation fails typed | Supported end to end | +| Newly authored wasm-handler package | Refused typed at package load, no state change | Refused during package rederivation; package does not load | Supported end to end | -Every cell is a tested behavior, not an expectation: pre-change servers refuse -a wasm-handler package at `load` (unknown handler kind, and the unknown handler -members under it), leaving the managed catalog empty, no audit rows, and no -partial state; feature-off servers load the package and fail each invocation -with a typed `action.handler_failed` and an attempt audit row; both refusal -shapes are covered by wire tests and database journeys. +Pre-change servers refuse a wasm-handler package at `load` because they do not +recognize the handler kind. A current build without the `wasm` feature also +refuses the whole package at load: integrity inspection rederives the package, +the compiler reports `action.handler.wasm_build_unsupported`, and rederivation +fails. Neither path activates the package, so no action can be invoked and no +attempt audit row is written. The no-feature compiler suite pins the diagnostic; +the package integrity suite pins rederivation as a load prerequisite. `bregctl explain actions` surfaces this contract per handler: a WASM handler summary carries a `compatibility` member naming the minimum server, the -load-time refusal on older servers, the per-invocation failure on feature-off -servers, and the module hash it describes. Check it before publishing a +load-time refusal on older and feature-off servers, and the module hash it +describes. Check it before publishing a wasm-handler package to a fleet you do not fully control. ## Enabling the feature -Build `breg` with `--features wasm`. The feature is opt-in until the release -review decides otherwise; a default build's dependency tree contains no -wasmtime. What it gates: authoring and admission (script/module pairing, -module budgets, structural validation of module bytes through the same -executor the runtime uses), execution (dispatch routes WASM handlers to the -WASM runtime before the Rhai path), and the feature-gated PostgreSQL journey -suite. The `breg-wasm` CI lane enables the feature and runs the executor suite -and outcome-parity corpus under both backends, breg admission, and the -PostgreSQL journeys against the pinned PostGIS image. +Default builds of `registry-breg` and `registry-bregctl` already include the +`wasm` feature. A custom feature selection must include `--features wasm` to +admit and run wasm-handler packages. The feature gates authoring and admission +(script/module pairing, module budgets, structural validation of module bytes +through the same executor the runtime uses), execution (dispatch routes WASM +handlers to the WASM runtime before the Rhai path), and the feature-gated +PostgreSQL journey suite. The `breg-wasm` CI lane runs the executor suite and +outcome-parity corpus under both backends, breg admission, the explicit +no-default-features refusal suite, and the PostgreSQL journeys against the +pinned PostGIS image. ## Operator configuration @@ -109,13 +113,14 @@ complementing admission-time enforcement. 1. Existing Rhai and declarative packages need no change, no re-publication, and no migration. -2. Rebuild `breg` with `--features wasm` and redeploy; existing packages load - unchanged. +2. Use the maintained default build, or include `--features wasm` in a custom + feature selection, and redeploy; existing packages load unchanged. 3. Add the `wasmExecution` section only if non-default budgets or the native backend are needed; defaults apply otherwise. 4. Author wasm-handler packages with the SDK; record the minimum server - requirement (the `compatibility` member states it) and expect visible typed - refusals on older or feature-off servers, with an audit row per attempt. + requirement (the `compatibility` member states it). Older and feature-off + servers refuse the package during load, before an invocation or attempt + audit can exist. 5. Calibrate budgets on the deployment's own architecture. Fuel is not a cross-host invariant, and worst single calls can exceed the budgeted p99 on both backends. @@ -129,12 +134,13 @@ complementing admission-time enforcement. procedures; plugin execution and failed activation introduce no schema mutation and no late guest effects. 2. Remove the `wasmExecution` section; the install clears at shutdown. -3. Rebuild without the feature and redeploy; a default build contains no - wasmtime. -4. Loaded wasm-handler packages on a feature-off server fail typed at each - invocation (HTTP 500 `action.handler_failed`, static detail, an attempt - audit row, all surfaces unchanged); authoring also refuses to compile new - ones on that build. Plan for visible failures, not quiet degradation. +3. Before deploying a custom build without the feature, deactivate or replace + every wasm-handler package. Such a build cannot rederive and load those + packages. Build with `--no-default-features` and the other required features; + the resulting dependency tree omits Wasmtime. +4. Verify package loading before serving traffic. A feature-off build refuses + wasm-handler packages during rederivation and refuses authoring them with + `action.handler.wasm_build_unsupported`. ## Operational notes diff --git a/release/scripts/cleanup-release-candidates.py b/release/scripts/cleanup-release-candidates.py index 19f3e0e2e9..cfce6cac98 100755 --- a/release/scripts/cleanup-release-candidates.py +++ b/release/scripts/cleanup-release-candidates.py @@ -27,6 +27,7 @@ "evidence-candidate", "mint-candidate", "relay-candidate", + "scheduling-candidate", ) PUBLIC_PACKAGES = ( # Retired public names stay denylisted so cleanup can never delete history. diff --git a/release/scripts/test_cleanup_release_candidates.py b/release/scripts/test_cleanup_release_candidates.py index 4f1bb4a959..f81b703895 100644 --- a/release/scripts/test_cleanup_release_candidates.py +++ b/release/scripts/test_cleanup_release_candidates.py @@ -320,16 +320,10 @@ def test_casework_candidate_is_allowlisted_after_package_bootstrap(self) -> None self.assertIn("casework-candidate", self.module.CANDIDATE_PACKAGES) self.module.assert_candidate_package("casework-candidate") - def test_scheduling_remains_publicly_denylisted_before_candidate_onboarding( - self, - ) -> None: + def test_scheduling_candidate_is_allowlisted_after_package_bootstrap(self) -> None: self.assertIn("scheduling", self.module.PUBLIC_PACKAGES) - self.assertNotIn("scheduling-candidate", self.module.CANDIDATE_PACKAGES) - with self.assertRaisesRegex( - self.module.CleanupError, - "package is not in the exact candidate allowlist", - ): - self.module.assert_candidate_package("scheduling-candidate") + self.assertIn("scheduling-candidate", self.module.CANDIDATE_PACKAGES) + self.module.assert_candidate_package("scheduling-candidate") def test_malformed_or_future_timestamp_fails_without_deleting(self) -> None: for timestamp in ("not-a-date", "2026-07-25T12:00:01Z"): From 40518b4f42c5bb793d3a3056e70e41a0c580d6de Mon Sep 17 00:00:00 2001 From: Jeremi Joslin Date: Tue, 22 Sep 2026 16:47:10 +0700 Subject: [PATCH 04/11] fix(release): validate the WASM SDK lock Signed-off-by: Jeremi Joslin --- products/breg/wasm-handler-sdk/Cargo.lock | 52 ++++++++++++++++++- release/scripts/registry-release | 1 + .../scripts/test_registry_release_plans.py | 22 ++++++++ 3 files changed, 74 insertions(+), 1 deletion(-) diff --git a/products/breg/wasm-handler-sdk/Cargo.lock b/products/breg/wasm-handler-sdk/Cargo.lock index 034a41b045..795f099229 100644 --- a/products/breg/wasm-handler-sdk/Cargo.lock +++ b/products/breg/wasm-handler-sdk/Cargo.lock @@ -94,12 +94,28 @@ version = "1.5.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "f2032f911046de80f0a198e0901378627c33f59ea0ac00e363d481118bd70a53" +[[package]] +name = "aws-lc-fips-sys" +version = "0.14.2" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "03367707e92796b190a4207d4d39b0a4271d574503d2969c2b0cfbf5c87658ee" +dependencies = [ + "bindgen 0.72.1", + "cc", + "cmake", + "dunce", + "fs_extra", + "pkg-config", + "regex", +] + [[package]] name = "aws-lc-rs" version = "1.18.1" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "b281d307588d634de920874890732659e2e7672f72b5e10e81badc1a8a83621e" dependencies = [ + "aws-lc-fips-sys", "aws-lc-sys", "untrusted 0.7.1", "zeroize", @@ -165,6 +181,26 @@ dependencies = [ "which", ] +[[package]] +name = "bindgen" +version = "0.72.1" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "993776b509cfb49c750f11b8f07a46fa23e0a1386ffc01fb1e7d343efc387895" +dependencies = [ + "bitflags", + "cexpr", + "clang-sys", + "itertools 0.10.5", + "log", + "prettyplease", + "proc-macro2", + "quote", + "regex", + "rustc-hash 2.1.3", + "shlex 1.3.0", + "syn 2.0.119", +] + [[package]] name = "bit-set" version = "0.5.3" @@ -2222,7 +2258,7 @@ version = "6.2.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "42a66643c4aa9c929b68b2c9e30d6c4d955bfd1e87e255ce6c5d0c026082436c" dependencies = [ - "bindgen", + "bindgen 0.66.1", "cc", "fs_extra", "glob", @@ -2727,6 +2763,7 @@ dependencies = [ "registry-evidence-verifier", "registry-manifest-core", "registry-platform-canonical-json", + "registry-platform-hooks", "registry-platform-script", "rhai", "serde", @@ -2847,6 +2884,19 @@ dependencies = [ "zeroize", ] +[[package]] +name = "registry-platform-hooks" +version = "0.32.0" +dependencies = [ + "registry-platform-canonical-json", + "serde", + "serde_json", + "serde_path_to_error", + "thiserror 2.0.20", + "time", + "uuid", +] + [[package]] name = "registry-platform-httpsec" version = "0.32.0" diff --git a/release/scripts/registry-release b/release/scripts/registry-release index 5603de328c..1e7c5d1f43 100755 --- a/release/scripts/registry-release +++ b/release/scripts/registry-release @@ -136,6 +136,7 @@ PYTHON_CLIENT_RELEASE_SURFACES = ( ), ) FUZZ_LOCK_RELEASE_SURFACE_PATHS = ( + "products/breg/wasm-handler-sdk/Cargo.lock", "products/manifest/fuzz/Cargo.lock", "products/platform/fuzz/Cargo.lock", ) diff --git a/release/scripts/test_registry_release_plans.py b/release/scripts/test_registry_release_plans.py index c2810db771..be47db4f8a 100644 --- a/release/scripts/test_registry_release_plans.py +++ b/release/scripts/test_registry_release_plans.py @@ -533,6 +533,7 @@ def _write_surfaces(self) -> None: '__version__ = "1.1.0"\n', ) for relative in ( + "products/breg/wasm-handler-sdk/Cargo.lock", "products/manifest/fuzz/Cargo.lock", "products/platform/fuzz/Cargo.lock", ): @@ -735,6 +736,7 @@ def test_prepare_emits_stable_json_plan_without_mutating_repo(self) -> None: "crates/registry-casework-client-node/package.json", "crates/registry-casework-client-node/index.js", "crates/registry-relay-client-py/pyproject.toml", + "products/breg/wasm-handler-sdk/Cargo.lock", "products/manifest/fuzz/Cargo.lock", "products/platform/fuzz/Cargo.lock", "docs/site/src/data/archive-lock.yaml", @@ -808,6 +810,26 @@ def test_prepare_rejects_stale_client_loader_and_excluded_fuzz_lock(self) -> Non stale_lock.stderr, ) + def test_prepare_rejects_stale_wasm_handler_sdk_lock(self) -> None: + sdk_lock = self.repo.root / "products/breg/wasm-handler-sdk/Cargo.lock" + write( + sdk_lock, + '''version = 4 + +[[package]] +name = "registry-core" +version = "1.0.0" +''', + ) + + result = self.prepare() + + self.assertEqual(1, result.returncode) + self.assertIn( + "products/breg/wasm-handler-sdk/Cargo.lock path packages must use version 1.1.0", + result.stderr, + ) + def test_prepare_rejects_stale_loader_diagnostics_with_current_guards(self) -> None: for client in ("discovery", "evidence", "relay", "breg", "casework"): with self.subTest(client=client): From 6e9c405e96f663ca0ac91be36db5222cb9c39b0f Mon Sep 17 00:00:00 2001 From: Jeremi Joslin Date: Tue, 22 Sep 2026 16:49:09 +0700 Subject: [PATCH 05/11] chore(release): align the excluded WASM SDK lock with v0.33.0 Signed-off-by: Jeremi Joslin --- products/breg/wasm-handler-sdk/Cargo.lock | 24 +++++++++++------------ 1 file changed, 12 insertions(+), 12 deletions(-) diff --git a/products/breg/wasm-handler-sdk/Cargo.lock b/products/breg/wasm-handler-sdk/Cargo.lock index 795f099229..316cdc180f 100644 --- a/products/breg/wasm-handler-sdk/Cargo.lock +++ b/products/breg/wasm-handler-sdk/Cargo.lock @@ -2754,7 +2754,7 @@ checksum = "d6f6ff9a378485b298a5286656da665ba74413d36db0979633275d2e708145d4" [[package]] name = "registry-breg" -version = "0.32.0" +version = "0.33.0" dependencies = [ "chrono", "jsonschema", @@ -2787,7 +2787,7 @@ dependencies = [ [[package]] name = "registry-evidence-client" -version = "0.32.0" +version = "0.33.0" dependencies = [ "base64", "chrono", @@ -2807,7 +2807,7 @@ dependencies = [ [[package]] name = "registry-evidence-verifier" -version = "0.32.0" +version = "0.33.0" dependencies = [ "base64", "chrono", @@ -2825,7 +2825,7 @@ dependencies = [ [[package]] name = "registry-manifest-core" -version = "0.32.0" +version = "0.33.0" dependencies = [ "oxiri", "registry-platform-canonical-json", @@ -2838,7 +2838,7 @@ dependencies = [ [[package]] name = "registry-platform-authcommon" -version = "0.32.0" +version = "0.33.0" dependencies = [ "base64", "registry-platform-crypto", @@ -2853,7 +2853,7 @@ dependencies = [ [[package]] name = "registry-platform-canonical-json" -version = "0.32.0" +version = "0.33.0" dependencies = [ "ryu-js", "serde", @@ -2863,7 +2863,7 @@ dependencies = [ [[package]] name = "registry-platform-crypto" -version = "0.32.0" +version = "0.33.0" dependencies = [ "async-trait", "aws-lc-rs", @@ -2886,7 +2886,7 @@ dependencies = [ [[package]] name = "registry-platform-hooks" -version = "0.32.0" +version = "0.33.0" dependencies = [ "registry-platform-canonical-json", "serde", @@ -2899,7 +2899,7 @@ dependencies = [ [[package]] name = "registry-platform-httpsec" -version = "0.32.0" +version = "0.33.0" dependencies = [ "http", "serde", @@ -2909,7 +2909,7 @@ dependencies = [ [[package]] name = "registry-platform-httputil" -version = "0.32.0" +version = "0.33.0" dependencies = [ "async-trait", "base64", @@ -2935,7 +2935,7 @@ dependencies = [ [[package]] name = "registry-platform-script" -version = "0.32.0" +version = "0.33.0" dependencies = [ "rhai", "serde", @@ -2945,7 +2945,7 @@ dependencies = [ [[package]] name = "registry-platform-sdjwt" -version = "0.32.0" +version = "0.33.0" dependencies = [ "base64", "getrandom 0.4.3", From abff737fabf77b961c662c009fab12d477a5808d Mon Sep 17 00:00:00 2001 From: Jeremi Joslin Date: Tue, 22 Sep 2026 17:02:41 +0700 Subject: [PATCH 06/11] test(release): preserve Scheduling onboarding refusal coverage Signed-off-by: Jeremi Joslin --- release/scripts/test_release_candidate.py | 15 ++++++++++++++- 1 file changed, 14 insertions(+), 1 deletion(-) diff --git a/release/scripts/test_release_candidate.py b/release/scripts/test_release_candidate.py index 82d0c00547..9404bfa312 100644 --- a/release/scripts/test_release_candidate.py +++ b/release/scripts/test_release_candidate.py @@ -942,7 +942,7 @@ def test_image_onboarding_after_0_30_0_requires_reviewed_casework_baseline(self) self.module.check_image_onboarding(root, "0.31.0"), ) - def test_v0_33_scheduling_onboarding_stays_closed_until_external_setup(self) -> None: + def test_v0_33_scheduling_onboarding_requires_baseline_and_cleanup_entry(self) -> None: root = self.onboarding_repository() shutil.copy2( ROOT / "release/docker/Dockerfile.scheduling", @@ -953,6 +953,19 @@ def test_v0_33_scheduling_onboarding_stays_closed_until_external_setup(self) -> "scheduling advisory baseline is missing", ): self.module.check_image_onboarding(root, "0.33.0") + self.assertEqual( + self.module._candidate_image_names("0.33.0"), + self.module.check_image_onboarding( + root, "0.33.0", allow_missing_baseline=True + ), + ) + cleanup = root / "release/scripts/cleanup-release-candidates.py" + cleanup.write_text( + cleanup.read_text(encoding="utf-8").replace( + ' "scheduling-candidate",\n', "" + ), + encoding="utf-8", + ) with self.assertRaisesRegex( self.module.CandidateError, "CANDIDATE_PACKAGES must contain scheduling-candidate", From aa44c98ed526736b35cfef6baf816a7a165d0571 Mon Sep 17 00:00:00 2001 From: Jeremi Joslin Date: Tue, 22 Sep 2026 17:02:19 +0700 Subject: [PATCH 07/11] fix(release): install FIPS docs build tools Signed-off-by: Jeremi Joslin --- release/scripts/prepare-release-docs-container.sh | 5 ++++- release/scripts/test_prepare_release_docs.py | 13 +++++++++++++ 2 files changed, 17 insertions(+), 1 deletion(-) diff --git a/release/scripts/prepare-release-docs-container.sh b/release/scripts/prepare-release-docs-container.sh index d922eb442b..fa31315e6d 100644 --- a/release/scripts/prepare-release-docs-container.sh +++ b/release/scripts/prepare-release-docs-container.sh @@ -3,8 +3,11 @@ set -euo pipefail cp -R /input/. /workspace apt-get update -qq +# The CLI reference collector links the workspace FIPS cryptography backend. +# aws-lc-fips-sys requires CMake, Go, and Perl when it builds that backend. apt-get install -y -qq ca-certificates curl git python3 python3-yaml xz-utils \ - build-essential pkg-config libssl-dev libclang-dev protobuf-compiler + build-essential cmake golang-go perl pkg-config libssl-dev libclang-dev \ + protobuf-compiler curl -fsSL https://sh.rustup.rs -o /tmp/rustup-init.sh sh /tmp/rustup-init.sh -y --profile minimal --default-toolchain none export PATH="/root/.cargo/bin:${PATH}" diff --git a/release/scripts/test_prepare_release_docs.py b/release/scripts/test_prepare_release_docs.py index e03a929694..8f88ad93d4 100644 --- a/release/scripts/test_prepare_release_docs.py +++ b/release/scripts/test_prepare_release_docs.py @@ -4,6 +4,7 @@ import io from contextlib import redirect_stdout import json +import shlex import subprocess import tempfile from pathlib import Path @@ -16,6 +17,7 @@ prep = importlib.util.module_from_spec(SPEC) SPEC.loader.exec_module(prep) REAL_RUN = subprocess.run +CONTAINER_SCRIPT = Path(__file__).with_name("prepare-release-docs-container.sh") class PreparationTest(TestCase): @@ -80,6 +82,17 @@ def test_preview_builds_from_exact_source_without_changing_branch(self): self.assertEqual(prep.git(self.repo, "status", "--porcelain"), "") self.assertEqual(json.loads((output / "report.json").read_text())["source_sha"], head) + def test_container_installs_fips_native_build_tools(self): + script = CONTAINER_SCRIPT.read_text(encoding="utf-8").replace("\\\n", " ") + install = next( + line for line in script.splitlines() if line.startswith("apt-get install ") + ) + packages = set(shlex.split(install)) + + for required in ("build-essential", "cmake", "golang-go", "perl"): + with self.subTest(package=required): + self.assertIn(required, packages) + def test_apply_preserves_untracked_work_and_rerun_is_noop(self): user_file = self.repo / "user-notes.txt" user_file.write_text("keep me") From 50a7b0dc7ae3011d413d9606f70468c5162447d0 Mon Sep 17 00:00:00 2001 From: Jeremi Joslin Date: Tue, 22 Sep 2026 17:06:20 +0700 Subject: [PATCH 08/11] fix(release): align Scheduling cleanup inventory Signed-off-by: Jeremi Joslin --- release/scripts/check-gates-inventory.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/release/scripts/check-gates-inventory.py b/release/scripts/check-gates-inventory.py index bb0438b009..d45f1b18a4 100644 --- a/release/scripts/check-gates-inventory.py +++ b/release/scripts/check-gates-inventory.py @@ -941,7 +941,7 @@ "Candidate cleanup exact package allowlist", "release/scripts/cleanup-release-candidates.py", ( - 'CANDIDATE_PACKAGES = (\n # Listing an absent package fails closed, so a candidate name joins this\n # allowlist only after its private package identity is bootstrapped.\n "breg-candidate",\n "casework-candidate",\n "discovery-candidate",\n "evidence-candidate",\n "mint-candidate",\n "relay-candidate",\n)', + 'CANDIDATE_PACKAGES = (\n # Listing an absent package fails closed, so a candidate name joins this\n # allowlist only after its private package identity is bootstrapped.\n "breg-candidate",\n "casework-candidate",\n "discovery-candidate",\n "evidence-candidate",\n "mint-candidate",\n "relay-candidate",\n "scheduling-candidate",\n)', 'PUBLIC_PACKAGES = (\n # Retired public names stay denylisted so cleanup can never delete history.', ' "discovery",\n', ' "evidence",\n', From 98653c770faa2ce9a27d72dba38b36f262825269 Mon Sep 17 00:00:00 2001 From: Jeremi Joslin Date: Tue, 22 Sep 2026 17:07:27 +0700 Subject: [PATCH 09/11] docs(release): reflect Scheduling package onboarding Signed-off-by: Jeremi Joslin --- release/OPERATIONS.md | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/release/OPERATIONS.md b/release/OPERATIONS.md index 3eb9b1d3b8..9a23bfebce 100644 --- a/release/OPERATIONS.md +++ b/release/OPERATIONS.md @@ -162,11 +162,11 @@ the cleanup allowlist only after its private package exists, and merge its reviewed advisory baseline before requesting that candidate. Selecting `v0.33.0` or later also includes Scheduling in both checks. The -release source deliberately deny-lists the public `scheduling` package while -leaving `scheduling-candidate` out of scheduled cleanup until its private -package identity exists. Provision both identities, add `scheduling-candidate` -to the cleanup allowlist with its matching test, and merge a reviewed -Scheduling advisory baseline before requesting a `v0.33.0` or later candidate. +release source deny-lists the public `scheduling` package and includes the +bootstrapped private `scheduling-candidate` package in scheduled cleanup. +Verify both identities have the visibility and Actions access documented above, +and require a reviewed Scheduling advisory baseline before requesting a +`v0.33.0` or later candidate. The daily cleanup tolerates one delete failure: GitHub's 400 stating that publicly visible package versions with more than 5000 downloads cannot be From a7114d7efb49246e30db8a4f9e1438c0b82d6828 Mon Sep 17 00:00:00 2001 From: Jeremi Joslin Date: Tue, 22 Sep 2026 17:25:45 +0700 Subject: [PATCH 10/11] chore(release): review v0.33 image advisories Signed-off-by: Jeremi Joslin --- .../relay-v2/security/advisory-baseline.json | 92 +++++-- .../scripts/test_check_advisory_baselines.py | 16 +- release/security/breg-advisory-baseline.json | 92 +++++-- .../security/casework-advisory-baseline.json | 92 +++++-- .../security/discovery-advisory-baseline.json | 92 +++++-- .../security/evidence-advisory-baseline.json | 92 +++++-- .../scheduling-advisory-baseline.json | 246 ++++++++++++++++++ 7 files changed, 631 insertions(+), 91 deletions(-) create mode 100644 release/security/scheduling-advisory-baseline.json diff --git a/products/relay-v2/security/advisory-baseline.json b/products/relay-v2/security/advisory-baseline.json index 986958f513..39e29cb562 100644 --- a/products/relay-v2/security/advisory-baseline.json +++ b/products/relay-v2/security/advisory-baseline.json @@ -27,7 +27,7 @@ "sha256:7db505d90756626f425c6c5468eca565c82f589b144ecaa4f411ad9bbf79e614" ], "application_layer_ids": [ - "sha256:f71bab192b90d68c1ef78bbd58c68f163b3077f59129ed8af45cb0a03fa8e274", + "sha256:302066fd41cf1075eb0e8bf16aa8467461330d1e777219b472cd11665246800a", "sha256:5f70bf18a086007016e948b04aed3b82103a36bea41755b6cddfaf10ace3c6ef" ], "config": { @@ -64,7 +64,7 @@ ], "stop_signal": "" }, - "definition_digest": "sha256:5c707fcf1de482143d5789562f3691260d2519333f51cfb50fec0089153981c2" + "definition_digest": "sha256:3a722bfd7ce830c3f482a867b937980075230ec96ebaa2e5e9c32c16df16c4b1" }, "policies": [ { @@ -87,7 +87,7 @@ "severity": "High", "status": "accepted_risk", "owner": "@jeremi", - "rationale": "Debian classifies the Trixie issue as minor/no-DSA and has no Trixie fix. The reviewed v0.32.0 Linux AMD64 Relay local reproduction from rehearsal run 34923868162 imports or dynamically resolves none of the deprecated resolver-printing interfaces, including ns_printrrf, ns_printrr, ns_sprintrrf, ns_sprintrr and fp_nquery. Ordinary resolver initialization does not enter the vulnerable TSIG diagnostic-printing path. A candidate must retain the complete ordered reference rootfs layers, the production OCI process contract, and the Syft-bound reviewed executable, loader, libc, libm and libpthread file digests. Re-reviewed on 2026-09-22 with the evidence bindings unchanged: the release Dockerfiles still pin the reviewed runtime base, and Debian still records Trixie as vulnerable at this version under its no-DSA minor-issue tag, with a fixed glibc only in forky and sid.", + "rationale": "Debian classifies the Trixie issue as minor/no-DSA and has no Trixie fix. The reviewed v0.33.0 Linux AMD64 Relay local reproduction is exact rehearsal run 35711552030 at source 6a460c2cf66bc9d286cbe4a5454571c392488c05. Its executable imports none of the deprecated resolver-printing interfaces, including ns_printrrf, ns_printrr, ns_sprintrrf, ns_sprintrr and fp_nquery. The one review-required nonconstant dlsym tail jump is SQLite's extension-symbol wrapper; governed SQL rejects load_extension and no first-party runtime caller enables or invokes SQLite C extension loading. Ordinary resolver initialization does not enter the vulnerable TSIG diagnostic-printing path. A candidate must retain the complete ordered reference rootfs layers, the production OCI process contract, and the Syft-bound reviewed executable, loader, libc, libm