Skip to content

release: promote develop for 0.5.0 - #187

Merged
smiggleworth merged 26 commits into
mainfrom
develop
Oct 14, 2026
Merged

smiggleworth merged 26 commits into
mainfrom
develop

Conversation

@smiggleworth

Copy link
Copy Markdown
Contributor

Purpose

Queue this repository's current develop branch for the coordinated AskrJS 0.5.0 promotion review.

Review hold

Use this PR for the full adversarial review of the latest develop head. Keep it open and do not merge it to main until the cross-repository review is complete, exact-head checks and acceptance evidence are read back, and all release-blocking issues have an evidence-backed disposition.

The coordinated release trackers are askr#744, askr#745, askr#747, askr-auth#64, and askr-examples#29, #30, #32. Live provider qualification askr-auth#71 is deferred outside 0.5.0 under the agreed signed-mock scope.

Opening this promotion PR does not close those issues or authorize a tag, publication, deployment, or merge to main. Review against the latest branch head after final develop integration and acceptance evidence are attached.

smiggleworth and others added 23 commits September 29, 2026 14:11
Load @npmcli/config/lib/definitions through createRequire so Node ESM no longer rejects the bare directory import, and add a test that builds the CLI and runs outdated/update/upgrade from the real bin under plain Node against a stub registry. Closes #150.
…ames (#154)

Hold the skills target lock across the whole check, stage, update, and swap cycle so a sync never copies a tree that another sync is renaming (EPERM on Windows, ENOENT or an empty stage elsewhere). Retry EPERM/EBUSY/EACCES swap renames with a bounded backoff, and run the install preconditions under the lock. Closes #153.
…with 6 updates (#144)

* chore(deps): bump the other-minor-and-patch group across 1 directory with 6 updates

Bumps the other-minor-and-patch group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@npmcli/config](https://github.com/npm/cli/tree/HEAD/workspaces/config) | `11.0.1` | `11.1.0` |
| [ignore](https://github.com/kaelzhang/node-ignore) | `7.0.9` | `7.0.10` |
| [js-yaml](https://github.com/nodeca/js-yaml) | `5.4.1` | `5.4.2` |
| [tsx](https://github.com/privatenumber/tsx) | `4.23.13` | `4.23.15` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.5.0` | `26.6.3` |
| [vite-plus](https://github.com/voidzero-dev/vite-plus/tree/HEAD/packages/cli) | `0.3.1` | `0.3.3` |



Updates `@npmcli/config` from 11.0.1 to 11.1.0
- [Release notes](https://github.com/npm/cli/releases)
- [Changelog](https://github.com/npm/cli/blob/latest/workspaces/config/CHANGELOG.md)
- [Commits](https://github.com/npm/cli/commits/v11.1.0/workspaces/config)

Updates `ignore` from 7.0.9 to 7.0.10
- [Release notes](https://github.com/kaelzhang/node-ignore/releases)
- [Commits](kaelzhang/node-ignore@7.0.9...7.0.10)

Updates `js-yaml` from 5.4.1 to 5.4.2
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](nodeca/js-yaml@5.4.1...5.4.2)

Updates `tsx` from 4.23.13 to 4.23.15
- [Release notes](https://github.com/privatenumber/tsx/releases)
- [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs)
- [Commits](privatenumber/tsx@v4.23.13...v4.23.15)

Updates `@types/node` from 26.5.0 to 26.6.3
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `vite-plus` from 0.3.1 to 0.3.3
- [Release notes](https://github.com/voidzero-dev/vite-plus/releases)
- [Commits](https://github.com/voidzero-dev/vite-plus/commits/v0.3.3/packages/cli)

---
updated-dependencies:
- dependency-name: "@npmcli/config"
  dependency-version: 11.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: other-minor-and-patch
- dependency-name: "@types/node"
  dependency-version: 26.6.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: other-minor-and-patch
- dependency-name: ignore
  dependency-version: 7.0.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: other-minor-and-patch
- dependency-name: js-yaml
  dependency-version: 5.4.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: other-minor-and-patch
- dependency-name: tsx
  dependency-version: 4.23.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: other-minor-and-patch
- dependency-name: vite-plus
  dependency-version: 0.3.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: other-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* fix(deps): update brace-expansion security patch

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Jeff Repanich <jrepanich@gmail.com>
…incremental (#156)

Concurrent incremental builds copied the live output folder into staging
before taking the lock, so a build could stage from a half-swapped tree or
race the other build's rename. The copy now runs under the same lock as the
swap, held only for the copy and not for site generation.
)

Publishing runs in the npm environment, which now only deploys from main, so
the workflow no longer needs its own GITHUB_REF check.
* fix: correct analyzer ownership and qualify measured benchmarks

