Release 2026.5.26

[2026.5.26] - 2026-05-25

🚀 Features

• (lockfile) Import npm lockfile v1 by flattening nested tree (8db0a25)
• (lifecycle) Add remote side-effects cache (S3/HTTP backend) (2b92e47)

🐛 Bug Fixes

• (lifecycle) Prepend package's own bins to script PATH (649d5ee)
• (lifecycle) Partition side-effects cache by Node major (d34f189)
• (resolve) Treat npm: alias as latest tag, not range (21d92af)
• (linker) Retry symlink + clear destination on EEXIST race (6f22a94)
• (linker) Populate .bin/ for virtual-store sibling deps (8770c00)
• (linker) Don't trust has_bin=false from yarn lockfile imports (5f291fe)
• (lifecycle) Order postinstall scripts topologically by deps (e2b4d21)
• (lifecycle) Expose sibling-dep .bin/ on PATH for virtual-store scripts (15b46ba)

⚡ Performance

• (http) Harden client and add retry-with-jitter (5817a5e)
• (linker) Memoize reflink/hardlink capability per fs pair (dbb50b4)
• (linker) Fast-path the reflink memo when no failure observed (60b57e2)

⚙️ Miscellaneous Tasks

• (release) Bump version to 2026.5.18 [skip ci] (0694660)
• (release) Merge 2026.5.18 release [skip ci] (5e6b375)
• (justfile) Add compat recipe for compat-lab harness (e5e23e9)
• (workspace) Add profiling cargo profile (3eac88e)
• (release) Bump version to 2026.5.26 [skip ci] (8558678)