v0.3.40a

v0.3.40a

Adds SQLite change-data capture alongside PostgreSQL CDC, hardens capture contracts and shutdown behavior, fixes terminal navigation keys and bounded canvas rendering, and expands CI with native Lua application and real CDC integration coverage.

Commit: f34c851

Changes

• f34c851 fix(tty): preserve navigation keys and bound canvas control output (#637)
• dc01414 feat(cdc): native SQLite CDC source (db.cdc.sqlite) (#351)
• 312235d build(deps): bump github.com/aws/aws-sdk-go-v2/feature/s3/manager (#635)
• c827e5a build(deps): bump github.com/aws/aws-sdk-go-v2/config (#636)
• cfe8762 build(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 (#634)
• 576e283 build(deps): bump github.com/aws/aws-sdk-go-v2/credentials (#633)
• a4a9be7 build(deps): bump github.com/aws/aws-sdk-go-v2/service/sqs (#632)
• bee9c50 feat(tty): add composable virtual surfaces and PTY sessions (#631)

Verify

sha256sum -c SHA256SUMS
# each wippy-<os>-<arch>.sig is base64(ed25519 detached sig); verify with release_key.pub

Nightly 20260905-312235d

Automated nightly build.

Commit: 312235d

Changes

• 312235d build(deps): bump github.com/aws/aws-sdk-go-v2/feature/s3/manager (#635)
• c827e5a build(deps): bump github.com/aws/aws-sdk-go-v2/config (#636)
• cfe8762 build(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 (#634)
• 576e283 build(deps): bump github.com/aws/aws-sdk-go-v2/credentials (#633)
• a4a9be7 build(deps): bump github.com/aws/aws-sdk-go-v2/service/sqs (#632)
• bee9c50 feat(tty): add composable virtual surfaces and PTY sessions (#631)

Verify

sha256sum -c SHA256SUMS
# each wippy-<os>-<arch>.sig is base64(ed25519 detached sig); verify with release_key.pub

v0.3.36a

v0.3.36a

Fixed event bus unsubscribe so it now stops any further deliveries immediately after unsubscribing.

Commit: a5911e2

Changes

• a5911e2 fix(eventbus): make unsubscribe a terminal delivery barrier (#628)
• ac4e45c Merge pull request #630 from wippyai/chore/bump-go-lua-v1.5.19
• ef76594 build(deps): bump go-lua to v1.5.19
• f551f00 Merge pull request #627 from wippyai/dependabot/go_modules/go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc-1.46.0
• f9bcc67 build(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc
• c100233 Merge pull request #626 from wippyai/dependabot/go_modules/google.golang.org/grpc-1.83.2
• 4a53e56 Merge pull request #625 from wippyai/dependabot/go_modules/go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp-1.46.0
• 67e5037 build(deps): bump google.golang.org/grpc from 1.83.1 to 1.83.2
• e14c783 build(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp

Verify

sha256sum -c SHA256SUMS
# each wippy-<os>-<arch>.sig is base64(ed25519 detached sig); verify with release_key.pub

Nightly 20260904-a5911e2

Automated nightly build.

Commit: a5911e2

Changes

• a5911e2 fix(eventbus): make unsubscribe a terminal delivery barrier (#628)
• ac4e45c Merge pull request #630 from wippyai/chore/bump-go-lua-v1.5.19
• ef76594 build(deps): bump go-lua to v1.5.19
• f551f00 Merge pull request #627 from wippyai/dependabot/go_modules/go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc-1.46.0
• f9bcc67 build(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc
• c100233 Merge pull request #626 from wippyai/dependabot/go_modules/google.golang.org/grpc-1.83.2
• 4a53e56 Merge pull request #625 from wippyai/dependabot/go_modules/go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp-1.46.0
• 67e5037 build(deps): bump google.golang.org/grpc from 1.83.1 to 1.83.2
• e14c783 build(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp

Verify

sha256sum -c SHA256SUMS
# each wippy-<os>-<arch>.sig is base64(ed25519 detached sig); verify with release_key.pub

v0.3.35a

v0.3.35a

Fix workspace replacement lock reconciliation and diagnostics; expose HTTP request headers to Lua; migrate to Go 1.27 and refresh runtime dependencies.

