v0.1.708

Changes since v0.1.704:

• Reject overflowing bytes_slice ranges as catchable language failures on the interpreter, C, LLVM and Wasm. Check the remaining length before copying, and validate Wasm arguments before narrowing. Integer-limit regression coverage also checks substring, bytes, ByteBuf, Vec and resumed string search, including RV32/RV64.
• Check complete SIMD spans without overflowing the index in the interpreter, generated runtimes and range-versioning guards. Prove range-guard arithmetic before admitting unchecked loops, including wrapped products between endpoints. Return immediately from rejected Wasm SIMD accesses so caught failures cannot continue into memory reads or writes.
• Add str_index_from haystack needle offset across all backends. It returns the first matching byte position at or after the offset, or -1. Negative offsets begin at zero; an empty needle matches through the end of the haystack.
• Align ListBuf refusal behaviour: LLVM reports an already-frozen builder before ownership; RISC-V enforces the builder's creation region for pushes. Shared buffer contract checks cover reads, writes, snapshots, freezing, argument effects and region recovery.
• Improve string equality by checking lengths first, and avoid region accounting work unless requested.
• Keep all 187 CI checks across nine groups while installing QEMU and the RISC-V disassembler only in their own group. Bound network setup with timeouts and retries, and retain checks for missing required tools and unwired gates.

The source includes 2,946 unit checks and 245 parity programs. CI checks the Linux x86_64 binary on stock Ubuntu 24.04 and 26.04 and the macOS arm64 binary on its native runner.

Download the binary for your platform together with SHA256SUMS and verify its checksum. The installer verifies the checksum, exact version and a smoke program before replacing an existing installation.