and libpthread file digests. Reviewed on 2026-09-22; Debian still records this Trixie version as vulnerable and fixes only forky and sid.", "reviewed_at": "2026-09-22", "expires_at": "2026-10-06", "invalidation_triggers": [ @@ -105,14 +105,14 @@ "runtime_config_changed", "runtime_base_changed" ], - "runtime_definition_digest": "sha256:5c707fcf1de482143d5789562f3691260d2519333f51cfb50fec0089153981c2", - "component_layer_id": "sha256:f71bab192b90d68c1ef78bbd58c68f163b3077f59129ed8af45cb0a03fa8e274", + "runtime_definition_digest": "sha256:3a722bfd7ce830c3f482a867b937980075230ec96ebaa2e5e9c32c16df16c4b1", + "component_layer_id": "sha256:302066fd41cf1075eb0e8bf16aa8467461330d1e777219b472cd11665246800a", "exposure_assertion": { "kind": "whole_image_fingerprint_equals", - "reference_image_digest": "sha256:c1fda956208cdba3c5418ca98b6362942abf5124aa7edf4438b47e696e26f034", - "reference_source_revision": "5e6120ad1ec2d17bc4189dfbaf38894cb8f7dbe8", + "reference_image_digest": "sha256:94d9d8439361ffec9fdc2ddd44c54b698632295998d8616276c9abf002d4a52c", + "reference_source_revision": "6a460c2cf66bc9d286cbe4a5454571c392488c05", "reference_provenance": "local_reproduction", - "runtime_definition_digest": "sha256:5c707fcf1de482143d5789562f3691260d2519333f51cfb50fec0089153981c2", + "runtime_definition_digest": "sha256:3a722bfd7ce830c3f482a867b937980075230ec96ebaa2e5e9c32c16df16c4b1", "files": [ { "path": "/usr/lib/x86_64-linux-gnu/ld-linux-x86-64.so.2", @@ -132,10 +132,68 @@ }, { "path": "/usr/local/bin/relay", - "sha256": "sha256:bf8b0c401940e3f37fd280cac28110b648830cc3fe111706927508ac95a674aa" + "sha256": "sha256:e1ead11e4a0a3d748ca85b4fa922854d1fd4ee07a0e1b5fa36444e3ed324ef5c" } ], - "definition_digest": "sha256:7b8153aea0b91b3929d1afa6022a76e4fe64432b3714850ebe600e34d8ea825d" + "definition_digest": "sha256:5c81770a1cf1343d596783c549a949130db40a93fb0f3545eedd40dc78cb461b" + } + }, + { + "vulnerability_id": "CVE-2026-19499", + "package": "libc6", + "installed_version": "2.41-12+deb13u4", + "severity": "High", + "status": "accepted_risk", + "owner": "@jeremi", + "rationale": "Debian classifies the Trixie issue as minor/no-DSA and has no Trixie fix; Grype reports wont-fix. The reviewed v0.33.0 Linux AMD64 Relay local reproduction is exact rehearsal run 35711552030 at source 6a460c2cf66bc9d286cbe4a5454571c392488c05. Its executable neither imports nor contains strfmon or strfmon_l. The one review-required nonconstant dlsym tail jump is SQLite's extension-symbol wrapper; governed SQL rejects load_extension and no first-party runtime caller enables or invokes SQLite C extension loading. No caller-controlled right-justified monetary-format width path was identified. A candidate must retain the complete ordered reference rootfs layers, the production OCI process contract, and the Syft-bound reviewed executable, loader, libc, libm and libpthread file digests. Reviewed on 2026-09-22; Debian fixes the issue only in forky and sid.", + "reviewed_at": "2026-09-22", + "expires_at": "2026-10-06", + "invalidation_triggers": [ + "candidate_image_identity_mismatch", + "candidate_rootfs_changed", + "component_layer_changed", + "expired", + "exposure_assertion_changed", + "exposure_assertion_false", + "exposure_assertion_unevaluable", + "fix_available", + "material_finding_changed", + "package_version_changed", + "rootfs_evidence_mismatch", + "runtime_config_changed", + "runtime_base_changed" + ], + "runtime_definition_digest": "sha256:3a722bfd7ce830c3f482a867b937980075230ec96ebaa2e5e9c32c16df16c4b1", + "component_layer_id": "sha256:302066fd41cf1075eb0e8bf16aa8467461330d1e777219b472cd11665246800a", + "exposure_assertion": { + "kind": "whole_image_fingerprint_equals", + "reference_image_digest": "sha256:94d9d8439361ffec9fdc2ddd44c54b698632295998d8616276c9abf002d4a52c", + "reference_source_revision": "6a460c2cf66bc9d286cbe4a5454571c392488c05", + "reference_provenance": "local_reproduction", + "runtime_definition_digest": "sha256:3a722bfd7ce830c3f482a867b937980075230ec96ebaa2e5e9c32c16df16c4b1", + "files": [ + { + "path": "/usr/lib/x86_64-linux-gnu/ld-linux-x86-64.so.2", + "sha256": "sha256:c8438e4fde1934e61c88311633f00949ff645d5c04cdb8671fa3d78164d2f307" + }, + { + "path": "/usr/lib/x86_64-linux-gnu/libc.so.6", + "sha256": "sha256:9792e3cbb541c8f44c7acf5f14f4022ea62998ecc787d326bed4d8b6547dfd92" + }, + { + "path": "/usr/lib/x86_64-linux-gnu/libm.so.6", + "sha256": "sha256:6d567d53e895273ca14a1f9dc164fc6c8d39aed2f60aa46a733c2784228915f3" + }, + { + "path": "/usr/lib/x86_64-linux-gnu/libpthread.so.0", + "sha256": "sha256:85e21f7dba0394411d00959176fd18b470e575b0b05f1f4f41e5636802ce0500" + }, + { + "path": "/usr/local/bin/relay", + "sha256": "sha256:e1ead11e4a0a3d748ca85b4fa922854d1fd4ee07a0e1b5fa36444e3ed324ef5c" + } + ], + "definition_digest": "sha256:5c81770a1cf1343d596783c549a949130db40a93fb0f3545eedd40dc78cb461b" } }, { @@ -145,7 +203,7 @@ "severity": "High", "status": "accepted_risk", "owner": "@jeremi", - "rationale": "Debian Trixie has no fixed package and Grype reports no fix. The reviewed v0.32.0 Linux AMD64 Relay local reproduction from rehearsal run 34923868162 does not link libz or embed libz.so, gz_vacate, gzwrite, gzfwrite, gzprintf or gzvprintf in its executable. Its reviewed dynamic lookups do not select those functions, so no vulnerable stalled gzip-write followed by formatted-output path was identified. SQLite C extension-loading support is compiled in; its SQL entry point remains disabled and governed SQL explicitly denies load_extension, with no first-party runtime C-API loading or enabling caller identified. A candidate must retain the complete ordered reference rootfs layers, the production OCI process contract, and the Syft-bound reviewed executable, loader, libc, libm and libpthread file digests. Re-reviewed on 2026-09-22 with the evidence bindings unchanged: the release Dockerfiles still pin the reviewed runtime base, and Debian still lists no fixed zlib package for Trixie.", + "rationale": "Debian Trixie has no fixed package and Grype reports no fix. The reviewed v0.33.0 Linux AMD64 Relay local reproduction is exact rehearsal run 35711552030 at source 6a460c2cf66bc9d286cbe4a5454571c392488c05. Its executable neither links libz nor contains libz.so, gz_vacate, gzwrite, gzfwrite, gzprintf or gzvprintf. The one review-required nonconstant dlsym tail jump is SQLite's extension-symbol wrapper; governed SQL rejects load_extension and no first-party runtime caller enables or invokes SQLite C extension loading. No vulnerable stalled gzip-write followed by formatted-output path was identified. A candidate must retain the complete ordered reference rootfs layers, the production OCI process contract, and the Syft-bound reviewed executable, loader, libc, libm and libpthread file digests. Reviewed on 2026-09-22; Debian still lists no fixed zlib package for Trixie.", "reviewed_at": "2026-09-22", "expires_at": "2026-10-06", "invalidation_triggers": [ @@ -163,14 +221,14 @@ "runtime_config_changed", "runtime_base_changed" ], - "runtime_definition_digest": "sha256:5c707fcf1de482143d5789562f3691260d2519333f51cfb50fec0089153981c2", + "runtime_definition_digest": "sha256:3a722bfd7ce830c3f482a867b937980075230ec96ebaa2e5e9c32c16df16c4b1", "component_layer_id": "sha256:e4ba966d7f0527dfe0fcb559e4e18d4da42c4e6beae924719255e0dedb554ed0", "exposure_assertion": { "kind": "whole_image_fingerprint_equals", - "reference_image_digest": "sha256:c1fda956208cdba3c5418ca98b6362942abf5124aa7edf4438b47e696e26f034", - "reference_source_revision": "5e6120ad1ec2d17bc4189dfbaf38894cb8f7dbe8", + "reference_image_digest": "sha256:94d9d8439361ffec9fdc2ddd44c54b698632295998d8616276c9abf002d4a52c", + "reference_source_revision": "6a460c2cf66bc9d286cbe4a5454571c392488c05", "reference_provenance": "local_reproduction", - "runtime_definition_digest": "sha256:5c707fcf1de482143d5789562f3691260d2519333f51cfb50fec0089153981c2", + "runtime_definition_digest": "sha256:3a722bfd7ce830c3f482a867b937980075230ec96ebaa2e5e9c32c16df16c4b1", "files": [ { "path": "/usr/lib/x86_64-linux-gnu/ld-linux-x86-64.so.2", @@ -190,10 +248,10 @@ }, { "path": "/usr/local/bin/relay", - "sha256": "sha256:bf8b0c401940e3f37fd280cac28110b648830cc3fe111706927508ac95a674aa" + "sha256": "sha256:e1ead11e4a0a3d748ca85b4fa922854d1fd4ee07a0e1b5fa36444e3ed324ef5c" } ], - "definition_digest": "sha256:7b8153aea0b91b3929d1afa6022a76e4fe64432b3714850ebe600e34d8ea825d" + "definition_digest": "sha256:5c81770a1cf1343d596783c549a949130db40a93fb0f3545eedd40dc78cb461b" } } ] diff --git a/release/scripts/test_check_advisory_baselines.py b/release/scripts/test_check_advisory_baselines.py index 8e5ba6a715..3c9ac1f0eb 100644 --- a/release/scripts/test_check_advisory_baselines.py +++ b/release/scripts/test_check_advisory_baselines.py @@ -24,15 +24,17 @@ ROOT / "release/security/casework-advisory-baseline.json", ROOT / "release/security/discovery-advisory-baseline.json", ROOT / "release/security/evidence-advisory-baseline.json", + ROOT / "release/security/scheduling-advisory-baseline.json", ) LIVE_REFERENCE_IMAGE_DIGESTS = { - "relay": "sha256:c1fda956208cdba3c5418ca98b6362942abf5124aa7edf4438b47e696e26f034", - "breg": "sha256:9619bde5f36f1efc91b48253735659839366dc816ca4d46f3af286d7f3f44e6a", - "casework": "sha256:d12f62d91c4fb60532f441b4740790608b1fbc59a2f8eb31952f949c294f776b", - "discovery": "sha256:43140226dc11cde1dd1ca322462b891a00f29bf1e7181230a0bc6dd6eeb65b85", - "evidence": "sha256:af402e73cb104ee27039bf6c7b5cc5e7cbf37416449b91ff47086c6463b90483", + "relay": "sha256:94d9d8439361ffec9fdc2ddd44c54b698632295998d8616276c9abf002d4a52c", + "breg": "sha256:9299a1beece6ad8de828a7fbb72cbd109901e5f6f638f71e80fe31f1f78b7a90", + "casework": "sha256:ae50ec47af1b4916ff811bffdc7f928c4ef397e46f6208bb4f36c5ce655a1499", + "discovery": "sha256:26f3686b5b982d1883e83e64509ab30e35a56ece7bc9545d6350435cc72a0d7c", + "evidence": "sha256:ee06a933127294e9c2175de5c0115f651ee748eb1a546faeba0c737f594c5222", + "scheduling": "sha256:74f49c852500729542a73b6e057fe201f13b9f0aae5f51ba775e72a2f4903331", } -LIVE_REFERENCE_SOURCE_REVISION = "5e6120ad1ec2d17bc4189dfbaf38894cb8f7dbe8" +LIVE_REFERENCE_SOURCE_REVISION = "6a460c2cf66bc9d286cbe4a5454571c392488c05" # The date the live exceptions below were reviewed against, stated here rather # than derived from the baselines: deriving it from their own reviewed_at values # would make the checker's future-dated guard unreachable for the newest @@ -44,6 +46,7 @@ "casework": "local_reproduction", "discovery": "local_reproduction", "evidence": "local_reproduction", + "scheduling": "local_reproduction", } LIVE_EXECUTABLES = { "relay": "/usr/local/bin/relay", @@ -51,6 +54,7 @@ "casework": "/usr/local/bin/casework", "discovery": "/usr/local/bin/discovery", "evidence": "/usr/local/bin/evidence", + "scheduling": "/usr/local/bin/scheduling", } diff --git a/release/security/breg-advisory-baseline.json b/release/security/breg-advisory-baseline.json index 5d5d3d913f..0b476ee0dd 100644 --- a/release/security/breg-advisory-baseline.json +++ b/release/security/breg-advisory-baseline.json @@ -27,7 +27,7 @@ "sha256:7db505d90756626f425c6c5468eca565c82f589b144ecaa4f411ad9bbf79e614" ], "application_layer_ids": [ - "sha256:a977e610c22a7d8990d3c1d628ed9f64662d691351c556e91f422c69c0c4a426", + "sha256:eb1c6f6d0fd86c36a6fb6a6f3da49ba6925fe3538f7597c18ce8944746e946c6", "sha256:5f70bf18a086007016e948b04aed3b82103a36bea41755b6cddfaf10ace3c6ef" ], "config": { @@ -51,7 +51,7 @@ ], "stop_signal": "" }, - "definition_digest": "sha256:df64c8a8b1579c5782fc3a86189622ff61f91de7ce73b74e85276f547093a8dd" + "definition_digest": "sha256:a66b272a90b900ea90b22cf3ff828d89b8e2d993e7dcd6a5bfe0d6b2b3ba7948" }, "policies": [ { @@ -74,7 +74,7 @@ "severity": "High", "status": "accepted_risk", "owner": "@jeremi", - "rationale": "Debian classifies the Trixie issue as minor/no-DSA and has no Trixie fix. The reviewed v0.32.0 Linux AMD64 BReg local reproduction from rehearsal run 34923868162 imports or dynamically resolves none of the deprecated resolver-printing interfaces, including ns_printrrf, ns_printrr, ns_sprintrrf, ns_sprintrr and fp_nquery. Ordinary resolver initialization does not enter the vulnerable TSIG diagnostic-printing path. A candidate must retain the complete ordered reference rootfs layers, the production OCI process contract, and the Syft-bound reviewed executable, loader, libc, libm and libpthread file digests. Re-reviewed on 2026-09-22 with the evidence bindings unchanged: the release Dockerfiles still pin the reviewed runtime base, and Debian still records Trixie as vulnerable at this version under its no-DSA minor-issue tag, with a fixed glibc only in forky