Skip to content

v0.3.37 — receipt backfill and delivery-status audit

Choose a tag to compare

View all tags
@Linux2010 Linux2010 released this 25 Oct 15:06
· 13 commits to main since this release
v0.3.37
8fb6ef0
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Summary

Receipt backfill & delivery-status audit slice (PR4 automatable portion of the v0.3.27 review loop). No production code changes.

Changes

  • CHANGELOG: 0.3.36 delivery status coordinated to published (tagged v0.3.36, npm registry latest, backfilled GitHub Release link); new [0.3.37] candidate entry with per-item change notes.
  • docs: added docs/plan/evidence/v0.3.37/status-audit.md — a three-version (0.3.34–0.3.36) delivery-status audit cross-checking git tags, registry versions and the latest dist-tag, plus v0.3.36 release facts (PR #292, merge 6ea1d16, tag v0.3.36, registry latest=0.3.36, backfilled GitHub Release v0.3.36).
  • plan: added docs/plan/v0.3.37-plan.md (task breakdown, touched files, acceptance criteria).
  • deps (coordinated on main via PR #294): npm-shrinkwrap resolution of undici moved to 6.29.1, clearing the production audit advisories GHSA-4qv8-2p9j-2685 and GHSA-xjj6-f33q-929c; v0.3.37 is the first tagged release shipping it. Audit now reports 0 vulnerabilities.
  • version bump (six locations): package.json, npm-shrinkwrap.json (top-level + packages[""]), CHANGELOG.md, README.md, README.zh-CN.md (install pin + header summary) → 0.3.37; tests/coding-task-eval.test.ts pin updated to match.
  • README / README.zh-CN: header summary and install pin updated to 0.3.37.

Release facts

Item Value
Merge commit 8fb6ef0 (squash of PR #293)
Tag v0.3.37 → 8fb6ef0
npm @orion-agents/orion-code@0.3.37, published 2026-10-25T15:03:25.053Z, dist-tag latest
Registry shasum 31754d58e735d6ff78ce76fc7bed183c6fcf8512
Tarball sha256 (built from clean worktree /Users/hope/ai-project/orion-code.worktrees/v0.3.37) fb78c35a1187041788096fd5e941295b697ff85d6657c718487063bd2f011a8d
SHA cross-check local tarball == CI release-receipt.json tarball.sha256 == CI web-e2e-receipt.json tarballSha256 (byte-identical)
PR #293
CI run https://github.com/orion-agents/orion-code/actions/runs/40200315323

Quality gates (per-job conclusions, run 40200315323)

Job Conclusion
Dependency security audit ✅ success (0 vulnerabilities, undici 6.29.1)
Web E2E full suite three consecutive runs ✅ success (3× GO, 28m43s)
Web E2E critical journey Node 22.12 / 24 / 26 floors ✅ success ×3
Node 22 / 24 / 26 verification ✅ success ×3
Exact tgz Node 22.12 / 24 / 26 floors ✅ success ×3
Build the exact release tgz once ✅ success
Release gate (release:check) ✅ success (CI) / PASS 10/10 (local)
TypeScript type-check ✅ success
Dependency health report (offline) ✅ success
Lean Harness benchmark and confluence ✅ success
Aggregate exact-artifact Web E2E receipt ✅ success (decision GO)
Aggregate fail-closed v0.3.x release receipt ✅ success (decision GO)

18/18 checks passed on first run — no flake reruns required.

Install

npm install -g @orion-agents/orion-code@0.3.37
orion --version
orion doctor
Assets 2
Loading