@sebastienrousseau/dotfiles 0.2.521 → 0.2.522

package/CHANGELOG.md

@@ -4,6 +4,40 @@ This file documents all notable changes to this project.
 
 ## Unreleased
 
+## v0.2.522 — 2026-09-21 (Unreleased)
+
+### Fixed
+
+- Classify Ghostty's macOS-native mirror separately from chezmoi-managed files
+  so targeted theme changes do not fail on an unmanaged mirror. Preserve
+  renderer diagnostics with the transaction instead of discarding errors.
+- Build Go helpers with private temporary directories despite stale shell/Go
+  settings; preserve existing binaries and report attempted build failures.
+- Wait for tracked Treesitter parser work and fail headless Neovim upgrades on
+  plugin errors, registry failures, or install timeouts instead of quitting early.
+- Reuse valid cached chezmoi binaries in CI by parsing the actual version
+  output; reject mismatched, malformed, prerelease, and failing binaries.
+- Preserve upgrade summaries when the progress renderer exits: contain SIGPIPE,
+  keep stderr open, and fall back to plain step output. Failed upgrades now
+  return nonzero and explain detached, untracked, or dirty source checkouts.
+- Declare the tree-sitter CLI required by current Neovim parser builds in the
+  managed mise defaults.
+- Keep manual release uploads and checksum manifests in agreement, including
+  raw HTML, plain text, the search index, and the Markdown source archive.
+- Fail manual publication on missing outputs or checksum mismatches; reject
+  empty and symlinked assets and exclude build intermediates from checksums.
+- Add consumer-download, tamper, missing-output, and fast-build regressions
+  for the next sequential patch, v0.2.522.
+
+### Added
+
+- Seventy-two deterministic rendered-config baselines covering six terminal/tmux
+  consumers, two wallpaper families, both appearance modes and three platform
+  inputs, checked on Linux and macOS CI hosts.
+- A schema-defined inventory of 32 legacy theme transaction targets with
+  adapter, format, ownership and snapshot-rollback contracts. This is audit
+  evidence, not the future core's mutation authority.
+
 ## v0.2.521 — 2026-09-20
 
 ### Changed

package/README.md

@@ -14,7 +14,7 @@
 
 <p align="center">
   <a href="https://github.com/sebastienrousseau/dotfiles/actions"><img src="https://img.shields.io/github/actions/workflow/status/sebastienrousseau/dotfiles/ci.yml?style=for-the-badge&logo=githubactions&logoColor=white" alt="Build" /></a>
-  <a href="https://github.com/sebastienrousseau/dotfiles/releases/latest"><img src="https://img.shields.io/badge/Version-v0.2.521-blue?style=for-the-badge&logo=semanticrelease&logoColor=white" alt="Version" /></a>
+  <a href="https://github.com/sebastienrousseau/dotfiles/releases/latest"><img src="https://img.shields.io/badge/Version-v0.2.522-blue?style=for-the-badge&logo=semanticrelease&logoColor=white" alt="Version" /></a>
   <a href="https://www.npmjs.com/package/@sebastienrousseau/dotfiles"><img src="https://img.shields.io/npm/v/@sebastienrousseau/dotfiles?style=for-the-badge&logo=npm&logoColor=white&label=npm" alt="npm" /></a>
   <a href="https://doc.dotfiles.io/"><img src="https://img.shields.io/badge/Manual-doc.dotfiles.io-66c2a5?style=for-the-badge&labelColor=555555&logo=materialformkdocs&logoColor=white" alt="Manual" /></a>
   <a href="https://github.com/sebastienrousseau/dotfiles/releases"><img src="https://img.shields.io/github/downloads/sebastienrousseau/dotfiles/total?style=for-the-badge&logo=github&logoColor=white" alt="Downloads" /></a>
@@ -83,11 +83,11 @@ release process are documented in
 
 ```bash
 curl -fsSL -o /tmp/dotfiles-install.sh \
-  https://github.com/sebastienrousseau/dotfiles/releases/download/v0.2.521/dotfiles-install-0.2.521.sh
+  https://github.com/sebastienrousseau/dotfiles/releases/download/v0.2.522/dotfiles-install-0.2.522.sh
 if command -v sha256sum >/dev/null 2>&1; then
-  echo "704e278f970d4aa53362204a89d044caefd64823b7d1cdf3a815c08cac971a89  /tmp/dotfiles-install.sh" | sha256sum -c -
+  echo "07ef5a3fbf3a98d7cb4cf6dc787ecce516121ca5a33b5ac793645bdcab6eaf03  /tmp/dotfiles-install.sh" | sha256sum -c -
 else
-  echo "704e278f970d4aa53362204a89d044caefd64823b7d1cdf3a815c08cac971a89  /tmp/dotfiles-install.sh" | shasum -a 256 -c -
+  echo "07ef5a3fbf3a98d7cb4cf6dc787ecce516121ca5a33b5ac793645bdcab6eaf03  /tmp/dotfiles-install.sh" | shasum -a 256 -c -
 fi
 bash /tmp/dotfiles-install.sh
 ```
@@ -106,10 +106,10 @@ directory. The archive
 carries SLSA build provenance (keyless, via Fulcio + Rekor):
 
 ```bash
-gh release download v0.2.521 --repo sebastienrousseau/dotfiles --pattern 'dot-*.tar.gz'
-gh attestation verify dot-0.2.521.tar.gz --repo sebastienrousseau/dotfiles
-tar -xzf dot-0.2.521.tar.gz
-make -C dot-0.2.521 install PREFIX=/usr/local
+gh release download v0.2.522 --repo sebastienrousseau/dotfiles --pattern 'dot-*.tar.gz'
+gh attestation verify dot-0.2.522.tar.gz --repo sebastienrousseau/dotfiles
+tar -xzf dot-0.2.522.tar.gz
+make -C dot-0.2.522 install PREFIX=/usr/local
 ```
 
