Dev build 2026-08-01-9ff3f027c1ef

Dev build 2026-08-01-9ff3f027c1ef

Built from 9ff3f027c1ef on main.
Base stable: v0.7.6
Compare: 73d5fd0...9ff3f02

Fixed

• Escape raw string delimiter in checksum-rejection test
• Add missing match-arm comma in plugin catalog
• Align plugin catalog with herdr-plugins main
• Compile checksum grammar on Windows
• Parse SHA256SUMS lines without regex backtracking
• Parse the repository slug without regex backtracking
• Reverify existing native binary on reinstall
• Align package license with Cargo metadata
• Align Linux release targets with musl builds

Maintenance

• Harden preview input handling and release tooling gaps
• Lock fail-closed checksum rejection at manifest parse
• Disable fragile Windows Zig cache reuse
• Execute and retire Windows Zig cache fix
• Stage deterministic Windows Zig cache fix
• Use valid SHA-256 fixture
• Force-remove modified preview bootstrap
• Remove forbidden literals from preview ownership patch
• Execute and retire preview ownership patch
• Stage downstream preview ownership patch
• Complete the required Rust checksum patch
• Accept checksummed assets in the live manifest schema
• Execute and retire required Rust checksum patch
• Stage required Rust checksum patch
• Reject stale existing native binary
• Import the live manifest URL without aliasing
• Make quality autofix use release metadata SSOT
• Drop unused manifest URL constants
• Align autofix metadata sync with derived npm version
• Execute and retire final distribution patch
• Stage final distribution hardening patch
• Cover checksum and atomic replacement
• Provision pinned Zig for hardening gate
• Run npm path tests on binary targets
• Run and retire checkout hardening patch
• Stage one-shot release-chain checkout patch
• Publish only after complete portable release
• Cover four-target formula generation
• Cover atomic checksummed manifest promotion
• Cover distribution metadata invariants
• Enforce complete checksummed distribution metadata

Other

• Merge pull request #102 from OnlineChefGroep/settings/plugins-catalog-pra
• Merge pull request #101 from OnlineChefGroep/dist/harden-release-chain
• Scope release token, fix checksum matrix count, and restore stable docs
• Move preview under downstream ownership
• Require checksums for Rust-managed downloads
• Finish verified multi-channel release hardening
• Verify checksums before atomic replacement
• Atomically harden release promotion and managed updates
• Ship v0.7.6 on four targets
• Generate verified four-target formula
• Make stable manifest promotion complete and checksummed
• Allow Linux and macOS installs
• Verify checksums and support four targets
• Centralize release target metadata