@nanhara/hara 0.131.0 → 0.131.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +12 -0
- package/package.json +1 -1
package/CHANGELOG.md
CHANGED
|
@@ -5,6 +5,18 @@ All notable changes to `@nanhara/hara`.
|
|
|
5
5
|
> Versioning (pre-1.0, SemVer-style): the **minor** (middle) number bumps for a **new feature**; the
|
|
6
6
|
> **patch** (last) number bumps for **optimizations/fixes of existing features**.
|
|
7
7
|
|
|
8
|
+
## 0.131.1 — 2026-07-21 — authenticated macOS standalone assets
|
|
9
|
+
|
|
10
|
+
- Darwin arm64 and Intel standalone binaries are now built on their matching native macOS runners,
|
|
11
|
+
signed with the Bun runtime entitlements, verified with `codesign`, and executed through the full
|
|
12
|
+
standalone boundary smoke before release assembly. This replaces unverified Darwin cross-compiles
|
|
13
|
+
from the Linux release runner that could be killed by macOS provenance enforcement after download.
|
|
14
|
+
- A release is assembled only after Linux and both Darwin jobs succeed. GitHub asset SHA-256 digests
|
|
15
|
+
are checked after publication and may not be clobbered on a rerun; two independent macOS jobs then
|
|
16
|
+
download the public assets, recheck the digests and signatures, and execute them before GHCR starts.
|
|
17
|
+
- Upgrade npm installations with `npm i -g @nanhara/hara@0.131.1`. Standalone users can rerun the
|
|
18
|
+
installer; the atomic startup check keeps an older working binary intact if a download is incomplete.
|
|
19
|
+
|
|
8
20
|
## 0.131.0 — 2026-07-21 — verified upgrades, project recovery, and session recall
|
|
9
21
|
|
|
10
22
|
- `hara update` (also `hara upgrade`) now identifies the installation that actually launched the process.
|