Skip to content

session-peer v1.4.1

Latest
Latest

Choose a tag to compare

View all tags
@abruption abruption released this 03 Nov 00:31
Immutable release. Only release title and notes can be modified.
v1.4.1
6e9efda
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

v1.4.1 maintenance release preparation

Prepared on 2026-11-03 against published v1.4.0. At this dated checkpoint, v1.4.1 is an unpublished candidate. The integrated maintenance base is 192b77ec4a168859c26fe886ff42901f24060608, before version preparation, not the final release commit. The owner authorized the release; normal repository protections, current-head review and final protected-main CI still apply.

Scope

  • PR #366 adopted the separately published skill v0.5.0; PR #369 synchronized the compatibility copy to v0.5.1 and added four-language v1.4.0 publication records and current status guidance. This patch packages that documentation and compatibility-copy maintenance. Runtime behavior is unchanged apart from the version value; no runtime defect is claimed fixed.
  • The prospective SKILL.md support asset is the published skill v0.5.1, source 95cf5e1dd92654775b2f0ea86c1cb4b6107f49c3, 31688 UTF-8 bytes, SHA-256 922512869577cc3d8b9d305641479e2dd659f0e669298584ca06f1ca15de1d31. Metadata remains skill 0.5.1 / minimum runtime 0.9.1 / documented full coverage 1.4.0; receiver codexBin floor remains 1.0.1. Coverage is not raised to 1.4.1 merely because this runtime patch carries the copy. The skill release API reports immutable=false; exact source/hash pinning does not imply GitHub-enforced immutability.
  • The immutable runtime v1.4.0 SKILL.md asset remains skill v0.4.1. Existing tags, assets and historical preparation/publication records are preserved. A runtime package upgrade does not update independently managed skills or other global MCP environments, and does not restart receivers or deploy Node Control services.
  • #370 records an unbounded read in a test fixture under injected output failure; the original CI stall cause remains unconfirmed. This patch does not fix #370. #367 paired-device aggregate discovery and Long-term research remain separate. No new feature, live Native/SSH, Windows 3.14/free-threaded Python, consumption/ACK or platform-support qualification is claimed.

Core Python 3.9, MCP Python 3.10+ and SDK requirement mcp>=1.30,<2 are unchanged. The support skill stays outside wheel/sdist.

Publication gates

Require successful checks/reviews of the exact preparation head and final protected-main source. Build and verify all 7 frozen assets, SHA256SUMS, release-provenance.json and authenticated attestations against the exact tag/source, then run dependency audits and fresh wheel/sdist installation checks. These are pending release gates, not results asserted by this preparation. Required human PyPI environment approval remains even when the private login/binding recheck is skipped; do not bypass protections or move a published tag.

Freeze these dated notes and add actual GitHub/PyPI publication evidence separately. See the v1.4.0 publication record for the previous release. Publication and operational rollout remain separate.

Assets 10
Loading