Skip to content

v0.2.18

Choose a tag to compare

View all tags
@github-actions github-actions released this 12 Jul 03:37
· 692 commits to main since this release
v0.2.18
ae4843b
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

[0.2.18] - 2026-07-11

This patch supersedes the quarantined v0.2.17 prerelease. It carries forward
the graph-backed VFS bridge and release-verification hardening from that tag,
then fixes the defects exposed by the mandatory clean-install proof.

The v0.2.17 signed assets remain available for audit, but npm, GHCR version
tags, Homebrew, installers, and GitHub Latest were never promoted. The complete
last-stable diff is v0.2.16...v0.2.18.

Fixed

  • kin-vfs translates intercepted host paths into repo-relative graph keys,
    preserves canonical and lexical workspace roots, and rejects ambiguous or
    escaping paths before they can reach graph authority.
  • Windows daemon reopen no longer applies the Unix-only parent-directory fsync
    primitive that caused ERROR_ACCESS_DENIED after loading a persisted graph.
  • Public install proof now preserves the selected Unix shell across Actions
    steps, reports the exact unhealthy checks, and exercises a native Windows
    init-to-daemon-reopen smoke before a release can reach npm or GitHub Latest.
  • README install links now follow the proven GitHub Latest release instead of
    advertising an unpromoted tag.

What's Changed

  • fix: restore cross-platform release proof for v0.2.18 by @troyjr4103 in #319

Full Changelog: v0.2.17...v0.2.18

Contributors

troyjr4103
Assets 20
Loading