Traverse v0.16.2

Released 2026-11-04.

Traverse v0.16.2 is a patch lockstep crate and npm release. It makes the
approved host-connector invocation union usable by traverse-cli workspace
applications, while preserving the fail-closed activation model. Cut with:

bash scripts/ci/bump_version.sh 0.16.2

Highlights

• Host connector manifest invokes work in the CLI (#1772, #1788,
  Spec 1773). A workspace application may declare exactly one of a capability
  target or a host connector target. The CLI materializes and registers the
  latter without converting it to a capability reference.
• Invalid manifests still fail closed. Empty, ambiguous, and malformed
  invocation declarations are rejected before activation; a host connector is
  never silently treated as a capability.
• Registry contract alignment. The release consumes
  traverse-registry 0.31.0, which provides the typed exact-one
  ApplicationStateInvoke union required by Spec 1773.

Compatibility

This is additive and backward compatible on the 0.16.x line. Existing
capability-target workspace manifests retain their prior behavior. No host ABI,
guest ABI, or bridge ABI version changes.

Runtime artifact

The release rebuilds the governed runtime.wasm with runtime version 0.16.2.
The Linux-authoritative digest is
b313b5c5c11291d9e9669125a0a9a77aa42a911b15d431a73e86b17c874e298c.

Release checklist

• CLI materialization and activation tests cover both capability and host
  connector variants, including invalid exact-one unions.
• crates.io lists 0.16.2 for published Traverse crates.
• npm view traverse-embedder-web version returns 0.16.2.
• GitHub Release Traverse v0.16.2 on tag v0.16.2 is Latest.

Links

• Changelog
• Release process
• Spec 1773
• Spec 046
• Range: v0.16.1..v0.16.2