chore(release): prepare 0.14.4 - #71
Merged
Merged
Conversation
Synchronize every shipped Loctree surface at 0.14.4 and select the corrective AICX 0.12.4 assets for combined bundles. Record the five-platform Windows repair evidence and keep the failed v0.14.3 tag immutable. Authored-By: codex <agents@vetcoders.io>
Advance the Loctree 0.14.4 combined-bundle contract from the failed immutable AICX 0.12.4 tag to the verified 0.12.5 release. Keep workflow, Make, docs, tests, and the research ledger aligned with the public Windows, npm, and real-host evidence. Authored-By: codex <agents@vetcoders.io> session_id: 01a02e76-59c6-70b1-b8c0-a032a6a28796 timestamp: 2026_0824_0112_CEST runtime: vibecrafted
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Why
The v0.14.3 tag proved four targets but exposed Windows contract failures. PR #70 repaired the five-target release workflow. AICX 0.12.5 is now published, checksum/signature verified, npm published, and cold-installed on hosted macOS/Linux/Windows plus the real SSH Windows host. This corrective version publishes those already-merged fixes without moving or rewriting v0.14.3.
Verification
make version-assertmake testmake preflightmake semgrepnode distribution/npm/publish-if-missing.test.mjsbash distribution/tests/windows_bundle_test.shactionlint .github/workflows/release-bundles.yml3e6e090152c0db904048b6b5d2673990a5ed5112; macOS arm64/x64, Linux GNU/musl, and Windows MSVC all passed; branch-only publish correctly skipped0.14.4+g3e6e0901, AICX0.12.5+gced57997, all six binaries and committed-fixture scan passed$vc-deprivatizefull scan compared against the established clean-HEAD baseline: unchanged 1337-finding profile (627 critical, 177 high, 533 medium), with the same inherited 560 unambiguous findings; this release cut adds zero findings and does not claim the historical repository is cleanThe tag will be created only from exact merged
main. The immutable tag workflow must repeat all five platform proofs before npm publication.Authored-By: codex agents@vetcoders.io