v1.18.0

1.18.0 (2026-09-17)

• Clone a git catalog without unused package blobs, and fetch a used package file when install needs it.
• Skip cloning a git catalog when no package uses that source.
• Fetch a used git catalog once on pray update instead of fetching it twice.
• Keep packages from two git sources that share a clone URL when each source names a different subdir.
• Share one git object store for those subdirectory checkouts.
• Import signing keys with pray trust import-repo after a catalog was cloned only through subdir sources.
• Reuse registry package metadata during one command so pray update --latest does not download the same package JSON twice.
• Skip a second resolve when pray update --latest does not rewrite constraints or upstream pins, and still refresh path-fork files when needed.
• Fetch torrent piece lists only when a registry lists torrent.