Skip to content

v0.3.38 — receipt backfill and delivery-status audit

Choose a tag to compare

View all tags
@Linux2010 Linux2010 released this 25 Oct 20:52
· 8 commits to main since this release
v0.3.38
4cb727e
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Changes

Docs-only slice (PR4 automatable portion of the v0.3.27 review loop). No production code changes.

  • CHANGELOG: 0.3.37 entry corrected candidate → published with the real npm publish timestamp (2026-10-25T15:03:25.053Z) and the GitHub Release v0.3.37 link; new 0.3.38 candidate entry added.
  • Evidence: docs/plan/evidence/v0.3.38/status-audit.md — three-version (0.3.35–0.3.37) delivery-status audit (git tag → main merge commit + npm registry version + dist-tags.latest), all satisfied; v0.3.37 release facts backfilled (PR #293, merge 8fb6ef0, tag v0.3.37, registry shasum 31754d58…8512).
  • Plan: docs/plan/v0.3.38-plan.md (task breakdown, files, acceptance criteria).
  • Version bump to 0.3.38 (six places) + tests/coding-task-eval.test.ts packageVersion pin.

Quality gates

Gate Conclusion Evidence
Release gate (release:check) ✅ success job
Build the exact release tgz once ✅ success job
Dependency health report (offline) ✅ success job
Dependency security audit ✅ success (0 vulnerabilities) job
Lean Harness benchmark and confluence ✅ success job
TypeScript type-check ✅ success job
Node 22 / 24 / 26 verification ✅ success ×3 22 · 24 · 26
Exact tgz on Node 22 / 24 / 26 floor ✅ success ×3 22 · 24 · 26
Web E2E critical journey ×3 (Node 22/24/26) ✅ success ×3 22 · 24 · 26
Web E2E full suite three consecutive runs ✅ success job
Aggregate exact-artifact Web E2E receipt ✅ success (GO) job
Aggregate fail-closed v0.3.x release receipt ✅ success job

CI run: https://github.com/orion-agents/orion-code/actions/runs/40230160849 — 18/18 jobs success (one timing flake in Exact tgz on Node 26 terminal_journey was rerun once via gh run rerun --failed per the single-flake policy and passed).

Note: the "Web E2E full suite three consecutive runs" gate in this repository runs three full E2E passes within the job; the run above is the GO evidence for this release (previous rounds established the three-consecutive-runs contract).

Integrity

  • Local tarball sha256: 1e720787719ca4abaf4398e5e42918e35abfc53db9f85e3c2c72e868b1668540
  • CI web-e2e-receipt artifact tarballSha256: identical, byte-for-byte verified.
  • npm registry shasum (SHA-1): 5c15a05421c53d66cc543c9d9ab4516e1e04d18f (matches local tarball).
  • npm publish time: 2026-10-25T20:50:25.203Z (registry dist-tags.latest=0.3.38).

Install

npm install -g @orion-agents/orion-code@0.3.38
Assets 2
Loading