and sid.", + "rationale": "Debian classifies the Trixie issue as minor/no-DSA and has no Trixie fix. The reviewed v0.33.0 Linux AMD64 BReg local reproduction is exact rehearsal run 35711552030 at source 6a460c2cf66bc9d286cbe4a5454571c392488c05. Its executable imports none of the deprecated resolver-printing interfaces, including ns_printrrf, ns_printrr, ns_sprintrrf, ns_sprintrr and fp_nquery. The one review-required address-taken dlsym use is Wasmtime's Intel JIT profiler availability probe and only selects NotifyEvent and Initialize. Ordinary resolver initialization does not enter the vulnerable TSIG diagnostic-printing path. A candidate must retain the complete ordered reference rootfs layers, the production OCI process contract, and the Syft-bound reviewed executable, loader, libc, libm and libpthread file digests. Reviewed on 2026-09-22; Debian still records this Trixie version as vulnerable and fixes only forky and sid.", "reviewed_at": "2026-09-22", "expires_at": "2026-10-06", "invalidation_triggers": [ @@ -92,14 +92,14 @@ "runtime_config_changed", "runtime_base_changed" ], - "runtime_definition_digest": "sha256:df64c8a8b1579c5782fc3a86189622ff61f91de7ce73b74e85276f547093a8dd", - "component_layer_id": "sha256:a977e610c22a7d8990d3c1d628ed9f64662d691351c556e91f422c69c0c4a426", + "runtime_definition_digest": "sha256:a66b272a90b900ea90b22cf3ff828d89b8e2d993e7dcd6a5bfe0d6b2b3ba7948", + "component_layer_id": "sha256:eb1c6f6d0fd86c36a6fb6a6f3da49ba6925fe3538f7597c18ce8944746e946c6", "exposure_assertion": { "kind": "whole_image_fingerprint_equals", - "reference_image_digest": "sha256:9619bde5f36f1efc91b48253735659839366dc816ca4d46f3af286d7f3f44e6a", - "reference_source_revision": "5e6120ad1ec2d17bc4189dfbaf38894cb8f7dbe8", + "reference_image_digest": "sha256:9299a1beece6ad8de828a7fbb72cbd109901e5f6f638f71e80fe31f1f78b7a90", + "reference_source_revision": "6a460c2cf66bc9d286cbe4a5454571c392488c05", "reference_provenance": "local_reproduction", - "runtime_definition_digest": "sha256:df64c8a8b1579c5782fc3a86189622ff61f91de7ce73b74e85276f547093a8dd", + "runtime_definition_digest": "sha256:a66b272a90b900ea90b22cf3ff828d89b8e2d993e7dcd6a5bfe0d6b2b3ba7948", "files": [ { "path": "/usr/lib/x86_64-linux-gnu/ld-linux-x86-64.so.2", @@ -119,10 +119,68 @@ }, { "path": "/usr/local/bin/breg", - "sha256": "sha256:018bf46e8a100bbb26508c3371988b72a04a4513ec366b3dce5931d318fd5ee3" + "sha256": "sha256:61d9835ece3402fb5600a02dda3eae4e7ee5bf7d0acebb268e166350d3b705b2" } ], - "definition_digest": "sha256:029243998fe2b6aeb3cc7ddcc2d7f79ab8bad94ca442df3c43ec9432ffd23f57" + "definition_digest": "sha256:48a8a94eb657eed350b8b1c344068fff17f2abaac867038c524412cddda8fa70" + } + }, + { + "vulnerability_id": "CVE-2026-19499", + "package": "libc6", + "installed_version": "2.41-12+deb13u4", + "severity": "High", + "status": "accepted_risk", + "owner": "@jeremi", + "rationale": "Debian classifies the Trixie issue as minor/no-DSA and has no Trixie fix; Grype reports wont-fix. The reviewed v0.33.0 Linux AMD64 BReg local reproduction is exact rehearsal run 35711552030 at source 6a460c2cf66bc9d286cbe4a5454571c392488c05. Its executable neither imports nor contains strfmon or strfmon_l. The one review-required address-taken dlsym use is Wasmtime's Intel JIT profiler availability probe and only selects NotifyEvent and Initialize. No caller-controlled right-justified monetary-format width path was identified. A candidate must retain the complete ordered reference rootfs layers, the production OCI process contract, and the Syft-bound reviewed executable, loader, libc, libm and libpthread file digests. Reviewed on 2026-09-22; Debian fixes the issue only in forky and sid.", + "reviewed_at": "2026-09-22", + "expires_at": "2026-10-06", + "invalidation_triggers": [ + "candidate_image_identity_mismatch", + "candidate_rootfs_changed", + "component_layer_changed", + "expired", + "exposure_assertion_changed", + "exposure_assertion_false", + "exposure_assertion_unevaluable", + "fix_available", + "material_finding_changed", + "package_version_changed", + "rootfs_evidence_mismatch", + "runtime_config_changed", + "runtime_base_changed" + ], + "runtime_definition_digest": "sha256:a66b272a90b900ea90b22cf3ff828d89b8e2d993e7dcd6a5bfe0d6b2b3ba7948", + "component_layer_id": "sha256:eb1c6f6d0fd86c36a6fb6a6f3da49ba6925fe3538f7597c18ce8944746e946c6", + "exposure_assertion": { + "kind": "whole_image_fingerprint_equals", + "reference_image_digest": "sha256:9299a1beece6ad8de828a7fbb72cbd109901e5f6f638f71e80fe31f1f78b7a90", + "reference_source_revision": "6a460c2cf66bc9d286cbe4a5454571c392488c05", + "reference_provenance": "local_reproduction", + "runtime_definition_digest": "sha256:a66b272a90b900ea90b22cf3ff828d89b8e2d993e7dcd6a5bfe0d6b2b3ba7948", + "files": [ + { + "path": "/usr/lib/x86_64-linux-gnu/ld-linux-x86-64.so.2", + "sha256": "sha256:c8438e4fde1934e61c88311633f00949ff645d5c04cdb8671fa3d78164d2f307" + }, + { + "path": "/usr/lib/x86_64-linux-gnu/libc.so.6", + "sha256": "sha256:9792e3cbb541c8f44c7acf5f14f4022ea62998ecc787d326bed4d8b6547dfd92" + }, + { + "path": "/usr/lib/x86_64-linux-gnu/libm.so.6", + "sha256": "sha256:6d567d53e895273ca14a1f9dc164fc6c8d39aed2f60aa46a733c2784228915f3" + }, + { + "path": "/usr/lib/x86_64-linux-gnu/libpthread.so.0", + "sha256": "sha256:85e21f7dba0394411d00959176fd18b470e575b0b05f1f4f41e5636802ce0500" + }, + { + "path": "/usr/local/bin/breg", + "sha256": "sha256:61d9835ece3402fb5600a02dda3eae4e7ee5bf7d0acebb268e166350d3b705b2" + } + ], + "definition_digest": "sha256:48a8a94eb657eed350b8b1c344068fff17f2abaac867038c524412cddda8fa70" } }, { @@ -132,7 +190,7 @@ "severity": "High", "status": "accepted_risk", "owner": "@jeremi", - "rationale": "Debian Trixie has no fixed package and Grype reports no fix. The reviewed v0.32.0 Linux AMD64 BReg local reproduction from rehearsal run 34923868162 does not link libz or embed libz.so, gz_vacate, gzwrite, gzfwrite, gzprintf or gzvprintf in its executable. Its reviewed dynamic lookups do not select those functions, so no vulnerable stalled gzip-write followed by formatted-output path was identified. A candidate must retain the complete ordered reference rootfs layers, the production OCI process contract, and the Syft-bound reviewed executable, loader, libc, libm and libpthread file digests. Re-reviewed on 2026-09-22 with the evidence bindings unchanged: the release Dockerfiles still pin the reviewed runtime base, and Debian still lists no fixed zlib package for Trixie.", + "rationale": "Debian Trixie has no fixed package and Grype reports no fix. The reviewed v0.33.0 Linux AMD64 BReg local reproduction is exact rehearsal run 35711552030 at source 6a460c2cf66bc9d286cbe4a5454571c392488c05. Its executable neither links libz nor contains libz.so, gz_vacate, gzwrite, gzfwrite, gzprintf or gzvprintf. The one review-required address-taken dlsym use is Wasmtime's Intel JIT profiler availability probe and only selects NotifyEvent and Initialize. No vulnerable stalled gzip-write followed by formatted-output path was identified. A candidate must retain the complete ordered reference rootfs layers, the production OCI process contract, and the Syft-bound reviewed executable, loader, libc, libm and libpthread file digests. Reviewed on 2026-09-22; Debian still lists no fixed zlib package for Trixie.", "reviewed_at": "2026-09-22", "expires_at": "2026-10-06", "invalidation_triggers": [ @@ -150,14 +208,14 @@ "runtime_config_changed", "runtime_base_changed" ], - "runtime_definition_digest": "sha256:df64c8a8b1579c5782fc3a86189622ff61f91de7ce73b74e85276f547093a8dd", + "runtime_definition_digest": "sha256:a66b272a90b900ea90b22cf3ff828d89b8e2d993e7dcd6a5bfe0d6b2b3ba7948", "component_layer_id": "sha256:e4ba966d7f0527dfe0fcb559e4e18d4da42c4e6beae924719255e0dedb554ed0", "exposure_assertion": { "kind": "whole_image_fingerprint_equals", - "reference_image_digest": "sha256:9619bde5f36f1efc91b48253735659839366dc816ca4d46f3af286d7f3f44e6a", - "reference_source_revision": "5e6120ad1ec2d17bc4189dfbaf38894cb8f7dbe8", + "reference_image_digest": "sha256:9299a1beece6ad8de828a7fbb72cbd109901e5f6f638f71e80fe31f1f78b7a90", + "reference_source_revision": "6a460c2cf66bc9d286cbe4a5454571c392488c05", "reference_provenance": "local_reproduction", - "runtime_definition_digest": "sha256:df64c8a8b1579c5782fc3a86189622ff61f91de7ce73b74e85276f547093a8dd", + "runtime_definition_digest": "sha256:a66b272a90b900ea90b22cf3ff828d89b8e2d993e7dcd6a5bfe0d6b2b3ba7948", "files": [ { "path": "/usr/lib/x86_64-linux-gnu/ld-linux-x86-64.so.2", @@ -177,10 +235,10 @@ }, { "path": "/usr/local/bin/breg", - "sha256": "sha256:018bf46e8a100bbb26508c3371988b72a04a4513ec366b3dce5931d318fd5ee3" + "sha256": "sha256:61d9835ece3402fb5600a02dda3eae4e7ee5bf7d0acebb268e166350d3b705b2" } ], - "definition_digest": "sha256:029243998fe2b6aeb3cc7ddcc2d7f79ab8bad94ca442df3c43ec9432ffd23f57" + "definition_digest": "sha256:48a8a94eb657eed350b8b1c344068fff17f2abaac867038c524412cddda8fa70" } } ] diff --git a/release/security/casework-advisory-baseline.json b/release/security/casework-advisory-baseline.json index 560d6d3b46..f2e2b13b77 100644 --- a/release/security/casework-advisory-baseline.json +++ b/release/security/casework-advisory-baseline.json @@ -27,7 +27,7 @@ "sha256:7db505d90756626f425c6c5468eca565c82f589b144ecaa4f411ad9bbf79e614" ], "application_layer_ids": [ - "sha256:8f6a6a1d3bf865bf67481ef6ada53cf7cecac382d061819ac2dfdd4497b3b168", + "sha256:c526331d7e280980992c2b0f14a3f71e2d89df27ebc1a5832d925fb1bdbf1ed8", "sha256:5f70bf18a086007016e948b04aed3b82103a36bea41755b6cddfaf10ace3c6ef" ], "config": { @@ -52,7 +52,7 @@ ], "stop_signal": "" }, - "definition_digest": "sha256:599af5527226d6c09239257d46348e706b176e8968f29d288d11a95612fe73b1" + "definition_digest": "sha256:48d29db65e8e562f379a19d4015b4cc0e6c7ded4c00a51b9df797b8680d5c9e3" }, "policies": [ { @@ -75,7 +75,7 @@ "severity": "High", "status": "accepted_risk", "owner": "@jeremi", - "rationale": "Debian classifies the Trixie issue as minor/no-DSA and has no Trixie fix. The reviewed v0.32.0 Linux AMD64 Casework local reproduction is from rehearsal run 34923868162. Its executable imports or dynamically resolves none of the deprecated resolver-printing interfaces, including ns_printrrf, ns_printrr, ns_sprintrrf, ns_sprintrr, and fp_nquery. Ordinary resolver initialization does not enter the vulnerable TSIG diagnostic-printing path. A candidate must retain the complete ordered reference rootfs layers, the production OCI process contract, and the Syft-bound reviewed executable, loader, libc, libm and libpthread file digests. Re-reviewed on 2026-09-22 with the evidence bindings unchanged: the release Dockerfiles still pin the reviewed runtime base, and Debian still records Trixie as vulnerable at this version under its no-DSA minor-issue tag, with a fixed glibc only in forky and sid.", + "rationale": "Debian classifies the Trixie issue as minor/no-DSA and has no Trixie fix. The reviewed v0.33.0 Linux AMD64 Casework local reproduction is exact rehearsal run 35711552030 at source 6a460c2cf66bc9d286cbe4a5454571c392488c05. Its executable imports none of the deprecated resolver-printing interfaces, including ns_printrrf, ns_printrr, ns_sprintrrf, ns_sprintrr and fp_nquery. The exposure report has no review-required dynamic lookup. Ordinary resolver initialization does not enter the vulnerable TSIG diagnostic-printing path. A candidate must retain the complete ordered reference rootfs layers, the production OCI process contract, and the Syft-bound reviewed executable, loader, libc, libm and libpthread file digests. Reviewed on 2026-09-22; Debian still records this Trixie version as vulnerable and fixes only forky and sid.", "reviewed_at": "2026-09-22", "expires_at": "2026-10-06", "invalidation_triggers": [ @@ -93,14 +93,14 @@ "runtime_base_changed", "runtime_config_changed" ], - "runtime_definition_digest": "sha256:599af5527226d6c09239257d46348e706b176e8968f29d288d11a95612fe73b1", - "component_layer_id": "sha256:8f6a6a1d3bf865bf67481ef6ada53cf7cecac382d061819ac2dfdd4497b3b168", + "runtime_definition_digest": "sha256:48d29db65e8e562f379a19d4015b4cc0e6c7ded4c00a51b9df797b8680d5c9e3", + "component_layer_id": "sha256:c526331d7e280980992c2b0f14a3f71e2d89df27ebc1a5832d925fb1bdbf1ed8", "exposure_assertion": { "kind": "whole_image_fingerprint_equals", - "reference_image_digest": "sha256:d12f62d91c4fb60532f441b4740790608b1fbc59a2f8eb31952f949c294f776b", - "reference_source_revision": "5e6120ad1ec2d17bc4189dfbaf38894cb8f7dbe8", + "reference_image_digest": "sha256:ae50ec47af1b4916ff811bffdc7f928c4ef397e46f6208bb4f36c5ce655a1499", + "reference_source_revision": "6a460c2cf66bc9d286cbe4a5454571c392488c05", "reference_provenance": "local_reproduction", - "runtime_definition_digest": "sha256:599af5527226d6c09239257d46348e706b176e8968f29d288d11a95612fe73b1", + "runtime_definition_digest": "sha256:48d29db65e8e562f379a19d4015b4cc0e6c7ded4c00a51b9df797b8680d5c9e3", "files": [ { "path": "/usr/lib/x86_64-linux-gnu/ld-linux-x86-64.so.2", @@ -120,10 +120,68 @@ }, { "path": "/usr/local/bin/casework", - "sha256": "sha256:a6301604b6a588785e76310a670213bf0a39bed446161edf26e99bcd32e29584" + "sha256": "sha256:3ee3144dd2551ccf0d0f159275b6d152097630a0251583fa829d4fc32c6d83da" } ], - "definition_digest": "sha256:55c3faef5177007a91334c933de0d2c43932cd26aa12dd91c103de59083dc129" + "definition_digest": "sha256:139af03b983e13e6ea5bd5fb77750457a15e9e28553bbb01e8974bd553bfa239" + } + }, + { + "vulnerability_id": "CVE-2026-19499", + "package": "libc6", + "installed_version": "2.41-12+deb13u4", + "severity": "High", + "status": "accepted_risk", + "owner": "@jeremi", + "rationale": "Debian classifies the Trixie issue as minor/no-DSA and has no Trixie fix; Grype reports wont-fix. The reviewed v0.33.0 Linux AMD64 Casework local reproduction is exact rehearsal run 35711552030 at source 6a460c2cf66bc9d286cbe4a5454571c392488c05. Its executable neither imports nor contains strfmon or strfmon_l. The exposure report has no review-required dynamic lookup. No caller-controlled right-justified monetary-format width path was identified. A candidate must retain the complete ordered reference rootfs layers, the production OCI process contract, and the Syft-bound reviewed executable, loader, libc, libm and libpthread file digests. Reviewed on 2026-09-22; Debian fixes the issue only in forky and sid.", + "reviewed_at": "2026-09-22", + "expires_at": "2026-10-06", + "invalidation_triggers": [ + "candidate_image_identity_mismatch", + "candidate_rootfs_changed", + "component_layer_changed", + "expired", + "exposure_assertion_changed", + "exposure_assertion_false", + "exposure_assertion_unevaluable", + "fix_available", + "material_finding_changed", + "package_version_changed", + "rootfs_evidence_mismatch", + "runtime_base_changed", + "runtime_config_changed" + ], + "runtime_definition_digest": "sha256:48d29db65e8e562f379a19d4015b4cc0e6c7ded4c00a51b9df797b8680d5c9e3", + "component_layer_id": "sha256:c526331d7e280980992c2b0f14a3f71e2d89df27ebc1a5832d925fb1bdbf1ed8", + "exposure_assertion": { + "kind": "whole_image_fingerprint_equals", + "reference_image_digest": "sha256:ae50ec47af1b4916ff811bffdc7f928c4ef397e46f6208bb4f36c5ce655a1499", + "reference_source_revision": "6a460c2cf66bc9d286cbe4a5454571c392488c05", + "reference_provenance": "local_reproduction", + "runtime_definition_digest": "sha256:48d29db65e8e562f379a19d4015b4cc0e6c7ded4c00a51b9df797b8680d5c9e3", + "files": [ + { + "path": "/usr/lib/x86_64-linux-gnu/ld-linux-x86-64.so.2", + "sha256": "sha256:c8438e4fde1934e61c88311633f00949ff645d5c04cdb8671fa3d78164d2f307" + }, + { + "path": "/usr/lib/x86_64-linux-gnu/libc.so.6", + "sha256": "sha256:9792e3cbb541c8f44c7acf5f14f4022ea62998ecc787d326bed4d8b6547dfd92" + }, + { + "path": "/usr/lib/x86_64-linux-gnu/libm.so.6", + "sha256": "sha256:6d567d53e895273ca14a1f9dc164fc6c8d39aed2f60aa46a733c2784228915f3" + }, + { + "path": "/usr/lib/x86_64-linux-gnu/libpthread.so.0", + "sha256": "sha256:85e21f7dba0394411d00959176fd18b470e575b0b05f1f4f41e5636802ce0500" + }, + { + "path": "/usr/local/bin/casework", + "sha256": "sha256:3ee3144dd2551ccf0d0f159275b6d152097630a0251583fa829d4fc32c6d83da" + } + ], + "definition_digest": "sha256:139af03b983e13e6ea5bd5fb77750457a15e9e28553bbb01e8974bd553bfa239" } }, { @@ -133,7 +191,7 @@ "severity": "High", "status": "accepted_risk", "owner": "@jeremi", - "rationale": "Debian Trixie has no fixed package and Grype reports no fix. The reviewed v0.32.0 Linux AMD64 Casework local reproduction is from rehearsal run 34923868162. Its executable does not link libz or contain libz.so, gz_vacate, gzwrite, gzfwrite, gzprintf, or gzvprintf. Its sole dlsym call selects the fixed _dl_find_object name, so no vulnerable stalled gzip-write followed by formatted-output path was identified. A candidate must retain the complete ordered reference rootfs layers, the production OCI process contract, and the Syft-bound reviewed executable, loader, libc, libm and libpthread file digests. Re-reviewed on 2026-09-22 with the evidence bindings unchanged: the release Dockerfiles still pin the reviewed runtime base, and Debian still lists no fixed zlib package for Trixie.", + "rationale": "Debian Trixie has no fixed package and Grype reports no fix. The reviewed v0.33.0 Linux AMD64 Casework local reproduction is exact rehearsal run 35711552030 at source 6a460c2cf66bc9d286cbe4a5454571c392488c05. Its executable neither links libz nor contains libz.so, gz_vacate, gzwrite, gzfwrite, gzprintf or gzvprintf. The exposure report has no review-required dynamic lookup. No vulnerable stalled gzip-write followed by formatted-output path was identified. A candidate must retain the complete ordered reference rootfs layers, the production OCI process contract, and the Syft-bound reviewed executable, loader, libc, libm and libpthread file digests. Reviewed on 2026-09-22; Debian still lists no fixed zlib package for Trixie.", "reviewed_at": "2026-09-22", "expires_at": "2026-10-06", "invalidation_triggers": [ @@ -151,14 +209,14 @@ "runtime_base_changed", "runtime_config_changed" ], - "runtime_definition_digest": "sha256:599af5527226d6c09239257d46348e706b176e8968f29d288d11a95612fe73b1", + "runtime_definition_digest": "sha256:48d29db65e8e562f379a19d4015b4cc0e6c7ded4c00a51b9df797b8680d5c9e3", "component_layer_id": "sha256:e4ba966d7f0527dfe0fcb559e4e18d4da42c4e6beae924719255e0dedb554ed0", "exposure_assertion": { "kind": "whole_image_fingerprint_equals", - "reference_image_digest": "sha256:d12f62d91c4fb60532f441b4740790608b1fbc59a2f8eb31952f949c294f776b", - "reference_source_revision": "5e6120ad1ec2d17bc4189dfbaf38894cb8f7dbe8", + "reference_image_digest": "sha256:ae50ec47af1b4916ff811bffdc7f928c4ef397e46f6208bb4f36c5ce655a1499", + "reference_source_revision": "6a460c2cf66bc9d286cbe4a5454571c392488c05", "reference_provenance": "local_reproduction", - "runtime_definition_digest": "sha256:599af5527226d6c09239257d46348e706b176e8968f29d288d11a95612fe73b1", + "runtime_definition_digest": "sha256:48d29db65e8e562f379a19d4015b4cc0e6c7ded4c00a51b9df797b8680d5c9e3", "files": [ { "path": "/usr/lib/x86_64-linux-gnu/ld-linux-x86-64.so.2", @@ -178,10 +236,10 @@ }, { "path": "/usr/local/bin/casework", - "sha256": "sha256:a6301604b6a588785e76310a670213bf0a39bed446161edf26e99bcd32e29584" + "sha256": "sha256:3ee3144dd2551ccf0d0f159275b6d152097630a0251583fa829d4fc32c6d83da" } ], - "definition_digest": "sha256:55c3faef5177007a91334c933de0d2c43932cd26aa12dd91c103de59083dc129" + "definition_digest": "sha256:139af03b983e13e6ea5bd5fb77750457a15e9e28553bbb01e8974bd553bfa239" } } ] diff --git a/release/security/discovery-advisory-baseline.json b/release/security/discovery-advisory-baseline.json index ecd4ab3ab0..8b8622d179 100644 --- a/release/security/discovery-advisory-baseline.json +++ b/release/security/discovery-advisory-baseline.json @@ -27,7 +27,7 @@ "sha256:7db505d90756626f425c6c5468eca565c82f589b144ecaa4f411ad9bbf79e614" ], "application_layer_ids": [ - "sha256:2b2746ada5df57c6ce85bfba82ca709d7553c14a83e667e21a8d6e541117a9ed" + "sha256:4da2e235cacbc5cbdfac74e126d11d30573b4707638ef164598f3928e0521c16" ], "config": { "user": "65532", @@ -50,7 +50,7 @@ ], "stop_signal": "" }, - "definition_digest": "sha256:e55918a4b972b772f8c170d6326edd065eb48fe08051ef52a2cee0b7c0fc39b8" + "definition_digest": "sha256:0eff517adb27fd2af9624a1be057cc7c6ba89d4402cdb8ff84dfc0cce8996faf" }, "policies": [ { @@ -73,7 +73,7 @@ "severity": "High", "status": "accepted_risk", "owner": "@jeremi", - "rationale": "Debian classifies the Trixie issue as minor/no-DSA and has no Trixie fix. The reviewed v0.32.0 Linux AMD64 Discovery local reproduction from rehearsal run 34923868162 imports or dynamically resolves none of the deprecated resolver-printing interfaces, including ns_printrrf, ns_printrr, ns_sprintrrf, ns_sprintrr and fp_nquery. Ordinary resolver initialization does not enter the vulnerable TSIG diagnostic-printing path. A candidate must retain the complete ordered reference rootfs layers, the production OCI process contract, and the Syft-bound reviewed executable, loader, libc, libm and libpthread file digests. Re-reviewed on 2026-09-22 with the evidence bindings unchanged: the release Dockerfiles still pin the reviewed runtime base, and Debian still records Trixie as vulnerable at this version under its no-DSA minor-issue tag, with a fixed glibc only in forky and sid.", + "rationale": "Debian classifies the Trixie issue as minor/no-DSA and has no Trixie fix. The reviewed v0.33.0 Linux AMD64 Discovery local reproduction is exact rehearsal run 35711552030 at source 6a460c2cf66bc9d286cbe4a5454571c392488c05. Its executable imports none of the deprecated resolver-printing interfaces, including ns_printrrf, ns_printrr, ns_sprintrrf, ns_sprintrr and fp_nquery. The exposure report has no review-required dynamic lookup. Ordinary resolver initialization does not enter the vulnerable TSIG diagnostic-printing path. A candidate must retain the complete ordered reference rootfs layers, the production OCI process contract, and the Syft-bound reviewed executable, loader, libc, libm and libpthread file digests. Reviewed on 2026-09-22; Debian still records this Trixie version as vulnerable and fixes only forky and sid.", "reviewed_at": "2026-09-22", "expires_at": "2026-10-06", "invalidation_triggers": [ @@ -91,14 +91,14 @@ "runtime_config_changed", "runtime_base_changed" ], - "runtime_definition_digest": "sha256:e55918a4b972b772f8c170d6326edd065eb48fe08051ef52a2cee0b7c0fc39b8", - "component_layer_id": "sha256:2b2746ada5df57c6ce85bfba82ca709d7553c14a83e667e21a8d6e541117a9ed", + "runtime_definition_digest": "sha256:0eff517adb27fd2af9624a1be057cc7c6ba89d4402cdb8ff84dfc0cce8996faf", + "component_layer_id": "sha256:4da2e235cacbc5cbdfac74e126d11d30573b4707638ef164598f3928e0521c16", "exposure_assertion": { "kind": "whole_image_fingerprint_equals", - "reference_image_digest": "sha256:43140226dc11cde1dd1ca322462b891a00f29bf1e7181230a0bc6dd6eeb65b85", - "reference_source_revision": "5e6120ad1ec2d17bc4189dfbaf38894cb8f7dbe8", + "reference_image_digest": "sha256:26f3686b5b982d1883e83e64509ab30e35a56ece7bc9545d6350435cc72a0d7c", + "reference_source_revision": "6a460c2cf66bc9d286cbe4a5454571c392488c05", "reference_provenance": "local_reproduction", - "runtime_definition_digest": "sha256:e55918a4b972b772f8c170d6326edd065eb48fe08051ef52a2cee0b7c0fc39b8", + "runtime_definition_digest": "sha256:0eff517adb27fd2af9624a1be057cc7c6ba89d4402cdb8ff84dfc0cce8996faf", "files": [ { "path": "/usr/lib/x86_64-linux-gnu/ld-linux-x86-64.so.2", @@ -118,10 +118,68 @@ }, { "path": "/usr/local/bin/discovery", - "sha256": "sha256:180fc6ce80dd05b7080036542d315118129811cfb82cabd30f111a60f3ccd518" + "sha256": "sha256:dac501abb856fccde9425d0d449e7ec6146cbff9baca13986045047f98589a4a" } ], - "definition_digest": "sha256:d40df82e98a78adbe57f75066b72e18969d58f65dfc0821d92251f85810526e2" + "definition_digest": "sha256:3cfe5712674bd8fe6817b1ba5f9297f6bb1b88b4416561967da5edbe3cc92bf2" + } + }, + { + "vulnerability_id": "CVE-2026-19499", + "package": "libc6", + "installed_version": "2.41-12+deb13u4", + "severity": "High", + "status": "accepted_risk", + "owner": "@jeremi", + "rationale": "Debian classifies the Trixie issue as minor/no-DSA and has no Trixie fix; Grype reports wont-fix. The reviewed v0.33.0 Linux AMD64 Discovery local reproduction is exact rehearsal run 35711552030 at source 6a460c2cf66bc9d286cbe4a5454571c392488c05. Its executable neither imports nor contains strfmon or strfmon_l. The exposure report has no review-required dynamic lookup. No caller-controlled right-justified monetary-format width path was identified. A candidate must retain the complete ordered reference rootfs layers, the production OCI process contract, and the Syft-bound reviewed executable, loader, libc, libm and libpthread file digests. Reviewed on 2026-09-22; Debian fixes the issue only in forky and sid.", + "reviewed_at": "2026-09-22", + "expires_at": "2026-10-06", + "invalidation_triggers": [ + "candidate_image_identity_mismatch", + "candidate_rootfs_changed", + "component_layer_changed", + "expired", + "exposure_assertion_changed", + "exposure_assertion_false", + "exposure_assertion_unevaluable", + "fix_available", + "material_finding_changed", + "package_version_changed", + "rootfs_evidence_mismatch", + "runtime_config_changed", + "runtime_base_changed" + ], + "runtime_definition_digest": "sha256:0eff517adb27fd2af9624a1be057cc7c6ba89d4402cdb8ff84dfc0cce8996faf", + "component_layer_id": "sha256:4da2e235cacbc5cbdfac74e126d11d30573b4707638ef164598f3928e0521c16", + "exposure_assertion": { + "kind": "whole_image_fingerprint_equals", + "reference_image_digest": "sha256:26f3686b5b982d1883e83e64509ab30e35a56ece7bc9545d6350435cc72a0d7c", + "reference_source_revision": "6a460c2cf66bc9d286cbe4a5454571c392488c05", + "reference_provenance": "local_reproduction", + "runtime_definition_digest": "sha256:0eff517adb27fd2af9624a1be057cc7c6ba89d4402cdb8ff84dfc0cce8996faf", + "files": [ + { + "path": "/usr/lib/x86_64-linux-gnu/ld-linux-x86-64.so.2", + "sha256": "sha256:c8438e4fde1934e61c88311633f00949ff645d5c04cdb8671fa3d78164d2f307" + }, + { + "path": "/usr/lib/x86_64-linux-gnu/libc.so.6", + "sha256": "sha256:9792e3cbb541c8f44c7acf5f14f4022ea62998ecc787d326bed4d8b6547dfd92" + }, + { + "path": "/usr/lib/x86_64-linux-gnu/libm.so.6", + "sha256": "sha256:6d567d53e895273ca14a1f9dc164fc6c8d39aed2f60aa46a733c2784228915f3" + }, + { + "path": "/usr/lib/x86_64-linux-gnu/libpthread.so.0", + "sha256": "sha256:85e21f7dba0394411d00959176fd18b470e575b0b05f1f4f41e5636802ce0500" + }, + { + "path": "/usr/local/bin/discovery", + "sha256": "sha256:dac501abb856fccde9425d0d449e7ec6146cbff9baca13986045047f98589a4a" + } + ], + "definition_digest": "sha256:3cfe5712674bd8fe6817b1ba5f9297f6bb1b88b4416561967da5edbe3cc92bf2" } }, { @@ -131,7 +189,7 @@ "severity": "High", "status": "accepted_risk", "owner": "@jeremi", - "rationale": "Debian Trixie has no fixed package and Grype reports no fix. The reviewed v0.32.0 Linux AMD64 Discovery local reproduction from rehearsal run 34923868162 does not link libz or embed libz.so, gz_vacate, gzwrite, gzfwrite, gzprintf or gzvprintf in its executable. Its reviewed dynamic lookups do not select those functions, so no vulnerable stalled gzip-write followed by formatted-output path was identified. A candidate must retain the complete ordered reference rootfs layers, the production OCI process contract, and the Syft-bound reviewed executable, loader, libc, libm and libpthread file digests. Re-reviewed on 2026-09-22 with the evidence bindings unchanged: the release Dockerfiles still pin the reviewed runtime base, and Debian still lists no fixed zlib package for Trixie.", + "rationale": "Debian Trixie has no fixed package and Grype reports no fix. The reviewed v0.33.0 Linux AMD64 Discovery local reproduction is exact rehearsal run 35711552030 at source 6a460c2cf66bc9d286cbe4a5454571c392488c05. Its executable neither links libz nor contains libz.so, gz_vacate, gzwrite, gzfwrite, gzprintf or gzvprintf. The exposure report has no review-required dynamic lookup. No vulnerable stalled gzip-write followed by formatted-output path was identified. A candidate must retain the complete ordered reference rootfs layers, the production OCI process contract, and the Syft-bound reviewed executable, loader, libc, libm and libpthread file digests. Reviewed on 2026-09-22; Debian still lists no fixed zlib package for Trixie.", "reviewed_at": "2026-09-22", "expires_at": "2026-10-06", "invalidation_triggers": [ @@ -149,14 +207,14 @@ "runtime_config_changed", "runtime_base_changed" ], - "runtime_definition_digest": "sha256:e55918a4b972b772f8c170d6326edd065eb48fe08051ef52a2cee0b7c0fc39b8", + "runtime_definition_digest": "sha256:0eff517adb27fd2af9624a1be057cc7c6ba89d4402cdb8ff84dfc0cce8996faf", "component_layer_id": "sha256:e4ba966d7f0527dfe0fcb559e4e18d4da42c4e6beae924719255e0dedb554ed0", "exposure_assertion": { "kind": "whole_image_fingerprint_equals", - "reference_image_digest": "sha256:43140226dc11cde1dd1ca322462b891a00f29bf1e7181230a0bc6dd6eeb65b85", - "reference_source_revision": "5e6120ad1ec2d17bc4189dfbaf38894cb8f7dbe8", + "reference_image_digest": "sha256:26f3686b5b982d1883e83e64509ab30e35a56ece7bc9545d6350435cc72a0d7c", + "reference_source_revision": "6a460c2cf66bc9d286cbe4a5454571c392488c05", "reference_provenance": "local_reproduction", - "runtime_definition_digest": "sha256:e55918a4b972b772f8c170d6326edd065eb48fe08051ef52a2cee0b7c0fc39b8", + "runtime_definition_digest": "sha256:0eff517adb27fd2af9624a1be057cc7c6ba89d4402cdb8ff84dfc0cce8996faf", "files": [ { "path": "/usr/lib/x86_64-linux-gnu/ld-linux-x86-64.so.2", @@ -176,10 +234,10 @@ }, { "path": "/usr/local/bin/discovery", - "sha256": "sha256:180fc6ce80dd05b7080036542d315118129811cfb82cabd30f111a60f3ccd518" + "sha256": "sha256:dac501abb856fccde9425d0d449e7ec6146cbff9baca13986045047f98589a4a" } ], - "definition_digest": "sha256:d40df82e98a78adbe57f75066b72e18969d58f65dfc0821d92251f85810526e2" + "definition_digest": "sha256:3cfe5712674bd8fe6817b1ba5f9297f6bb1b88b4416561967da5edbe3cc92bf2" } } ] diff --git a/release/security/evidence-advisory-baseline.json b/release/security/evidence-advisory-baseline.json index 424bcfaeab..e6cd231629 100644 --- a/release/security/evidence-advisory-baseline.json +++ b/release/security/evidence-advisory-baseline.json @@ -27,7 +27,7 @@ "sha256:7db505d90756626f425c6c5468eca565c82f589b144ecaa4f411ad9bbf79e614" ], "application_layer_ids": [ - "sha256:cacbb2735b18b7e96265e0d53366b7795942fe69aa2ad0851848b2de360a08f5", + "sha256:b2c04963eb443c9d089d42a0e691f59e6a5143878b0f65f4b02d35392efcb71d", "sha256:5f70bf18a086007016e948b04aed3b82103a36bea41755b6cddfaf10ace3c6ef" ], "config": { @@ -51,7 +51,7 @@ ], "stop_signal": "" }, - "definition_digest": "sha256:1507821e5a8bff6ed880be012edebcd86e3f0aabc55af669516d240f4dcbd7a2" + "definition_digest": "sha256:e1dbda4bdbc0e26d9657176208a07176a1c1ff965acbb5144554fefea718492f" }, "policies": [ { @@ -74,7 +74,7 @@ "severity": "High", "status": "accepted_risk", "owner": "@jeremi", - "rationale": "Debian classifies the Trixie issue as minor/no-DSA and has no Trixie fix. The reviewed v0.32.0 Linux AMD64 Evidence local reproduction from rehearsal run 34923868162 imports or dynamically resolves none of the deprecated resolver-printing interfaces, including ns_printrrf, ns_printrr, ns_sprintrrf, ns_sprintrr and fp_nquery. Ordinary resolver initialization does not enter the vulnerable TSIG diagnostic-printing path. A candidate must retain the complete ordered reference rootfs layers, the production OCI process contract, and the Syft-bound reviewed executable, loader, libc, libm and libpthread file digests. Re-reviewed on 2026-09-22 with the evidence bindings unchanged: the release Dockerfiles still pin the reviewed runtime base, and Debian still records Trixie as vulnerable at this version under its no-DSA minor-issue tag, with a fixed glibc only in forky and sid.", + "rationale": "Debian classifies the Trixie issue as minor/no-DSA and has no Trixie fix. The reviewed v0.33.0 Linux AMD64 Evidence local reproduction is exact rehearsal run 35711552030 at source 6a460c2cf66bc9d286cbe4a5454571c392488c05. Its executable imports none of the deprecated resolver-printing interfaces, including ns_printrrf, ns_printrr, ns_sprintrrf, ns_sprintrr and fp_nquery. The one review-required nonconstant dlsym tail jump is SQLite's extension-symbol wrapper; governed SQL rejects load_extension and no first-party runtime caller enables or invokes SQLite C extension loading. Ordinary resolver initialization does not enter the vulnerable TSIG diagnostic-printing path. A candidate must retain the complete ordered reference rootfs layers, the production OCI process contract, and the Syft-bound reviewed executable, loader, libc, libm and libpthread file digests. Reviewed on 2026-09-22; Debian still records this Trixie version as vulnerable and fixes only forky and sid.", "reviewed_at": "2026-09-22", "expires_at": "2026-10-06", "invalidation_triggers": [ @@ -92,14 +92,14 @@ "runtime_config_changed", "runtime_base_changed" ], - "runtime_definition_digest": "sha256:1507821e5a8bff6ed880be012edebcd86e3f0aabc55af669516d240f4dcbd7a2", - "component_layer_id": "sha256:cacbb2735b18b7e96265e0d53366b7795942fe69aa2ad0851848b2de360a08f5", + "runtime_definition_digest": "sha256:e1dbda4bdbc0e26d9657176208a07176a1c1ff965acbb5144554fefea718492f", + "component_layer_id": "sha256:b2c04963eb443c9d089d42a0e691f59e6a5143878b0f65f4b02d35392efcb71d", "exposure_assertion": { "kind": "whole_image_fingerprint_equals", - "reference_image_digest": "sha256:af402e73cb104ee27039bf6c7b5cc5e7cbf37416449b91ff47086c6463b90483", - "reference_source_revision": "5e6120ad1ec2d17bc4189dfbaf38894cb8f7dbe8", + "reference_image_digest": "sha256:ee06a933127294e9c2175de5c0115f651ee748eb1a546faeba0c737f594c5222", + "reference_source_revision": "6a460c2cf66bc9d286cbe4a5454571c392488c05", "reference_provenance": "local_reproduction", - "runtime_definition_digest": "sha256:1507821e5a8bff6ed880be012edebcd86e3f0aabc55af669516d240f4dcbd7a2", + "runtime_definition_digest": "sha256:e1dbda4bdbc0e26d9657176208a07176a1c1ff965acbb5144554fefea718492f", "files": [ { "path": "/usr/lib/x86_64-linux-gnu/ld-linux-x86-64.so.2", @@ -119,10 +119,68 @@ }, { "path": "/usr/local/bin/evidence", - "sha256": "sha256:0cfb47fdadfcafda9d5ec1a05ade6df206ca38231c4860613966630ed27ab323" + "sha256": "sha256:2d19b3f3fe4ff403de2035b3c1e827870c95dbbd809dd52fb4661da361f64e61" } ], - "definition_digest": "sha256:112c919ffecd618e81a1defcc3b909ae6d5a70645c573eed26ce63272e6006d3" + "definition_digest": "sha256:39e550f9a2cb149b0d2863b260e784f45d070307c43c42b2cb6cee8ce10c137c" + } + }, + { + "vulnerability_id": "CVE-2026-19499", + "package": "libc6", + "installed_version": "2.41-12+deb13u4", + "severity": "High", + "status": "accepted_risk", + "owner": "@jeremi", + "rationale": "Debian classifies the Trixie issue as minor/no-DSA and has no Trixie fix; Grype reports wont-fix. The reviewed v0.33.0 Linux AMD64 Evidence local reproduction is exact rehearsal run 35711552030 at source 6a460c2cf66bc9d286cbe4a5454571c392488c05. Its executable neither imports nor contains strfmon or strfmon_l. The one review-required nonconstant dlsym tail jump is SQLite's extension-symbol wrapper; governed SQL rejects load_extension and no first-party runtime caller enables or invokes SQLite C extension loading. No caller-controlled right-justified monetary-format width path was identified. A candidate must retain the complete ordered reference rootfs layers, the production OCI process contract, and the Syft-bound reviewed executable, loader, libc, libm and libpthread file digests. Reviewed on 2026-09-22; Debian fixes the issue only in forky and sid.", + "reviewed_at": "2026-09-22", + "expires_at": "2026-10-06", + "invalidation_triggers": [ + "candidate_image_identity_mismatch", + "candidate_rootfs_changed", + "component_layer_changed", + "expired", + "exposure_assertion_changed", + "exposure_assertion_false", + "exposure_assertion_unevaluable", + "fix_available", + "material_finding_changed", + "package_version_changed", + "rootfs_evidence_mismatch", + "runtime_config_changed", + "runtime_base_changed" + ], + "runtime_definition_digest": "sha256:e1dbda4bdbc0e26d9657176208a07176a1c1ff965acbb5144554fefea718492f", + "component_layer_id": "sha256:b2c04963eb443c9d089d42a0e691f59e6a5143878b0f65f4b02d35392efcb71d", + "exposure_assertion": { + "kind": "whole_image_fingerprint_equals", + "reference_image_digest": "sha256:ee06a933127294e9c2175de5c0115f651ee748eb1a546faeba0c737f594c5222", + "reference_source_revision": "6a460c2cf66bc9d286cbe4a5454571c392488c05", + "reference_provenance": "local_reproduction", + "runtime_definition_digest": "sha256:e1dbda4bdbc0e26d9657176208a07176a1c1ff965acbb5144554fefea718492f", + "files": [ + { + "path": "/usr/lib/x86_64-linux-gnu/ld-linux-x86-64.so.2", + "sha256": "sha256:c8438e4fde1934e61c88311633f00949ff645d5c04cdb8671fa3d78164d2f307" + }, + { + "path": "/usr/lib/x86_64-linux-gnu/libc.so.6", + "sha256": "sha256:9792e3cbb541c8f44c7acf5f14f4022ea62998ecc787d326bed4d8b6547dfd92" + }, + { + "path": "/usr/lib/x86_64-linux-gnu/libm.so.6", + "sha256": "sha256:6d567d53e895273ca14a1f9dc164fc6c8d39aed2f60aa46a733c2784228915f3" + }, + { + "path": "/usr/lib/x86_64-linux-gnu/libpthread.so.0", + "sha256": "sha256:85e21f7dba0394411d00959176fd18b470e575b0b05f1f4f41e5636802ce0500" + }, + { + "path": "/usr/local/bin/evidence", + "sha256": "sha256:2d19b3f3fe4ff403de2035b3c1e827870c95dbbd809dd52fb4661da361f64e61" + } + ], + "definition_digest": "sha256:39e550f9a2cb149b0d2863b260e784f45d070307c43c42b2cb6cee8ce10c137c" } }, { @@ -132,7 +190,7 @@ "severity": "High", "status": "accepted_risk", "owner": "@jeremi", - "rationale": "Debian Trixie has no fixed package and Grype reports no fix. The reviewed v0.32.0 Linux AMD64 Evidence local reproduction