@push.rocks/smartmta 9.6.0 → 9.6.1

package/changelog.md

@@ -1,5 +1,19 @@
 # Changelog
 
+## 2026-09-15 - 9.6.1
+
+### Fixes
+
+- ship third-party notices for the statically linked mailer-bin (licensing)
+  - The npm package ships prebuilt `dist_rust/mailer-bin_linux_amd64` and `dist_rust/mailer-bin_linux_arm64`, which statically link 232 locked Cargo packages, the Rust standard library, glibc 2.39 and libgcc, but carried no attribution beyond SmartMTA's own MIT `license`, so redistributors of the object code could not meet Apache-2.0 section 4(d) or the MIT/ISC/BSD/Unicode/LGPL notice requirements.
+  - Add `third-party-notices.md` and a `notices/` directory holding the generated cargo-about inventory, per-crate supplemental notices, the vendored AWS-LC, ring, mimalloc and Zstandard attributions, and the Rust standard library, glibc and libgcc runtime notices; ship both through the npm `files` list.
+  - Record the compiler and C toolchain that actually produce the executables — `tsrust` uses the system `cargo`/`rustc` when present (rustc 1.95.0 for this release) and its bundled `stable-<host-triple>` otherwise, so there is no toolchain pin to rely on — together with the exact Ubuntu glibc and libgcc package revisions, in `notices/inventory.json`.
+  - Mark the internal workspace crates `publish = false`, and add `test/test.notices.node.ts`, which fails when a locked crate is missing from the inventory, a notice file is absent or stale, a generic copyright placeholder appears, or the rustc, glibc and libgcc versions embedded in `dist_rust/` drift from the recorded attribution.
+
+### Maintenance
+
+- Update tstest to 6.1.0 for the release.
+
 ## 2026-09-15 - 9.6.0
 
 ### Fixes

package/dist_rust/mailer-bin_linux_amd64.tsrust-build.json

@@ -1,12 +1,12 @@
 {
   "format": "tsrust.build-provenance.v2",
-  "binarySha256": "74d10e10644850c92fa7061cbabb4dc9583ef40e8c0cc2bb0024dcbdb8d80470",
+  "binarySha256": "781eaf1d5e3d97c65ba7f3a68124b6c9213cf111649dbb5c27b2d1f5eb8f2771",
   "buildInfo": {
     "projectName": "@push.rocks/smartmta",
-    "projectVersion": "9.6.0",
-    "gitCommit": "eac7a76f2d7e0a49006977a34ff678b638700a1f",
+    "projectVersion": "9.6.1",
+    "gitCommit": "b94f46490588851523694da9da9373dfa463aecf",
     "gitDirty": false,
-    "builtAt": "2026-09-15T17:08:14.540Z",
+    "builtAt": "2026-09-15T18:51:01.373Z",
     "tsrustVersion": "1.13.0",
     "binary": "mailer-bin",
     "target": "linux_amd64"

package/dist_rust/mailer-bin_linux_arm64.tsrust-build.json

@@ -1,12 +1,12 @@
 {
   "format": "tsrust.build-provenance.v2",
-  "binarySha256": "e9372baaab19974f2ab8b353124c88330a99af54c8bc0d17a66359bee6823615",
+  "binarySha256": "51f7316cf9b9be93c53c94ea38b0483fafc90fcdb033213874e2d84ba6b728db",
   "buildInfo": {
     "projectName": "@push.rocks/smartmta",
-    "projectVersion": "9.6.0",
-    "gitCommit": "eac7a76f2d7e0a49006977a34ff678b638700a1f",
+    "projectVersion": "9.6.1",
+    "gitCommit": "b94f46490588851523694da9da9373dfa463aecf",
     "gitDirty": false,
-    "builtAt": "2026-09-15T17:08:15.103Z",
+    "builtAt": "2026-09-15T18:51:01.735Z",
     "tsrustVersion": "1.13.0",
     "binary": "mailer-bin",
     "target": "linux_arm64"

package/dist_ts/00_commitinfo_data.js

@@ -3,7 +3,7 @@
  */
 export const commitinfo = {
     name: '@push.rocks/smartmta',
-    version: '9.6.0',
+    version: '9.6.1',
     description: 'A high-performance, enterprise-grade Mail Transfer Agent (MTA) built from scratch in TypeScript with Rust acceleration.'
 };
 //# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiMDBfY29tbWl0aW5mb19kYXRhLmpzIiwic291cmNlUm9vdCI6IiIsInNvdXJjZXMiOlsiLi4vdHMvMDBfY29tbWl0aW5mb19kYXRhLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiJBQUFBOztHQUVHO0FBQ0gsTUFBTSxDQUFDLE1BQU0sVUFBVSxHQUFHO0lBQ3hCLElBQUksRUFBRSxzQkFBc0I7SUFDNUIsT0FBTyxFQUFFLE9BQU87SUFDaEIsV0FBVyxFQUFFLHlIQUF5SDtDQUN2SSxDQUFBIn0=

package/notices/aws-lc-sys-0.43.0-fiat-license.txt

@@ -0,0 +1,22 @@
+The MIT License (MIT)
+
+Copyright (c) 2015-2020 the fiat-crypto authors (see
+https://github.com/mit-plv/fiat-crypto/blob/master/AUTHORS).
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.