@sproutboat/toolchain 0.4.9 → 0.4.10

package/CHANGELOG.md

@@ -1,5 +1,14 @@
 # @sproutboat/toolchain
 
+## 0.4.10
+
+### Patch Changes
+
+- df11cef: Bump the pinned Porffor commit to the `alpha-7` tag. All local patches
+  (render.js, uwebsockets.js) verified against the real alpha-7 source via
+  `ensurePorffor()` — no anchor drift, full test suite green. `UWS_COMMIT`
+  unchanged, no uWebSockets re-vendor needed.
+
 ## 0.4.9
 
 ### Patch Changes

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sproutboat/toolchain",
-  "version": "0.4.9",
+  "version": "0.4.10",
   "license": "MIT",
   "type": "module",
   "repository": {

package/src/acquire.ts

@@ -5,7 +5,7 @@ import { homedir } from "node:os";
 import { resolve } from "node:path";
 // @ts-expect-error Bun's file loader supplies a path; see the pinned-commit
 // check below for why this is safe to trust unconditionally.
-import vendoredPorfforArchive from "../vendor/porffor-038f415.tar.gz" with { type: "file" };
+import vendoredPorfforArchive from "../vendor/porffor-8f01541.tar.gz" with { type: "file" };
 import { ensurePorfforPatched } from "./patch";
 import { PORFFOR_ARCHIVE_SHA256, PORFFOR_ARCHIVE_URL, PORFFOR_COMMIT_FULL } from "./pin";
 

package/src/pin.ts

@@ -1,8 +1,9 @@
 /**
  * The single pinned Porffor identity for the whole platform — the CLI and the
- * monorepo both read it from here. The `alpha-*` git tags ship no package.json,
- * so there is no npm dep to resolve; `ensurePorffor` fetches the commit tarball
- * and verifies it against `PORFFOR_ARCHIVE_SHA256`.
+ * monorepo both read it from here. Porffor's npm package ships only a prebuilt
+ * native binary (no compiler source), and sproutboat needs patchable source
+ * (see `patch.ts`), so `ensurePorffor` fetches the commit's git-archive tarball
+ * instead and verifies it against `PORFFOR_ARCHIVE_SHA256`.
  *
  * To move the pin: bump all four constants below (the sha is
  * `shasum -a 256` of the archive at `PORFFOR_ARCHIVE_URL`), check whether the
@@ -10,14 +11,14 @@
  * uWebSockets archive in `sproutboat-cli/vendor/` — then run both repos'
  * test + conformance suites. See sproutboat-cli/MIGRATION.md.
  */
-export const PORFFOR_CHANNEL = "alpha-6";
-export const PORFFOR_COMMIT_FULL = "038f415e08efc5f87a6bfcb05a18824caa3a14f6";
+export const PORFFOR_CHANNEL = "alpha-7";
+export const PORFFOR_COMMIT_FULL = "8f01541498d6d61c0cbbf8a71be152330888be7e";
 export const PORFFOR_COMMIT = PORFFOR_COMMIT_FULL.slice(0, 7);
 export const PORFFOR_ARCHIVE_SHA256 =
-  "61f65d8fac5f94a7910f0a3f046e8929a852addb0033a032b9f7e08d0b07df5c";
+  "fae9cfb00c0a21e20e3aa79a9a8093bd24820062039985c6bde2b23e3e8bdb8c";
 export const PORFFOR_ARCHIVE_URL = `https://codeload.github.com/CanadaHonk/porffor/tar.gz/${PORFFOR_COMMIT_FULL}`;
 
-/** A compact identity string for a manifest / report (`alpha-6 (038f415)`). */
+/** A compact identity string for a manifest / report (`alpha-7 (8f01541)`). */
 export function porfforVersion(): string {
   return process.env.PORFFOR_VERSION || `${PORFFOR_CHANNEL} (${PORFFOR_COMMIT})`;
 }