 [`release-install-smoke.yml`](.github/workflows/release-install-smoke.yml)
@@ -305,7 +305,7 @@ every push.
 bash /tmp/dotfiles-install.sh  # after the verified download above
 
 # Only the dot CLI, from the attested release archive
-gh release download v0.2.521 --repo sebastienrousseau/dotfiles --pattern 'dot-*.tar.gz'
+gh release download v0.2.522 --repo sebastienrousseau/dotfiles --pattern 'dot-*.tar.gz'
 
 # The Go satellites are (re)built on apply by
 #   defaults/run_onchange_24-build-dot-ui.sh.tmpl
@@ -867,7 +867,7 @@ design is
 
 ```toml
 # defaults/.chezmoidata.toml — repo-wide defaults, schema-checked in CI
-dotfiles_version = "0.2.521"
+dotfiles_version = "0.2.522"
 
 [features]
 alias_wrapper = false   # confirm destructive aliases

package/install.sh

@@ -71,7 +71,7 @@ show_help() {
 Usage: install.sh [version] [options]
 
 Arguments:
-  version       The version (tag or branch) to install (default: v0.2.521)
+  version       The version (tag or branch) to install (default: v0.2.522)
 
 Options:
   --help        Show this help message
@@ -87,7 +87,7 @@ EOF
 }
 
 main() {
-  local version="v0.2.521"
+  local version="v0.2.522"
   local version_set=0
   local minimal=0
   local provision="${DOTFILES_PROVISION:-0}"
@@ -117,7 +117,7 @@ main() {
         # like `foobar` doesn't trigger a 30s+ network download attempt.
         # Caught by the install.sh fuzz harness (#881).
         if [[ ! "$arg" =~ ^v?[0-9]+\.[0-9]+\.[0-9]+([-+][a-zA-Z0-9.-]+)?$ ]]; then
-          error "Unrecognized positional argument '$arg' — expected a semver version (e.g. v0.2.521)."
+          error "Unrecognized positional argument '$arg' — expected a semver version (e.g. v0.2.522)."
         fi
         version="$arg"
         version_set=1
@@ -435,7 +435,7 @@ main() {
   # 6. Initialize & Apply
   step "Applying Configuration..."
 
-  # ── Auto-migration for v0.2.521 reorg ─────────────────────────────────
+  # ── Auto-migration for v0.2.522 reorg ─────────────────────────────────
   # If the user is upgrading from a pre-0.2.503 install, run the
   # migration script BEFORE `chezmoi apply` so the reorg's source-
   # path moves don't cause chezmoi to delete deployed files.
@@ -444,7 +444,7 @@ main() {
   for migrate_src in "$SOURCE_DIR" "$LEGACY_SOURCE_DIR"; do
     migrate_script="$migrate_src/install/migrate/migrate-v0_2-to-v0_2_503.sh"
     if [[ -x "$migrate_script" ]]; then
-      echo "   Running v0.2.521 migration (idempotent; safe on fresh installs)..."
+      echo "   Running v0.2.522 migration (idempotent; safe on fresh installs)..."
       "$migrate_script" || echo "   migration exited non-zero — continuing apply"
       break
     fi

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sebastienrousseau/dotfiles",
-  "version": "0.2.521",
+  "version": "0.2.522",
   "description": "The Trusted Shell Platform — Universal dotfiles managed by Chezmoi. Features Bash & Zsh for macOS, Linux & WSL. Rust modern tooling & enterprise-grade security.",
   "main": "install.sh",
   "bin": {