Commit: bb33698

Changes

• bb33698 build(deps): bump github.com/aws/aws-sdk-go-v2/feature/s3/manager (#623)
• cb19740 build(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp (#624)
• 53198e4 build(deps): bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp (#622)
• f8e5b97 build(deps): bump github.com/andybalholm/brotli from 1.2.2 to 1.2.3 (#621)
• 2d11801 build(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 (#620)
• 1d0a3c5 build(deps): update jsonschema and migrate to Go 1.27 (#617)
• dd2969f fix(deps): reconcile workspace replacements in lock graph (#619)
• 00f6fac feat(http): expose request headers to Lua (#613)
• 3b43aa3 build(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc (#618)
• 477fcca build(deps): bump go.opentelemetry.io/otel/metric from 1.45.0 to 1.46.0 (#616)
• 4e21126 build(deps): bump buf.build/gen/go/bufbuild/protovalidate/protocolbuffers/go (#615)
• da8c2d6 build(deps): bump github.com/aws/aws-sdk-go-v2/service/sqs (#614)

Verify

sha256sum -c SHA256SUMS
# each wippy-<os>-<arch>.sig is base64(ed25519 detached sig); verify with release_key.pub

Nightly 20260902-bb33698

Automated nightly build.

Commit: bb33698

Changes

• bb33698 build(deps): bump github.com/aws/aws-sdk-go-v2/feature/s3/manager (#623)
• cb19740 build(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp (#624)
• 53198e4 build(deps): bump go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp (#622)
• f8e5b97 build(deps): bump github.com/andybalholm/brotli from 1.2.2 to 1.2.3 (#621)
• 2d11801 build(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 (#620)
• 1d0a3c5 build(deps): update jsonschema and migrate to Go 1.27 (#617)
• dd2969f fix(deps): reconcile workspace replacements in lock graph (#619)
• 00f6fac feat(http): expose request headers to Lua (#613)

Verify

sha256sum -c SHA256SUMS
# each wippy-<os>-<arch>.sig is base64(ed25519 detached sig); verify with release_key.pub

Nightly 20260901-3b43aa3

Automated nightly build.

Commit: 3b43aa3

Changes

• 3b43aa3 build(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc (#618)
• 477fcca build(deps): bump go.opentelemetry.io/otel/metric from 1.45.0 to 1.46.0 (#616)
• 4e21126 build(deps): bump buf.build/gen/go/bufbuild/protovalidate/protocolbuffers/go (#615)
• da8c2d6 build(deps): bump github.com/aws/aws-sdk-go-v2/service/sqs (#614)

Verify

sha256sum -c SHA256SUMS
# each wippy-<os>-<arch>.sig is base64(ed25519 detached sig); verify with release_key.pub

v0.3.34a

v0.3.34a

Added Pyodide/WASM runtime support with instance-owned TCP sockets and better socket deadlines, plus fixes for Docker volume handling, async call cancellation, shutdown sync, and legacy state migration.

Commit: cc1522b

Changes

• cc1522b Merge pull request #543 from wippyai/feat/pyodide-wasm-runtime
• f1128af refactor(wasm): centralize socket authorization
• a96d89a fix(wasm): enforce core socket operation deadlines
• 507e9f5 build(wasm): use instance resource lifecycle
• 00e94d3 fix(wasm): bind WASI TCP tuple results
• 0d5d502 feat(wasm): add instance-owned core TCP sockets
• 4e246a5 Merge pull request #610 from xepozz/fix/docker-named-volume-mounts
• 7fc6123 Merge pull request #612 from wippyai/fix/store-dispatcher-shutdown
• f856f8a fix(exec): preserve Docker volume semantics
• 0b4b756 fix(store): synchronize dispatcher shutdown
• 67ef2b2 Merge pull request #609 from wippyai/fix/contract-future-cancel
• 2ef39f8 fix(contract): cancel async calls at the callee
• fbded4d Merge pull request #607 from wippyai/fix/legacy-history-update-provenance
• b386027 fix(registry): migrate persisted ownership state
• e2efdac Merge pull request #608 from wippyai/dependabot/go_modules/github.com/aws/smithy-go-1.27.10
• 61987f1 Merge pull request #606 from wippyai/fix/workspace-replacement-lazy-load
• 06c9bf1 build(deps): bump github.com/aws/smithy-go from 1.27.9 to 1.27.10
• fd73fb9 fix(deps): ignore absent unselected replacement paths
• 86f6049 docs(deps): define replacement load-path boundary
• 1e85f8b fix(deps): preserve replacement dependency scans
• e984bd4 fix(deps): defer unrequired workspace replacements

Verify

sha256sum -c SHA256SUMS
# each wippy-<os>-<arch>.sig is base64(ed25519 detached sig); verify with release_key.pub

Nightly 20260831-cc1522b

Automated nightly build.

Commit: cc1522b

Changes

• cc1522b Merge pull request #543 from wippyai/feat/pyodide-wasm-runtime
• f1128af refactor(wasm): centralize socket authorization
• a96d89a fix(wasm): enforce core socket operation deadlines
• 507e9f5 build(wasm): use instance resource lifecycle
• 00e94d3 fix(wasm): bind WASI TCP tuple results
• 0d5d502 feat(wasm): add instance-owned core TCP sockets
• 4e246a5 Merge pull request #610 from xepozz/fix/docker-named-volume-mounts
• 7fc6123 Merge pull request #612 from wippyai/fix/store-dispatcher-shutdown
• f856f8a fix(exec): preserve Docker volume semantics
• 0b4b756 fix(store): synchronize dispatcher shutdown
• 67ef2b2 Merge pull request #609 from wippyai/fix/contract-future-cancel
• 2ef39f8 fix(contract): cancel async calls at the callee
• fbded4d Merge pull request #607 from wippyai/fix/legacy-history-update-provenance
• b386027 fix(registry): migrate persisted ownership state
• e2efdac Merge pull request #608 from wippyai/dependabot/go_modules/github.com/aws/smithy-go-1.27.10
• 61987f1 Merge pull request #606 from wippyai/fix/workspace-replacement-lazy-load
• 06c9bf1 build(deps): bump github.com/aws/smithy-go from 1.27.9 to 1.27.10
• fd73fb9 fix(deps): ignore absent unselected replacement paths
• 86f6049 docs(deps): define replacement load-path boundary
• 1e85f8b fix(deps): preserve replacement dependency scans
• e984bd4 fix(deps): defer unrequired workspace replacements

Verify

sha256sum -c SHA256SUMS
# each wippy-<os>-<arch>.sig is base64(ed25519 detached sig); verify with release_key.pub

v0.3.33a

v0.3.33a

Expose atomic registry snapshot state with ownership and dependency-root provenance for consistent lifecycle consumers.

Commit: 6d3f57d

Changes

• 6d3f57d Merge pull request #602 from wippyai/fix/snapshot-provenance-read
• be22cba fix(registry): keep provenance reads atomic
• 72905dc test(registry): cover provenanced app lifecycle
• beef874 feat(registry): expose atomic provenanced snapshot state
• fb143ab build(deps): bump github.com/aws/aws-sdk-go-v2/service/sqs (#603)
• 40e2524 build(deps): bump go.temporal.io/sdk from 1.47.0 to 1.48.0 (#604)
• 609d3de build(deps): bump google.golang.org/grpc from 1.83.0 to 1.83.1 (#605)

Verify

sha256sum -c SHA256SUMS
# each wippy-<os>-<arch>.sig is base64(ed25519 detached sig); verify with release_key.pub