개선(deps): Bump pyproc from 0.0.14 to 0.0.23

[dependabot]

Bumps pyproc from 0.0.14 to 0.0.23.

Changelog

Sourced from pyproc's changelog.

0.0.23 - 2026-08-16

Added

• The installed package is now the default engine entrance. Root open() and boot(), createWebComputer, Control, and the package-owned engine catalog converge on one exact installed product without deep imports.
• Browser eyes and hands now carry bounded proof through document change. Paged semantic inventory, durable locators, action convergence, occlusion handling, document replacement, 20-cycle resource cleanup, and a headed hardware receipt for compute and rendered pixels run through exact packed-product gates.
• A reproducible data engine ships beside the default core engine. pyproc/wasi exposes its exact manifest and a profile-selected package-owned catalog. The static pyproc.data/2 module executes float64 SIMD oracles. NumPy 2.5.1 is built from its exact sdist as 13 static modules and survives process clone and Machine image revival. The build-sealed thread capability reports the actual worker-process boundary. SciPy, pandas, Polars, shared-memory threads, and arbitrary native wheels remain explicit absences.
• Browser storage failures are explicit and recoverable where bytes still exist. Persistence receipts, quota rollback, eviction witnesses, and OPFS generation recovery distinguish best-effort durability from silent first boot while preserving the last valid state.
• Source-pinned ripgrep and local Git are resident Machine tools. Isolated WASI workers run ripgrep 15.1.0 over bounded snapshots and libgit2 1.9.7 over compare-and-swap KernelVfs transactions. Main and cloned Python kernels call the same argv-only catalog through pyprocTools and receive the same receipts.
• An optional source-pinned Node guest joins Python and Linux in one Web Computer. createWebComputer({ node }) creates nodeOs and nodeDisk, verifies Node source identity and every declared V86 boot asset before engine construction, and carries all configured guests in one signed .webmachine. The exact packed product runs Node crypto and filesystem work, rejects a changed boot image before active replacement, and restores all three guests. A separate reproducible Buildroot release carries the image, source, configuration, SBOM, complete legal material, and two-build byte-identity receipt.

Fixed

• Successful Control startup now clears its timeout timer immediately, so a completed product lifecycle does not wait for an obsolete process timer.
• Chromium profile cleanup now waits for stable absence after Windows pending deletion, and POSIX launches use an isolated process group that is terminated as a whole. A remaining exact profile becomes a structured failure.
• Digest-locked Python wrapper sources are checked out as LF on every platform, so fresh Windows runners verify the same supply-chain bytes as Linux and repository builds.
• The data engine builder copies target module sources before the native bootstrap but applies its SIMD Setup.local only to the WASI target build, keeping host GCC free of target-only flags.
• V86 inspection reports readiness only after the engine event. A pre-ready timeout no longer calls unsafe partial-instance stop or destroy methods, while a ready instance retains the full drain, flush, and destroy path.
• V86 verified asset descriptors are closed and type-exact. The default Node loader accepts only same-origin credential-free URLs, refuses redirects and unbounded response bodies, enforces declared lengths, hashes independent bytes, and returns WEB_MACHINE_ASSET_INTEGRITY on mismatch.
• WebComputer.bootAll() now rolls every partial guest back to stopped when one configured guest fails. If cleanup also fails, an AggregateError retains the original boot failure and every cleanup failure.
• The TypeScript V86 block mode now names the implemented ata and filesystem values rather than stale names.
• V86 text display accepts the engine's transient 256-row boot geometry and reports only genuinely invalid updates as errors, so a normal Linux boot returns errors: 0 instead of accumulating clipped VGA cells.

Compatibility

... (truncated)

Commits

• 4fb4d4e fix: data 엔진 host bootstrap을 분리한다
• c98d9e4 fix: 브라우저 재시작 process 경계를 통일한다
• 33ec5cb fix: 교차 플랫폼 수명주기 정리를 고정한다
• 5a15a97 feat: 재현 가능한 Node 게스트를 제품화한다
• 99e7c91 fix: Node 게스트 재현 빌드 경로를 고정한다
• d9539c7 공급망: Node 전체 재현 빌드 상한을 보정
• a87eaac 공급망: Node 재현 빌드 시간 예산을 현실화
• 6c6f179 공급망: Node guest의 crypto 기반을 고정
• ecb6915 공급망: Node 프로필의 C++ 선택을 바로잡음
• cff07a5 공급망: Node Buildroot 재현 프로필을 고정
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Labels

The following labels could not be found: landing. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[eddmpython]

머지하지 않고 닫는다. pyproc 0.0.23 은 0.0.22 와 같은 breaking 이고, 범위가 타입뿐 아니라 boot 런타임 계약까지다.

landing job (svelte-check) 15 errors:

landing/src/lib/notebook/engine/pyprocCheckpointStore.ts:1:15  Module '"pyproc"' has no exported member 'PyprocMachine'.
                                              :1:30  ... 'ReactiveController'.
landing/src/lib/notebook/engine/kernel/asgiSeam.ts:5:15  ... 'AsgiServer'.
                                                  :5:47  ... 'Runtime'.
landing/src/lib/notebook/engine/pyodideWorker.ts:19:7  ... 'PyprocMachine'.
                                                 :20:7  ... 'Runtime'.
                                                 :21:7  ... 'WheelCache'.
                                                 :202:3 'indexURL' does not exist in type 'CpythonWasiBootOptions'.

gate-a (공개 machine 계약 스모크):

[pyproc-smoke] FAIL: 공개 machine 계약 검증 실패
PyProcError: CPython WASI boot does not accept option(s): indexURL, loadPyodide, stdout
    at boot (node_modules/pyproc/index.js:30:11)

0.0.21 은 같은 게이트 4 개가 전부 통과했으므로 경계는 0.0.21 과 0.0.22 사이다. 버전 숫자를 올리는
일이 아니라 landing 의 pyproc 호출부 마이그레이션이며, UI 변경이라 렌더 눈검수까지 동반해야 한다.
pyproc 저장소에 소비자 피드백으로 접수해 두었다.

닫아도 다음 버전으로 다시 열리는 것을 이미 확인했다(#116 0.0.22 를 닫자 #118 0.0.23 이 열렸다).
그래서 이번에는 PR 을 닫는 것으로 끝내지 않고 npm 정기 버전 범프 자체를 중단한다. 보안 업데이트는
그대로 흐른다. 상세는 곧 올라갈 dependabot.yml 커밋에 적는다.

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.