Skip to content

v0.5.3

Latest

Choose a tag to compare

@acgetchell acgetchell released this 11 Nov 22:22
Immutable release. Only release title and notes can be modified.
7165ed5

Merged Pull Requests

  • Adopt research-repo-tools v0.2.8 and parallelize native CI #343
  • Enforce release state invariants and macro hygiene #342
  • Resume and reuse verified release benchmark acquisitions #335
  • Separate benchmark timing from routine CI #334
  • Bump the github-actions group with 5 updates #332

Added

  • Resume and reuse verified release benchmark acquisitions #335
    7c3a362

feat: resume and reuse verified release benchmark acquisitions

  • Adopt declared API availability and shared progress while retaining the full
    scientific workload catalog and paired LU peer context.

  • Add explicit checkpoint recovery and independent owner records so reports,
    README publication, and release archives reuse the original acquisition.

  • Require owner-selected candidate evidence before tagging and preserve its
    full acceptance across hosted attachment and Cargo deployment approval.

  • Allow explicitly reviewed native-CI renewal without replacing immutable
    benchmark assets, and keep README outside current compiler inputs.

  • Pin research-repo-tools at 055353c630604b1ae3438c1eaf534ba85e067a7e for
    downstream rehearsal while enforcing published tooling at release gates.

  • Automate release evidence reuse and parallelize CI 4f57700

    • Discover the original acquisition owner and authenticated tag-push draft
      receipt automatically while retaining explicit recovery inputs.
    • Align release commands and documentation around pre-tag evidence review,
      automatic draft preparation, and retained-evidence publication dispatch.
    • Require an existing reviewed acceptance before tagging, staging, or
      publishing, and preserve exact release and artifact identities on retries.
    • Overlap independent Rust and Python validation after policy checks, retain
      a serial fallback, and cache managed Cargo compilation separately from
      verified tool installations.
    • Adopt research-repo-tools at the authorized cd8594f development revision.

Changed

  • Separate benchmark timing from routine CI #334
    f520e2f

    • Run full exact Criterion timing on demand and retain untimed benchmark
      validation in routine CI.
    • Use research-repo-tools v0.2.6 for setup, Semgrep fixtures, and release
      tooling, and remove the temporary scanner adapter.
    • Refresh the managed tools and dependency locks while retaining the
      Intel macOS Semgrep wheel.

Dependencies

  • Bump the github-actions group with 5 updates #332
    ab3b8a0

chore(deps): bump the github-actions group with 5 updates

Bumps the github-actions group with 5 updates:

Package From To
github/codeql-action/upload-sarif 4.39.0 4.39.1
astral-sh/setup-uv 10.3.0 10.3.2
github/codeql-action/init 4.39.0 4.39.1
github/codeql-action/analyze 4.39.0 4.39.1
rust-lang/crates-io-auth-action 1.0.5 1.0.6

Updates github/codeql-action/upload-sarif from 4.39.0 to 4.39.1

Updates astral-sh/setup-uv from 10.3.0 to 10.3.2

Updates github/codeql-action/init from 4.39.0 to 4.39.1

Updates github/codeql-action/analyze from 4.39.0 to 4.39.1

Updates rust-lang/crates-io-auth-action from 1.0.5 to 1.0.6

Documentation

  • Assign release validation to the release tracker 6cb4fbc

    • Close the completed release-flow and validation-graph implementation issues
      on merge and keep remaining release validation and readiness under #333.
  • Add runnable examples and link interval proofs 647184f

    • Show provisional column selection, interval solution enclosures and
      fallback, and exact rational objective evaluation in runnable examples.
    • Link interval and rounding rustdoc to the scientific references and
      proofs, and update the README link inventory.
    • Include the staged itoa 1.0.19 lockfile refresh.

Fixed

  • Avoid Windows actionlint deadlock in release preparation 6d77e15

    • Execute the draft writer from a runner-owned script through isolated Python,
      preserving the exact tag, attempt, artifact and draft identity checks.
    • Parse workflow scripts as Bash only for the applicable shell steps while
      retaining managed Zizmor execution enforcement.
    • Document automatic owner-record transfer selection and the completed
      workstream handoff to the release-validation tracker.
    • Refresh the locked bracex dependency to 3.2.2.
  • Authenticate tool setup and allow Zizmor cleanup 261bee3

    • Use the job token for managed binary release lookups so cold setup
      can finish when the anonymous GitHub API quota is exhausted.
    • Give Zizmor 45 minutes for cold tool installation, scanning and cache
      cleanup while preserving the existing findings gate.
  • Enforce release state invariants and macro hygiene #342
    88d2d25

    • Represent scaled determinant products with explicit empty, nonzero,
      zero, and non-finite states while preserving arithmetic order.
    • Parse release handoffs into draft and publication variants with
      validated asset identities and fixed local transport paths.
    • Reject mismatched handoffs and malformed owner digests before effects.
    • Keep matrix dispatch error arms independent of caller-defined names.
    • Consolidate Rust imports and shorten repeated implementation paths.
  • Adopt research-repo-tools v0.2.8 and parallelize native CI #343
    be9277b

fix: unblock release provenance with research-repo-tools v0.2.8

  • Adopt the published supplier in the manifest, lockfile, source policy,
    isolated recipes, and release workflows; remove the development Git pin.
  • Prepare authenticated native dependency builds and require their
    provenance in CI, signed release evidence, and publication workflows.
  • Delegate release runtime isolation to shared RRT APIs while preserving
    consumer-owned benchmark acquisition and approval records.
  • Expose the shared dependency-source transition command and document
    deliberate supplier adoption, pin-preserving updates, and release setup.
  • Refresh managed tool, GitHub Action, and Cargo dependency pins.