* fix: refresh audited dependencies and avoid irrelevant symbol lookups

* test: qualify hosted analyzer limits against the measured baseline
* fix: preserve originals across failed CLI file updates

* test: compare JSON-quoted recovery paths on Windows
* fix: recover interrupted directory publication

* test: match quoted directory recovery paths
* test: expose contended publication rejection reasons

* fix: retry Windows lock scans during owner handoff
* fix: classify lock reads and dispose rejected OpenAPI bodies

* test: wait for installer handles before fixture cleanup
…with 5 updates (#171)

Bumps the other-minor-and-patch group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@npmcli/config](https://github.com/npm/cli/tree/HEAD/workspaces/config) | `11.1.0` | `11.2.0` |
| [ignore](https://github.com/kaelzhang/node-ignore) | `7.0.10` | `7.0.12` |
| [js-yaml](https://github.com/nodeca/js-yaml) | `5.4.2` | `5.4.3` |
| [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.6.3` | `26.6.4` |
| [publint](https://github.com/publint/publint/tree/HEAD/packages/publint) | `0.3.24` | `0.3.25` |



Updates `@npmcli/config` from 11.1.0 to 11.2.0
- [Release notes](https://github.com/npm/cli/releases)
- [Changelog](https://github.com/npm/cli/blob/latest/workspaces/config/CHANGELOG.md)
- [Commits](https://github.com/npm/cli/commits/v11.2.0/workspaces/config)

Updates `ignore` from 7.0.10 to 7.0.12
- [Release notes](https://github.com/kaelzhang/node-ignore/releases)
- [Commits](kaelzhang/node-ignore@7.0.10...7.0.12)

Updates `js-yaml` from 5.4.2 to 5.4.3
- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)
- [Commits](nodeca/js-yaml@5.4.2...5.4.3)

Updates `@types/node` from 26.6.3 to 26.6.4
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `publint` from 0.3.24 to 0.3.25
- [Release notes](https://github.com/publint/publint/releases)
- [Changelog](https://github.com/publint/publint/blob/master/packages/publint/CHANGELOG.md)
- [Commits](https://github.com/publint/publint/commits/publint@0.3.25/packages/publint)

---
updated-dependencies:
- dependency-name: "@npmcli/config"
  dependency-version: 11.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: other-minor-and-patch
- dependency-name: "@types/node"
  dependency-version: 26.6.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: other-minor-and-patch
- dependency-name: ignore
  dependency-version: 7.0.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: other-minor-and-patch
- dependency-name: js-yaml
  dependency-version: 5.4.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: other-minor-and-patch
- dependency-name: publint
  dependency-version: 0.3.25
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: other-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
… 4 updates (#161)

Bumps the askr-packages group with 4 updates in the / directory: [@askrjs/askr](https://github.com/askrjs/askr), [@askrjs/themes](https://github.com/askrjs/askr-themes), [@askrjs/ui](https://github.com/askrjs/askr-ui) and [@askrjs/vite](https://github.com/askrjs/askr-vite).


Updates `@askrjs/askr` from 0.4.0 to 0.4.3
- [Changelog](https://github.com/askrjs/askr/blob/develop/CHANGELOG.md)
- [Commits](askrjs/askr@v0.4.0...v0.4.3)

Updates `@askrjs/themes` from 0.4.0 to 0.4.2
- [Changelog](https://github.com/askrjs/askr-themes/blob/develop/CHANGELOG.md)
- [Commits](askrjs/askr-themes@v0.4.0...v0.4.2)

Updates `@askrjs/ui` from 0.4.0 to 0.4.3
- [Changelog](https://github.com/askrjs/askr-ui/blob/develop/CHANGELOG.md)
- [Commits](askrjs/askr-ui@v0.4.0...v0.4.3)

Updates `@askrjs/vite` from 0.4.0 to 0.4.1
- [Changelog](https://github.com/askrjs/askr-vite/blob/develop/CHANGELOG.md)
- [Commits](askrjs/askr-vite@v0.4.0...v0.4.1)

---
updated-dependencies:
- dependency-name: "@askrjs/askr"
  dependency-version: 0.4.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: askr-packages
- dependency-name: "@askrjs/themes"
  dependency-version: 0.4.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: askr-packages
- dependency-name: "@askrjs/ui"
  dependency-version: 0.4.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: askr-packages
- dependency-name: "@askrjs/vite"
  dependency-version: 0.4.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: askr-packages
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* feat(cli): plan explicit server provider auth setup

* ci: pin provider generator source qualification

* test(cli): normalize generated fixture paths
@smiggleworth
smiggleworth merged commit 14ded90 into main Oct 14, 2026
20 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant