Skip to content

dsh-plugin-debug v0.8.3

Choose a tag to compare

@shine-233 shine-233 released this 17 Aug 05:35

dsh-plugin-debug v0.8.3

This is a GitHub source release for the single dsh-plugin-debug package.

  • Tag: v0.8.3
  • Evidence commit: 8033796e50d20b246bb8dd92e21cde3753a88fd0
  • Source commit verified from an exact remote fresh clone: 591ca0da959465a1207030cd7eb91372d8e90b2a
  • npm pack reported 102 files; the real prepack tarball was extracted and passed package-only Standalone plus offline consumer export smoke.
  • Deterministic SPDX 2.3 and CycloneDX 1.5 SBOMs are committed under packages/dsh-plugin-debug/sbom/ and attached to this release. Each contains 584 components/packages.
  • Runtime lockfile checks cover lock metadata and the installed tree (587 locked entries); the pinned runtime and plugin audit gates reported 0 high-or-higher vulnerabilities.
  • CI run 31997733993 passed Node 22/24, Windows PowerShell, fresh-clone publication, pack/extract smoke and required checks. CodeQL run 31997733927 passed for this evidence commit.
  • The real DSH Host/Web compatibility lane is manual and opt-in. It is fail-closed and does not claim a pass when no real instance is available.

This release is not published to the npm registry. npm provenance, signing, npm installation compatibility and future registry distribution gates are intentionally separate work.

The offline and isolated rc.6 evidence proves source contracts, Web/Host loading and tool registration/dispatch layers only. It does not prove a data-bearing Session, real model request, third-party plugin installation or cross-platform production compatibility.