Kennel 1.0.1 is a hardening release for the stable package and dependency workflows introduced in 1.0.0.
Highlights
- Hardened dependency identifiers, install paths, hosted-registry authorization, and invalid token-store handling.
- Made package replacement transactional, restoring the previous installation when clone, checkout, revision, or copy operations fail.
- Added crash-safe atomic persistence for manifests, lockfiles, registry metadata, scaffolds, rollback restoration, and private mode-
0600token stores. - Fixed benchmark report serialization so generated artifacts are valid, schema-checked JSON.
- Added regression coverage for symlink containment, rollback, atomic persistence, token replacement, and installer cleanup.
- Repaired release CI runtime setup and artifact execution.
Compatibility
- Manifest, lockfile, registry, and benchmark schemas are unchanged.
- Normal CLI commands and output remain compatible.
- Kujo 1.0.0 or newer is required.
Verification
- ShipCheck: 16/16 checks passed with zero warnings.
- Full Kennel verification profile passed locally.
- GitHub Actions release-candidate workflow passed on Linux and macOS.
- SBOM provenance attestation completed successfully.
Supply-chain artifacts
Full changelog: v1.0.0...v1.0.1