v5 WS1+WS2: ledger-free hosted mode, upstream-restore rollback, vendor ejects hosted projects - #280

Merged

Mikola Lysenko (mikolalysenko) merged 66 commits into

release/v5-prereleasefrom

v5/ledger-free-hosted

Sep 28, 2026

Commits on Sep 27, 2026

Stop writing the hosted redirect ledger from scan

Mikola Lysenko (mikolalysenko)
and
Claude (claude)
committed
7115db4
Restore hosted pins to their upstream registry entries instead of replaying the ledger
Claude (claude)
committed
f0e3921
Update rollback prompt unit test for the upstream-restore wording
Claude (claude)
committed
03643e0
Derive list, scan updates and takeover state from lockfile hosted pins
Claude (claude)
committed
61d7191
Drop the hosted ledger from get, repair, the in-memory engine and the scan fold
Claude (claude)
committed
a01ae92
vendor ejects a hosted project; vendoring over any hosted pin restores upstream first
Claude (claude)
committed
bd0f6d2
Rewrite scan/mod.rs takeover unit tests for lockfile-derived hosted state
Claude (claude)
committed
65d25c7
Restore hosted gem and composer pins to their upstream entries
Claude (claude)
committed
e1bb9a6
Fix clippy findings in the eject and takeover paths
Claude (claude)
committed
37e96e2
Restore hosted PyPI pins to their upstream registry entries
Claude (claude)
committed
1257869
Restore vlt, Maven and NuGet hosted pins to their upstream entries
Claude (claude)
committed
1a2ff9f
Drop dead fixture fields clippy flags in covgap_commands_rollback
Claude (claude)
committed
c0d0797
Retire a pre-v5 hosted ledger when rollback finds nothing else; update the cargo guard test
Claude (claude)
committed
5eadb00
Feed the hosted scan's in-run VEX this run's records
Claude (claude)
committed
2b331c1

Commits on Sep 28, 2026