From b6108a78d1cc2437cf7e4e35aba7591bcc95c187 Mon Sep 17 00:00:00 2001 From: Claude Date: Fri, 9 Oct 2026 12:43:59 +0000 Subject: [PATCH] List vlt 1.3.8 as supported to clear nightly canary vlt 1.3.8 was published 2026-10-09 01:13 UTC. The nightly vlt canary (run 37884801041) ran every capstone on it on Linux, macOS and Windows and all legs passed (lockfileVersion 1, check-vlt-legs clean), but the Linux leg still failed: its release watchdog flags any npm release the Releases table neither supports nor excludes. The canary has been red on main every night since 2026-10-05 for this reason, each time a new 1.3.x landed before the table caught up. Add 1.3.8 to the supported row and era F, pin its tarball sha512 (verified against the registry tarball) in vlt-historical-integrity .json, and regenerate vlt-leg-manifest.json with `check-vlt-legs.py --derive`. Co-Authored-By: Claude Opus 5.5 (1M context) Claude-Session: https://claude.ai/code/session_01Y84SHDkE2u1fTo4FmecDNH --- crates/socket-patch-cli/tests/vlt-leg-manifest.json | 3 ++- docs/testing/vlt-compatibility.md | 6 +++--- scripts/vlt-historical-integrity.json | 3 ++- 3 files changed, 7 insertions(+), 5 deletions(-) diff --git a/crates/socket-patch-cli/tests/vlt-leg-manifest.json b/crates/socket-patch-cli/tests/vlt-leg-manifest.json index 4c82a2489..ef2d78dad 100644 --- a/crates/socket-patch-cli/tests/vlt-leg-manifest.json +++ b/crates/socket-patch-cli/tests/vlt-leg-manifest.json @@ -970,7 +970,8 @@ "1.3.4", "1.3.5", "1.3.6", - "1.3.7" + "1.3.7", + "1.3.8" ], "excluded": [ "0.0.0-0", diff --git a/docs/testing/vlt-compatibility.md b/docs/testing/vlt-compatibility.md index 57f4332bc..e888cc545 100644 --- a/docs/testing/vlt-compatibility.md +++ b/docs/testing/vlt-compatibility.md @@ -18,7 +18,7 @@ vlt project, and the caveats users meet, are in | C | 1.0.0-rc.15 … 1.0.0-rc.32 | `1` | `~` / `+` + `_x` escapes (`~npm~name@ver`), `peer.N` | absent | | D | 1.0.0-rc.33 … 1.0.7 | `1` | as C | the registry URL | | E | 1.0.8 … 1.1.1 | `1` | as C, `peer.<16 hex>` | the registry URL | -| F | 1.2.0 … 1.3.7 | `1` | as E; the global store (`store-linker`) | the registry URL | +| F | 1.2.0 … 1.3.8 | `1` | as E; the global store (`store-linker`) | the registry URL | On every release that writes slot [3], it is omitted when the project configures `registry` and the node's tarball URL starts with it (vlt's @@ -203,7 +203,7 @@ toolchain problem a failure, and so does `CI=true` with `_JS` unset. | supported | `1.0.0-rc.1`, `1.0.0-rc.2`, `1.0.0-rc.3`, `1.0.0-rc.4`, `1.0.0-rc.5`, `1.0.0-rc.6`, `1.0.0-rc.7`, `1.0.0-rc.8`, `1.0.0-rc.9`, `1.0.0-rc.10`, `1.0.0-rc.11`, `1.0.0-rc.12`, `1.0.0-rc.13`, `1.0.0-rc.14`, `1.0.0-rc.15`, `1.0.0-rc.16`, `1.0.0-rc.17`, `1.0.0-rc.18` | | supported | `1.0.0-rc.22`, `1.0.0-rc.23`, `1.0.0-rc.24`, `1.0.0-rc.25`, `1.0.0-rc.26`, `1.0.0-rc.27`, `1.0.0-rc.28`, `1.0.0-rc.29`, `1.0.0-rc.30`, `1.0.0-rc.31`, `1.0.0-rc.32`, `1.0.0-rc.33`, `1.0.0-rc.34` | | supported | `1.0.1`, `1.0.2`, `1.0.3`, `1.0.4`, `1.0.5`, `1.0.6`, `1.0.7`, `1.0.8`, `1.0.9`, `1.0.10`, `1.1.0`, `1.1.1`, `1.2.0` | -| supported | `1.3.0`, `1.3.1`, `1.3.2`, `1.3.3`, `1.3.4`, `1.3.5`, `1.3.6`, `1.3.7` | +| supported | `1.3.0`, `1.3.1`, `1.3.2`, `1.3.3`, `1.3.4`, `1.3.5`, `1.3.6`, `1.3.7`, `1.3.8` | | excluded (broken install) | `0.0.0-0` | | excluded (Deno-compiled wrappers) | `0.0.0-2`, `0.0.0-3`, `0.0.0-4`, `0.0.0-5`, `0.0.0-6`, `0.0.0-7`, `0.0.0-8`, `0.0.0-9`, `0.0.0-10` | | excluded (`vlt install` exits 13 on Node 24 after "Done") | `0.0.0-22` | @@ -212,7 +212,7 @@ toolchain problem a failure, and so does `CI=true` with `_JS` unset. `0.0.0-0.` builds are excluded too. Every supported release through 1.2.0 was run through all five capstones on macOS during SP-9; -1.3.0 … 1.3.7 were run through them on Linux, and the nightly canary ran +1.3.0 … 1.3.8 were run through them on Linux, and the nightly canary ran 1.3.x `vlt@latest` through them on Linux, macOS and Windows (the CI matrix samples them per OS). diff --git a/scripts/vlt-historical-integrity.json b/scripts/vlt-historical-integrity.json index d337467d4..65a7155ce 100644 --- a/scripts/vlt-historical-integrity.json +++ b/scripts/vlt-historical-integrity.json @@ -72,5 +72,6 @@ "1.3.4": "sha512-W9d0LfZbGltW4la6U4YZnEDEnNyu2OVRnqTuKRCfjY+ck5BB/7b8bQmmk+J4RHZ94U7OT+GepU1og5p8o6QE0g==", "1.3.5": "sha512-UR4yVcULH9vccyatHI+rU5gTI1rdWcJKYMuLkXI5O18q6hsUoCiEGqBxqPbFDFROsEhkBAOkGCFDVyGd2RqRfg==", "1.3.6": "sha512-ooaGujc9YBedp6OOIbDc8OvCaUEvwjwgMEJji1NySzVdfd3u6d0q90Sey4IEYctGUD249LSOxyE/+6aG4QvqWw==", - "1.3.7": "sha512-ULCK3PDWY6HTkle9+OLyNbfqyA9xW1b6HVgYVIlPu/hbJFFizrionsNUpffSc+BS3VD842GfzslvRzX3y+5B6g==" + "1.3.7": "sha512-ULCK3PDWY6HTkle9+OLyNbfqyA9xW1b6HVgYVIlPu/hbJFFizrionsNUpffSc+BS3VD842GfzslvRzX3y+5B6g==", + "1.3.8": "sha512-Wq8w41JoXAkA4S7qVsPCHxQmhmalgR0mpoMLInsrt8ZySiudR9Gn+nbGucKhDk4UkwdGvAGX7jw873Yimm8fCg==" }