from rehearsal run 34923868162 does not link libz or embed libz.so, gz_vacate, gzwrite, gzfwrite, gzprintf or gzvprintf in its executable. Its reviewed dynamic lookups do not select those functions, so no vulnerable stalled gzip-write followed by formatted-output path was identified. SQLite C extension-loading support is compiled in; its SQL entry point remains disabled and governed SQL explicitly denies load_extension, with no first-party runtime C-API loading or enabling caller identified. A candidate must retain the complete ordered reference rootfs layers, the production OCI process contract, and the Syft-bound reviewed executable, loader, libc, libm and libpthread file digests. Re-reviewed on 2026-09-22 with the evidence bindings unchanged: the release Dockerfiles still pin the reviewed runtime base, and Debian still lists no fixed zlib package for Trixie.", + "rationale": "Debian Trixie has no fixed package and Grype reports no fix. The reviewed v0.33.0 Linux AMD64 Evidence local reproduction is exact rehearsal run 35711552030 at source 6a460c2cf66bc9d286cbe4a5454571c392488c05. Its executable neither links libz nor contains libz.so, gz_vacate, gzwrite, gzfwrite, gzprintf or gzvprintf. The one review-required nonconstant dlsym tail jump is SQLite's extension-symbol wrapper; governed SQL rejects load_extension and no first-party runtime caller enables or invokes SQLite C extension loading. No vulnerable stalled gzip-write followed by formatted-output path was identified. A candidate must retain the complete ordered reference rootfs layers, the production OCI process contract, and the Syft-bound reviewed executable, loader, libc, libm and libpthread file digests. Reviewed on 2026-09-22; Debian still lists no fixed zlib package for Trixie.", "reviewed_at": "2026-09-22", "expires_at": "2026-10-06", "invalidation_triggers": [ @@ -150,14 +208,14 @@ "runtime_config_changed", "runtime_base_changed" ], - "runtime_definition_digest": "sha256:1507821e5a8bff6ed880be012edebcd86e3f0aabc55af669516d240f4dcbd7a2", + "runtime_definition_digest": "sha256:e1dbda4bdbc0e26d9657176208a07176a1c1ff965acbb5144554fefea718492f", "component_layer_id": "sha256:e4ba966d7f0527dfe0fcb559e4e18d4da42c4e6beae924719255e0dedb554ed0", "exposure_assertion": { "kind": "whole_image_fingerprint_equals", - "reference_image_digest": "sha256:af402e73cb104ee27039bf6c7b5cc5e7cbf37416449b91ff47086c6463b90483", - "reference_source_revision": "5e6120ad1ec2d17bc4189dfbaf38894cb8f7dbe8", + "reference_image_digest": "sha256:ee06a933127294e9c2175de5c0115f651ee748eb1a546faeba0c737f594c5222", + "reference_source_revision": "6a460c2cf66bc9d286cbe4a5454571c392488c05", "reference_provenance": "local_reproduction", - "runtime_definition_digest": "sha256:1507821e5a8bff6ed880be012edebcd86e3f0aabc55af669516d240f4dcbd7a2", + "runtime_definition_digest": "sha256:e1dbda4bdbc0e26d9657176208a07176a1c1ff965acbb5144554fefea718492f", "files": [ { "path": "/usr/lib/x86_64-linux-gnu/ld-linux-x86-64.so.2", @@ -177,10 +235,10 @@ }, { "path": "/usr/local/bin/evidence", - "sha256": "sha256:0cfb47fdadfcafda9d5ec1a05ade6df206ca38231c4860613966630ed27ab323" + "sha256": "sha256:2d19b3f3fe4ff403de2035b3c1e827870c95dbbd809dd52fb4661da361f64e61" } ], - "definition_digest": "sha256:112c919ffecd618e81a1defcc3b909ae6d5a70645c573eed26ce63272e6006d3" + "definition_digest": "sha256:39e550f9a2cb149b0d2863b260e784f45d070307c43c42b2cb6cee8ce10c137c" } } ] diff --git a/release/security/scheduling-advisory-baseline.json b/release/security/scheduling-advisory-baseline.json new file mode 100644 index 0000000000..467fce7104 --- /dev/null +++ b/release/security/scheduling-advisory-baseline.json @@ -0,0 +1,246 @@ +{ + "version": 4, + "service": "scheduling", + "runtime": { + "image": "gcr.io/distroless/cc-debian13:nonroot@sha256:c31ff9abcb1910f3ab25c7957bdaf0bfe12a01eb546e8df2282f1c8f682b606c", + "layer_ids": [ + "sha256:50abe06dfc0957e14cb8332ed242e8b884ef2563a9eb202e5172f243f62792f7", + "sha256:621c35e751a51a9a9dc3e80aa0b7fe8be2a93402ea6ccd307d30852cd7776cda", + "sha256:c8b007d0206e4b10ed4d3b3d99dfeab47c2648e82011989fd78a5731baf33fc3", + "sha256:bec7e6bb35e05d1284f28b10d2150c259717d91c658c4c10c08424bb9466caba", + "sha256:275a30dd8ce958b21daa9ad962c6fbc09f98306ee2f486b65c9075dc257b1412", + "sha256:4d049f83d9cf21d1f5cc0e11deaf36df02790d0e60c1a3829538fb4b61685368", + "sha256:af5aa97ebe6ce1604747ec1e21af7136ded391bcabe4acef882e718a87c86bcc", + "sha256:6f1cdceb6a3146f0ccb986521156bef8a422cdbb0863396f7f751f575ba308f4", + "sha256:bd3cdfae1d3fdd83a2231d608969b38b82349777c2fff9a7c12d54f8ac5c9b38", + "sha256:4cde6b0bb6f50a5f255eef7b2a42162c661cf776b803225dcac9a659e396bb6b", + "sha256:ad51d0769d16ba578106a177987dfe3d2e02c1668c852b795b2f6b024068242a", + "sha256:187cfc6d1e3e8a40a5e64653bcd3239c140807dcf1c09e48021178705a5a6139", + "sha256:f2392a9484bf6b18f06beaf705b994e31dbb2716c99cf7d03c9c495cd107f364", + "sha256:3a7299f559d987305122c7669fc3643095eb0955f8ff4a38c9430d54d0b4452e", + "sha256:ada8421c741188c83c2e6de96450043e65ce6233e7d2a1d84cd789a0ad97f420", + "sha256:c0e409312adc366898967307565f692bb33d43a439d3de48e27d14b742389725", + "sha256:e4ba966d7f0527dfe0fcb559e4e18d4da42c4e6beae924719255e0dedb554ed0", + "sha256:1f5d28bd51650f429293f7730ede274b81dc0744aa918bc887133c4ad610258c", + "sha256:6e18ad80f3d64a8cbbcd1ff2e8a0d5ce7282cf664e816b86183a59d30a618e8a", + "sha256:c16b2ec4b1493bad1b1de23d659c899e60abb166bda756d02792f0a03ba54a43", + "sha256:7db505d90756626f425c6c5468eca565c82f589b144ecaa4f411ad9bbf79e614" + ], + "application_layer_ids": [ + "sha256:8353c69184dcf0e3edb575df9eacb53343c651d78b3dbbc30efaefdd1c1cdd3c", + "sha256:5f70bf18a086007016e948b04aed3b82103a36bea41755b6cddfaf10ace3c6ef" + ], + "config": { + "user": "65532", + "entrypoint": [ + "/usr/local/bin/scheduling" + ], + "command": [ + "--runtime-config", + "/etc/registry-scheduling/runtime.yaml", + "serve" + ], + "working_dir": "/var/lib/registry-scheduling", + "environment": [ + "PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin", + "SSL_CERT_FILE=/etc/ssl/certs/ca-certificates.crt" + ], + "healthcheck": null, + "args_escaped": true, + "exposed_ports": [ + "8105/tcp" + ], + "stop_signal": "" + }, + "definition_digest": "sha256:fb6df3af0cec28a46e2f05b77314cccacbf2c23b6f1e5e6e4eb433e2e0736a5c" + }, + "policies": [ + { + "tool": "zizmor", + "minimum_severity": "high", + "action": "block_unreviewed" + }, + { + "tool": "grype", + "minimum_severity": "high", + "action": "block_unreviewed", + "block_fixable": true + } + ], + "exceptions": [ + { + "vulnerability_id": "CVE-2026-5435", + "package": "libc6", + "installed_version": "2.41-12+deb13u4", + "severity": "High", + "status": "accepted_risk", + "owner": "@jeremi", + "reviewed_at": "2026-09-22", + "expires_at": "2026-10-06", + "invalidation_triggers": [ + "candidate_image_identity_mismatch", + "candidate_rootfs_changed", + "component_layer_changed", + "expired", + "exposure_assertion_changed", + "exposure_assertion_false", + "exposure_assertion_unevaluable", + "fix_available", + "material_finding_changed", + "package_version_changed", + "rootfs_evidence_mismatch", + "runtime_base_changed", + "runtime_config_changed" + ], + "runtime_definition_digest": "sha256:fb6df3af0cec28a46e2f05b77314cccacbf2c23b6f1e5e6e4eb433e2e0736a5c", + "component_layer_id": "sha256:8353c69184dcf0e3edb575df9eacb53343c651d78b3dbbc30efaefdd1c1cdd3c", + "rationale": "Debian classifies the Trixie issue as minor/no-DSA and has no Trixie fix. The reviewed v0.33.0 Linux AMD64 Scheduling local reproduction is exact rehearsal run 35711552030 at source 6a460c2cf66bc9d286cbe4a5454571c392488c05. Its executable imports none of the deprecated resolver-printing interfaces, including ns_printrrf, ns_printrr, ns_sprintrrf, ns_sprintrr and fp_nquery. The exposure report has no review-required dynamic lookup. Ordinary resolver initialization does not enter the vulnerable TSIG diagnostic-printing path. A candidate must retain the complete ordered reference rootfs layers, the production OCI process contract, and the Syft-bound reviewed executable, loader, libc, libm and libpthread file digests. Reviewed on 2026-09-22; Debian still records this Trixie version as vulnerable and fixes only forky and sid.", + "exposure_assertion": { + "kind": "whole_image_fingerprint_equals", + "reference_image_digest": "sha256:74f49c852500729542a73b6e057fe201f13b9f0aae5f51ba775e72a2f4903331", + "reference_source_revision": "6a460c2cf66bc9d286cbe4a5454571c392488c05", + "reference_provenance": "local_reproduction", + "runtime_definition_digest": "sha256:fb6df3af0cec28a46e2f05b77314cccacbf2c23b6f1e5e6e4eb433e2e0736a5c", + "files": [ + { + "path": "/usr/lib/x86_64-linux-gnu/ld-linux-x86-64.so.2", + "sha256": "sha256:c8438e4fde1934e61c88311633f00949ff645d5c04cdb8671fa3d78164d2f307" + }, + { + "path": "/usr/lib/x86_64-linux-gnu/libc.so.6", + "sha256": "sha256:9792e3cbb541c8f44c7acf5f14f4022ea62998ecc787d326bed4d8b6547dfd92" + }, + { + "path": "/usr/lib/x86_64-linux-gnu/libm.so.6", + "sha256": "sha256:6d567d53e895273ca14a1f9dc164fc6c8d39aed2f60aa46a733c2784228915f3" + }, + { + "path": "/usr/lib/x86_64-linux-gnu/libpthread.so.0", + "sha256": "sha256:85e21f7dba0394411d00959176fd18b470e575b0b05f1f4f41e5636802ce0500" + }, + { + "path": "/usr/local/bin/scheduling", + "sha256": "sha256:16cd6ac6345d92f61d9f9f31671c37aaf93748a8438d8f0e47d34f54575311cd" + } + ], + "definition_digest": "sha256:314e66a3557d845286963ce50e8fd709cf1ef5607ba989fe530e12515d8e12c7" + } + }, + { + "vulnerability_id": "CVE-2026-19499", + "package": "libc6", + "installed_version": "2.41-12+deb13u4", + "severity": "High", + "status": "accepted_risk", + "owner": "@jeremi", + "reviewed_at": "2026-09-22", + "expires_at": "2026-10-06", + "invalidation_triggers": [ + "candidate_image_identity_mismatch", + "candidate_rootfs_changed", + "component_layer_changed", + "expired", + "exposure_assertion_changed", + "exposure_assertion_false", + "exposure_assertion_unevaluable", + "fix_available", + "material_finding_changed", + "package_version_changed", + "rootfs_evidence_mismatch", + "runtime_base_changed", + "runtime_config_changed" + ], + "runtime_definition_digest": "sha256:fb6df3af0cec28a46e2f05b77314cccacbf2c23b6f1e5e6e4eb433e2e0736a5c", + "component_layer_id": "sha256:8353c69184dcf0e3edb575df9eacb53343c651d78b3dbbc30efaefdd1c1cdd3c", + "rationale": "Debian classifies the Trixie issue as minor/no-DSA and has no Trixie fix; Grype reports wont-fix. The reviewed v0.33.0 Linux AMD64 Scheduling local reproduction is exact rehearsal run 35711552030 at source 6a460c2cf66bc9d286cbe4a5454571c392488c05. Its executable neither imports nor contains strfmon or strfmon_l. The exposure report has no review-required dynamic lookup. No caller-controlled right-justified monetary-format width path was identified. A candidate must retain the complete ordered reference rootfs layers, the production OCI process contract, and the Syft-bound reviewed executable, loader, libc, libm and libpthread file digests. Reviewed on 2026-09-22; Debian fixes the issue only in forky and sid.", + "exposure_assertion": { + "kind": "whole_image_fingerprint_equals", + "reference_image_digest": "sha256:74f49c852500729542a73b6e057fe201f13b9f0aae5f51ba775e72a2f4903331", + "reference_source_revision": "6a460c2cf66bc9d286cbe4a5454571c392488c05", + "reference_provenance": "local_reproduction", + "runtime_definition_digest": "sha256:fb6df3af0cec28a46e2f05b77314cccacbf2c23b6f1e5e6e4eb433e2e0736a5c", + "files": [ + { + "path": "/usr/lib/x86_64-linux-gnu/ld-linux-x86-64.so.2", + "sha256": "sha256:c8438e4fde1934e61c88311633f00949ff645d5c04cdb8671fa3d78164d2f307" + }, + { + "path": "/usr/lib/x86_64-linux-gnu/libc.so.6", + "sha256": "sha256:9792e3cbb541c8f44c7acf5f14f4022ea62998ecc787d326bed4d8b6547dfd92" + }, + { + "path": "/usr/lib/x86_64-linux-gnu/libm.so.6", + "sha256": "sha256:6d567d53e895273ca14a1f9dc164fc6c8d39aed2f60aa46a733c2784228915f3" + }, + { + "path": "/usr/lib/x86_64-linux-gnu/libpthread.so.0", + "sha256": "sha256:85e21f7dba0394411d00959176fd18b470e575b0b05f1f4f41e5636802ce0500" + }, + { + "path": "/usr/local/bin/scheduling", + "sha256": "sha256:16cd6ac6345d92f61d9f9f31671c37aaf93748a8438d8f0e47d34f54575311cd" + } + ], + "definition_digest": "sha256:314e66a3557d845286963ce50e8fd709cf1ef5607ba989fe530e12515d8e12c7" + } + }, + { + "vulnerability_id": "CVE-2026-85091", + "package": "zlib1g", + "installed_version": "1:1.3.dfsg+really1.3.1-1+b1", + "severity": "High", + "status": "accepted_risk", + "owner": "@jeremi", + "reviewed_at": "2026-09-22", + "expires_at": "2026-10-06", + "invalidation_triggers": [ + "candidate_image_identity_mismatch", + "candidate_rootfs_changed", + "component_layer_changed", + "expired", + "exposure_assertion_changed", + "exposure_assertion_false", + "exposure_assertion_unevaluable", + "fix_available", + "material_finding_changed", + "package_version_changed", + "rootfs_evidence_mismatch", + "runtime_base_changed", + "runtime_config_changed" + ], + "runtime_definition_digest": "sha256:fb6df3af0cec28a46e2f05b77314cccacbf2c23b6f1e5e6e4eb433e2e0736a5c", + "component_layer_id": "sha256:e4ba966d7f0527dfe0fcb559e4e18d4da42c4e6beae924719255e0dedb554ed0", + "rationale": "Debian Trixie has no fixed package and Grype reports no fix. The reviewed v0.33.0 Linux AMD64 Scheduling local reproduction is exact rehearsal run 35711552030 at source 6a460c2cf66bc9d286cbe4a5454571c392488c05. Its executable neither links libz nor contains libz.so, gz_vacate, gzwrite, gzfwrite, gzprintf or gzvprintf. The exposure report has no review-required dynamic lookup. No vulnerable stalled gzip-write followed by formatted-output path was identified. A candidate must retain the complete ordered reference rootfs layers, the production OCI process contract, and the Syft-bound reviewed executable, loader, libc, libm and libpthread file digests. Reviewed on 2026-09-22; Debian still lists no fixed zlib package for Trixie.", + "exposure_assertion": { + "kind": "whole_image_fingerprint_equals", + "reference_image_digest": "sha256:74f49c852500729542a73b6e057fe201f13b9f0aae5f51ba775e72a2f4903331", + "reference_source_revision": "6a460c2cf66bc9d286cbe4a5454571c392488c05", + "reference_provenance": "local_reproduction", + "runtime_definition_digest": "sha256:fb6df3af0cec28a46e2f05b77314cccacbf2c23b6f1e5e6e4eb433e2e0736a5c", + "files": [ + { + "path": "/usr/lib/x86_64-linux-gnu/ld-linux-x86-64.so.2", + "sha256": "sha256:c8438e4fde1934e61c88311633f00949ff645d5c04cdb8671fa3d78164d2f307" + }, + { + "path": "/usr/lib/x86_64-linux-gnu/libc.so.6", + "sha256": "sha256:9792e3cbb541c8f44c7acf5f14f4022ea62998ecc787d326bed4d8b6547dfd92" + }, + { + "path": "/usr/lib/x86_64-linux-gnu/libm.so.6", + "sha256": "sha256:6d567d53e895273ca14a1f9dc164fc6c8d39aed2f60aa46a733c2784228915f3" + }, + { + "path": "/usr/lib/x86_64-linux-gnu/libpthread.so.0", + "sha256": "sha256:85e21f7dba0394411d00959176fd18b470e575b0b05f1f4f41e5636802ce0500" + }, + { + "path": "/usr/local/bin/scheduling", + "sha256": "sha256:16cd6ac6345d92f61d9f9f31671c37aaf93748a8438d8f0e47d34f54575311cd" + } + ], + "definition_digest": "sha256:314e66a3557d845286963ce50e8fd709cf1ef5607ba989fe530e12515d8e12c7" + } + } + ] +} From e062d38e6e6bae5f1f33a4a7f9e4246ca8f20be5 Mon Sep 17 00:00:00 2001 From: Jeremi Joslin Date: Tue, 22 Sep 2026 17:43:44 +0700 Subject: [PATCH 11/11] chore(release): prepare v0.33.0 documentation archive Signed-off-by: Jeremi Joslin --- docs/site/src/data/archive-lock.yaml | 4 +++ docs/site/src/data/docsets.yaml | 31 +++++++++++++++++ docs/site/src/data/repo-docs.yaml | 51 ++++++++++++++++++++++++++++ 3 files changed, 86 insertions(+) diff --git a/docs/site/src/data/archive-lock.yaml b/docs/site/src/data/archive-lock.yaml index 1842c3a6a5..603e2bb4b6 100644 --- a/docs/site/src/data/archive-lock.yaml +++ b/docs/site/src/data/archive-lock.yaml @@ -138,3 +138,7 @@ archives: bundle_sha256: a1e6c6d3108d47da268cbab1916a28f89f98f2a28246b2bd89aa339bccb07591 root_tree_sha256: affbaa9672f920df18ec5d114b30366b37240c0bad74d27f1532fe3100c0a823 version_tree_sha256: 0a034d4142cfbc22e95985aab9b3b6afc98e32991593b28ad82048a882f749c3 + v0.33.0: + bundle_sha256: f28fa4f802e845a0d1234fdf31d49048d41b4a08885e5c094a8f81a9e7af3b05 + root_tree_sha256: 35a337adae76b5ac1e8fab409eca1f711432ceb5c5ea21c6c9c0880a30a63fa7 + version_tree_sha256: 02f7774096d3c295c1552b9cdb18e27de6f9b5f20ff7d36068ac4187de792ea4 diff --git a/docs/site/src/data/docsets.yaml b/docs/site/src/data/docsets.yaml index 56ea023b20..31a0f4dc7b 100644 --- a/docs/site/src/data/docsets.yaml +++ b/docs/site/src/data/docsets.yaml @@ -32,6 +32,37 @@ docsets: registry-render: version: main source (unreleased) ref: HEAD + - id: v0.33.0 + label: v0.33.0 + path: /v/0.33.0/ + status: archived + availability: candidate + source: registry-stack-v0.33.0 + repo_docs_source: monorepo + published_at: 2026-09-22 + description: Registry Stack v0.33.0 beta-45 candidate documentation set. + products: + registry-stack: + version: v0.33.0 + ref: v0.33.0 + registry-relay: + version: v0.33.0 + ref: v0.33.0 + registry-manifest: + version: v0.33.0 + ref: v0.33.0 + registry-evidence: + version: v0.33.0 + ref: v0.33.0 + registry-casework: + version: v0.33.0 + ref: v0.33.0 + registry-scheduling: + version: v0.33.0 + ref: v0.33.0 + registry-render: + version: v0.33.0 + ref: v0.33.0 - id: v0.32.0 label: v0.32.0 path: /v/0.32.0/ diff --git a/docs/site/src/data/repo-docs.yaml b/docs/site/src/data/repo-docs.yaml index 72fd410ff2..5666f847c0 100644 --- a/docs/site/src/data/repo-docs.yaml +++ b/docs/site/src/data/repo-docs.yaml @@ -67,6 +67,9 @@ repos: - docsets: [ v0.32.0 ] standards_referenced: [ govstack-digital-registries, sdmx, openapi, json-schema, shacl, json-ld ] last_reviewed: unreviewed + - docsets: [ v0.33.0 ] + standards_referenced: [ govstack-digital-registries, sdmx, openapi, json-schema, shacl, json-ld ] + last_reviewed: unreviewed description: Approved Relay V2 product concept covering the registry contract, the compiler, the read-only source boundary, and the acceptance set. - src: products/relay-v2/STANDARDS-ALIGNMENT.md dest: products/registry-relay/standards-alignment @@ -92,6 +95,9 @@ repos: - docsets: [ v0.32.0 ] standards_referenced: [ govstack-digital-registries, sdmx, openapi, json-schema, shacl, json-ld ] last_reviewed: unreviewed + - docsets: [ v0.33.0 ] + standards_referenced: [ govstack-digital-registries, sdmx, openapi, json-schema, shacl, json-ld ] + last_reviewed: unreviewed description: Maintained directional mapping from Relay V2 to the pinned GovStack drafts and the aligned SDMX read subset. Makes no conformance claim. registry-manifest: @@ -128,6 +134,9 @@ repos: - docsets: [ v0.32.0 ] standards_referenced: [ dcat, bregdcat-ap, cpsv-ap, ogc-api-records, shacl, skos, json-schema, json-ld, odrl, sp-dci, w3c-did, prov-o, govstack-digital-registries ] last_reviewed: unreviewed + - docsets: [ v0.33.0 ] + standards_referenced: [ dcat, bregdcat-ap, cpsv-ap, ogc-api-records, shacl, skos, json-schema, json-ld, odrl, sp-dci, w3c-did, prov-o, govstack-digital-registries ] + last_reviewed: unreviewed description: Operator and integrator documentation for Registry Manifest. - src: products/manifest/docs/validate-and-render.md archive_src: docs/validate-and-render.md @@ -156,6 +165,9 @@ repos: - docsets: [ v0.32.0 ] standards_referenced: [ dcat, bregdcat-ap, cpsv-ap, ogc-api-records, shacl, skos, json-schema, json-ld, odrl ] last_reviewed: unreviewed + - docsets: [ v0.33.0 ] + standards_referenced: [ dcat, bregdcat-ap, cpsv-ap, ogc-api-records, shacl, skos, json-schema, json-ld, odrl ] + last_reviewed: unreviewed - src: products/manifest/docs/profile-fixtures.md archive_src: docs/profile-fixtures.md dest: products/registry-manifest/profile-fixtures @@ -180,6 +192,9 @@ repos: - docsets: [ v0.32.0 ] standards_referenced: [ sp-dci ] last_reviewed: unreviewed + - docsets: [ v0.33.0 ] + standards_referenced: [ sp-dci ] + last_reviewed: unreviewed - src: products/manifest/docs/reference.md archive_src: docs/reference.md dest: products/registry-manifest/reference @@ -207,6 +222,9 @@ repos: - docsets: [ v0.32.0 ] standards_referenced: [ dcat, bregdcat-ap, cpsv-ap, ogc-api-records, shacl, skos, json-schema, json-ld, cccev, odrl, w3c-did ] last_reviewed: unreviewed + - docsets: [ v0.33.0 ] + standards_referenced: [ dcat, bregdcat-ap, cpsv-ap, ogc-api-records, shacl, skos, json-schema, json-ld, cccev, odrl, w3c-did ] + last_reviewed: unreviewed - src: products/manifest/docs/itb-semic-validation.md dest: products/registry-manifest/itb-semic-validation label: ITB and SEMIC validation @@ -231,6 +249,9 @@ repos: - docsets: [ v0.32.0 ] standards_referenced: [ dcat, bregdcat-ap, shacl, skos, json-schema, json-ld ] last_reviewed: unreviewed + - docsets: [ v0.33.0 ] + standards_referenced: [ dcat, bregdcat-ap, shacl, skos, json-schema, json-ld ] + last_reviewed: unreviewed registry-evidence: label: Evidence Gateway remote: https://github.com/registrystack/registry-stack @@ -263,6 +284,9 @@ repos: - docsets: [ v0.32.0 ] standards_referenced: [ openapi, json-schema, sd-jwt-vc ] last_reviewed: unreviewed + - docsets: [ v0.33.0 ] + standards_referenced: [ openapi, json-schema, sd-jwt-vc ] + last_reviewed: unreviewed description: Operator and integrator documentation for Evidence Gateway, the minimum-disclosure assertion service. - src: products/evidence/CONCEPT.md dest: products/registry-evidence/concept @@ -288,6 +312,9 @@ repos: - docsets: [ v0.32.0 ] standards_referenced: [ cccev, json-schema, openapi, sd-jwt-vc ] last_reviewed: unreviewed + - docsets: [ v0.33.0 ] + standards_referenced: [ cccev, json-schema, openapi, sd-jwt-vc ] + last_reviewed: unreviewed description: Approved Version 1 product concept covering the boundary, data model, trust and privacy invariants, native API, and acceptance set. - src: products/evidence/reference/authoring-projects/CONFIG.md dest: products/registry-evidence/authoring-form @@ -313,6 +340,9 @@ repos: - docsets: [ v0.32.0 ] standards_referenced: [ json-schema, openapi, sd-jwt-vc ] last_reviewed: unreviewed + - docsets: [ v0.33.0 ] + standards_referenced: [ json-schema, openapi, sd-jwt-vc ] + last_reviewed: unreviewed description: Complete reference for the editable Evidence authoring project, its validation layers, local key material, and access policies. - src: products/evidence/reference/authoring-projects/SOURCE-EXPORT.md dest: products/registry-evidence/source-exports @@ -338,6 +368,9 @@ repos: - docsets: [ v0.32.0 ] standards_referenced: [] last_reviewed: unreviewed + - docsets: [ v0.33.0 ] + standards_referenced: [] + last_reviewed: unreviewed description: Optional native source import, customized updates, provenance and interrupted transaction recovery. - src: products/evidence/reference/request-adapter/deployment-projects/SOURCE-CREDENTIAL-ROTATION.md dest: products/registry-evidence/source-credential-rotation @@ -363,6 +396,9 @@ repos: - docsets: [ v0.32.0 ] standards_referenced: [] last_reviewed: unreviewed + - docsets: [ v0.33.0 ] + standards_referenced: [] + last_reviewed: unreviewed description: Rotate source credentials with explicit overlap, bounded OAuth caches and verified restart. - src: products/evidence/FIRST-CURL-TEST.md dest: products/registry-evidence/first-curl-test @@ -388,6 +424,9 @@ repos: - docsets: [ v0.32.0 ] standards_referenced: [] last_reviewed: unreviewed + - docsets: [ v0.33.0 ] + standards_referenced: [] + last_reviewed: unreviewed description: Deterministic local curl checkpoint against the Evidence Gateway server with a mock source and an in-memory test JWKS. - src: products/evidence/SOURCE-TESTING.md dest: products/registry-evidence/source-testing @@ -413,6 +452,9 @@ repos: - docsets: [ v0.32.0 ] standards_referenced: [ sd-jwt-vc ] last_reviewed: unreviewed + - docsets: [ v0.33.0 ] + standards_referenced: [ sd-jwt-vc ] + last_reviewed: unreviewed description: Source-testing contract with the deterministic mock matrix, opt-in public demo smoke tests, and credential handling rules. - src: products/evidence/SD-JWT-VC-DEMO.md dest: products/registry-evidence/sd-jwt-vc-demo @@ -438,6 +480,9 @@ repos: - docsets: [ v0.32.0 ] standards_referenced: [ sd-jwt-vc ] last_reviewed: unreviewed + - docsets: [ v0.33.0 ] + standards_referenced: [ sd-jwt-vc ] + last_reviewed: unreviewed description: Deterministic local demo that issues one assertion in both later-verifiable formats and re-verifies the credential offline. - src: products/evidence/OPERATOR-CONTRACT.md dest: products/registry-evidence/operator-contract @@ -463,6 +508,9 @@ repos: - docsets: [ v0.32.0 ] standards_referenced: [ openapi, sd-jwt-vc ] last_reviewed: unreviewed + - docsets: [ v0.33.0 ] + standards_referenced: [ openapi, sd-jwt-vc ] + last_reviewed: unreviewed description: Supported deployment shape, requester authority and purpose duties, required configuration and secrets, and readiness, audit, and key obligations. - src: products/evidence/PERFORMANCE.md dest: products/registry-evidence/performance @@ -488,4 +536,7 @@ repos: - docsets: [ v0.32.0 ] standards_referenced: [] last_reviewed: unreviewed + - docsets: [ v0.33.0 ] + standards_referenced: [] + last_reviewed: unreviewed description: Measured baseline of the audit-durability throughput trade and the deferred work that would recover most of the cost.