Skip to content

v0.3.43

Choose a tag to compare

View all tags
@Linux2010 Linux2010 released this 27 Oct 19:03
· 3 commits to main since this release
v0.3.43
fa03965
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

v0.3.43

Docs-only release: receipt backfill and delivery-status audit (the automatable portion of PR4 of the v0.3.27 review-loop plan). No production code changes (src/, web/, tests/ unchanged).

Changes

  • CHANGELOG 0.3.42 → published: corrected delivery status from candidate to published with the real npm publish timestamp (2026-10-27T06:27:35.184Z) and the GitHub Release link (https://github.com/orion-agents/orion-code/releases/tag/v0.3.42).
  • New evidence docs/plan/evidence/v0.3.43/status-audit.md: a three-version (0.3.40–0.3.42) delivery-status audit cross-checking git tags, npm registry versions and the latest dist-tag, plus the v0.3.42 release facts (PR #299, squash merge 50628a7, tag v0.3.42, npm latest=0.3.42).
  • README / README.zh-CN: header summary and install pin updated to 0.3.43.

Quality gate (per-job, from CI run 40502417532)

All 18 jobs are success on the merge commit fa03965 (squash of PR #300). The full E2E suite had previously flaked on the known environmental WEB32-P0-08 OpenAI-fixture 45s timeout; a single gh run rerun --failed (rule 3.3) cleared it and the run went green.

Job Conclusion
Web E2E full suite three consecutive runs ✅ success
Web E2E critical journey on Node 22.12.0 floor ✅ success
Web E2E critical journey on Node 24.0.0 floor ✅ success
Web E2E critical journey on Node 26.0.0 floor ✅ success
Aggregate exact-artifact Web E2E receipt ✅ success
Aggregate fail-closed v0.3.x release receipt ✅ success
Exact tgz on Node 22.12.0 floor ✅ success
Exact tgz on Node 24.0.0 floor ✅ success
Exact tgz on Node 26.0.0 floor ✅ success
Build the exact release tgz once ✅ success
Release gate (release:check) ✅ success
TypeScript type-check ✅ success
Node 22 verification ✅ success
Node 24 verification ✅ success
Node 26 verification ✅ success
Lean Harness benchmark and confluence ✅ success
Dependency health report (offline) ✅ success
Dependency security audit ✅ success (0 vulnerabilities)

Tarball integrity (fail-closed, four-way match):

  • Local tarball sha256: be091eb49c0268b1c258d4ae830a9a598f0821823ef95f0a91549259155455f6
  • CI release-receipt.json tarballSha256: be091eb49c0268b1c258d4ae830a9a598f0821823ef95f0a91549259155455f6
  • CI web-e2e-receipt.json tarballSha256: be091eb49c0268b1c258d4ae830a9a598f0821823ef95f0a91549259155455f6
  • CI release-package artifact sha256: be091eb49c0268b1c258d4ae830a9a598f0821823ef95f0a91549259155455f6
  • npm registry SHA-1 shasum: 87f24a01a9331c1137e62815f8a31ce1ea4b8bcc
  • Files: 791

Install

npm install -g @orion-agents/orion-code@0.3.43

Dependabot

9 dependabot PRs remain open (#267 #263 #212 #211 #210 #119 #118 #117 #116). The audit gate is green (0 vulnerabilities), so none are required for this release.

Assets 2
Loading