Skip to content

chore: release v1.8.0 - #532

Closed
0xLeif wants to merge 1 commit into
mainfrom
0xleif/chore/release-1-8-0-fresh
Closed

0xLeif wants to merge 1 commit into
mainfrom
0xleif/chore/release-1-8-0-fresh

Conversation

@0xLeif

@0xLeif 0xLeif commented Sep 19, 2026

Copy link
Copy Markdown
Contributor

Summary

Bumps to 1.8.0 — Cargo.toml, Cargo.lock, flake.nix — with a changelog generated across all 22 commits since v1.7.2.

⚠️ 1.8.0 is already live on crates.io. It was published manually from this exact tree, and the registry was read back to confirm: max_version: 1.8.0, not yanked. So the registry currently leads the repo, and this PR plus the tag bring them back in line.

Why the registry went first

crates.io was stuck at 1.7.0 while v1.7.1 and v1.7.2 were both tagged — two releases cut and never shipped, because release.yml had no publish step and nothing said so (see #531). Publishing 1.8.0 closes that gap by supersession; 1.7.1 and 1.7.2 stay GitHub-only, which is harmless since crates.io does not require contiguous versions.

What's in 1.8.0

Features: --stream for live task output (#509), fledge spec lint (#505), the root-level action.yml GitHub Action (#511).

Fixes: the diamond-DAG dependency bug (#513), the task-graph depth bound that turned a stack-overflow abort into a real error (#525), Astro 5→7 clearing ten Dependabot advisories (#528), two lifecycle-hook fixes (#520, #521).

Plus the test-isolation work (#504) and the full SDD ledger closeout (#526, #527, #529, #530).

Verification

  • fledge lanes run pre-commit — green (3 steps, 1m25s)
  • fledge spec check — 33 specs, 0 errors, 0 warnings
  • cargo publish --dry-run — packaged 709 files, verified and compiled as 1.8.0
  • cargo publish — succeeded
  • Registry read back — max_version: 1.8.0, yanked: false. Not inferred from cargo's exit code

After merge

Tag v1.8.0 on main. release.yml builds the artifacts and creates the GitHub release; its publish job (#531, if merged first) will find 1.8.0 already present.

The stale chore/release-1-8-0 branch was deleted — it had been cut at f659d69, so its changelog predated #524 through #530.

🤖 Generated with Claude Code

@0xLeif
0xLeif requested a review from a team as a code owner September 19, 2026 01:39
@0xLeif
0xLeif requested review from 0xGaspar, Kyntrin and tofu-ux and removed request for a team September 19, 2026 01:39
@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Sep 19, 2026 •

Copy link
Copy Markdown

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review ✅ Completed 2026-09-19T15:24:02.647823Z 02e7767 New commits
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 435b7c55cc

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment thread Cargo.toml
[package]
name = "fledge"
version = "1.7.2"
version = "1.8.0"

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Publish the bumped crate in the release workflow

When the v1.8.0 tag is pushed, .github/workflows/release.yml only tests, builds binaries, and creates the GitHub release; it never checks out with a Rust toolchain in the release job or runs cargo publish. The post-release workflow merely warns when crates.io lags, despite CONTRIBUTING.md stating that release.yml publishes there. Consequently, the documented cargo install fledge channel remains on 1.7.2 after this release unless a maintainer performs an undocumented manual publication.

Useful? React with 👍 / 👎.

Comment thread CHANGELOG.md
The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).

## [v1.8.0] - 2026-09-18

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P2 Badge Clear the shipped entries from Unreleased

Cutting this release inserts the v1.8.0 section ahead of the existing Unreleased section without consuming it. The two lifecycle-hook entries at lines 60–61 describe commit c4abcb2, which is already included in v1.8.0 at line 41, so the published changelog now labels shipped functionality as unreleased and will continue carrying those stale entries into later releases.

Useful? React with 👍 / 👎.

@github-actions github-actions Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

❌ Corvin says...

      _
    <(;\  .oO(oh no...)
     |/(\
      \(\\
      " "\\

"Caw... validation failed..."

CI Summary

Check Status
Dependency Audit ✅ Passed
Integration (3 OS) ❌ skipped
Lint (fmt + clippy) ✅ Passed
Spec Validation ✅ Passed
Tests (3 OS) ❌ failure

Powered by corvid-pet

@0xLeif
0xLeif force-pushed the 0xleif/chore/release-1-8-0-fresh branch from 435b7c5 to 02e7767 Compare September 19, 2026 15:14
@github-actions
github-actions Bot dismissed their stale review September 19, 2026 15:20

Superseded by updated review.

@github-actions github-actions Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

❌ Corvin says...

      _
    <(;\  .oO(oh no...)
     |/(\
      \(\\
      " "\\

"Even the dumpster of code seems empty today."

CI Summary

Check Status
Dependency Audit ✅ Passed
Integration (3 OS) ❌ skipped
Lint (fmt + clippy) ✅ Passed
Spec Validation ✅ Passed
Tests (3 OS) ❌ failure

Powered by corvid-pet

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 02e77675fa

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment thread Cargo.toml
[package]
name = "fledge"
version = "1.7.2"
version = "1.8.0"

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Skip publishing the already-uploaded version

Fresh evidence relative to the earlier review is that parent commit 7214df6 now adds an unconditional cargo publish step to .github/workflows/release.yml, while this release commit states that 1.8.0 was already manually published and verified on crates.io. When the v1.8.0 tag fires, crates.io will reject that upload—the official Cargo documentation states that a published version can never be overwritten—so the publish job exits non-zero before its registry-verification step and every rerun remains red. Either avoid prepublishing this version or make the job verify and accept the exact already-published version before attempting the upload.

AGENTS.md reference: AGENTS.md:L361-L363

Useful? React with 👍 / 👎.

Comment thread CHANGELOG.md
The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).

## [v1.8.0] - 2026-09-18

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P2 Badge Include the final pre-release commit in the changelog

The reviewed parent is 7214df6 (Fix: publish to crates.io from the release workflow, and verify the registry (#531)), but the new v1.8.0 section enumerates the other 22 post-v1.7.2 commit hashes and omits this direct parent. Consequently the release ships a significant change to its distribution process without recording it in the changelog; regenerate the section from the actual parent or add this fix explicitly.

Useful? React with 👍 / 👎.

@corvid-agent corvid-agent left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

CoS REQUEST_CHANGES — 02e77675fa4b

Release notes / Cargo bump for v1.8.0 look coherent. Linux + macOS test, trust, lint, audit, intent/spec-check, and the Action install matrix are green. windows is refused with a readable message also passes.

Only red: test (windows-latest) — default_temp_env_points_github_at_a_dead_port expects a specific "refused" string and gets Windows os error 10061 wording instead. Per standing Linux-first (no Windows target unless Leif asks), prefer either:

  1. broaden the isolation assert to accept the Windows refused wording, or
  2. drop/skip that Windows matrix cell for the release.

Happy to APPROVE once that sole red is cleared (or explicitly waived by Leif). No merge from CoS.

0xLeif added a commit that referenced this pull request Sep 26, 2026
…#535)

default_temp_env_points_github_at_a_dead_port recognized a refused
connection only by the words "connection refused". ureq 3.3.0
synthesized exactly that message on every platform. ureq 3.4 passes
the OS error through instead, so Windows now reports WSAECONNREFUSED's
"No connection could be made because the target machine actively
refused it. (os error 10061)" and the test failed on the v1.8.0
release PR (#532), whose lockfile carries ureq 3.4.2.

Accept "actively refused" and "os error 10061" as well. The loopback
assertion on the child's GitHub base is unchanged, and a generic
"failed" still does not count, so a real api.github.com failure still
fails the test.

Adds the SpecSync change record (draft, awaiting definition approval).


Claude-Session: https://claude.ai/code/session_01V3ZZAEiUP7xRJPozhZb6rL

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>
@0xLeif 0xLeif closed this Sep 26, 2026
@0xLeif

0xLeif commented Sep 26, 2026 •

Copy link
Copy Markdown
Contributor Author

Update (17:5xZ): #535 merged (260063a). This PR was closed by the 0xLeif account at 17:19Z. Not knowing about the close, the agent then force-pushed the rebase described below to this branch: 0xleif/chore/release-1-8-0-fresh is now 3cb0a55 (was 02e7767). That is chore: release v1.8.0 rebased onto 260063a, plus Update: complete the v1.8.0 changelog after rebasing onto main. Because the PR is closed, no CI ran on it. Locally, fledge lanes run verify and fledge trust verify pass (augur: review, risk 46). The agent's attempt to restore 02e7767 was blocked, so reopening or restoring is the owner's call.


Status from orc's CI-fix agent. Nothing on this branch has changed yet.

corvid-agent's CHANGES_REQUESTED (the only red, test (windows-latest)): the fix is #535 against main (option 1, widen the assertion; the Windows cell stays). Cause: this PR's lockfile moves ureq 3.3.0 → 3.4.2. ureq 3.3.0 replaced every refused connect with a synthetic "Connection refused", but 3.4 passes the OS error through, so Windows now says WSAECONNREFUSED's ...actively refused it. (os error 10061). A workflow_dispatch probe of main + #535 + this release commit was fully green, including all three test and Integration cells (run 36257571327). #535 waits on a review and its SpecSync definition approval.

Once #535 lands, this PR gets rebased (it applies cleanly) with these changelog fixes, which also cover both Codex P2s:

Cargo.toml/flake.nix stay at 1.8.0, and Cargo.lock stays byte-identical to the published crate's.

Needs a maintainer decision before tagging (Codex P1): crates.io already has fledge 1.8.0 (published 2026-09-19). .cargo_vcs_info.json shows it came from 435b7c5, this PR's first head, which predates #531. No v1.8.0 tag exists. Two consequences:

  1. On the v1.8.0 tag, release.yml's publish job runs cargo publish unconditionally. crates.io refuses a version that already exists, so that job will go red after the GitHub release and binaries are built.
  2. The tag will not match the crate. The only difference that reaches the binary is the embedded templates/corvid-stack/.github/workflows/trust.yml Trust pin: cargo install fledge@1.8.0 scaffolds v1.2.0, and the v1.8.0 release binaries scaffold v1.2.1 (Chore: pin Trust 1.2.1 #533). Everything else that differs is CI, docs, tests, or .specsync.

Options: (a) ship this as v1.8.0 and accept both; (b) tag v1.8.0 at 435b7c5 (what crates.io holds) and cut this as v1.8.1; (c) first make the publish job skip cargo publish when crates.io already has the tag's version, then tag. Not merging or tagging from here.

🤖 Generated with Claude Code

@0xLeif 0xLeif mentioned this pull request Sep 26, 2026
5 tasks
@0xLeif

0xLeif commented Sep 26, 2026

Copy link
Copy Markdown
Contributor Author

Superseded by #536 (v1.8.1), per Leif's decision: 1.8.0 is already on crates.io from 435b7c5, so this release is cut from main as 1.8.1. #536's full CI rollup is green, including test (windows-latest) with ureq 3.4.2. This branch's head is still the 3cb0a55 rebase push described above, and nothing references it now.

🤖 Generated with Claude Code

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants