Repository navigation
chore: prepare 0.1.5 patch release - #63
Merged
Merged
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Prepare v0.1.5 so installers receive the merged numerical and calendar fixes and updated task guides. Bump the package version, correct release-guide artifact provenance, and refresh the certifi and virtualenv development lock entries caught by the release audit.
The CI audit failed on certifi 2026.7.22 (PYSEC-2026-4320) and virtualenv 21.14.8 (CVE-2026-113722). Upgrade them to 2026.10.19 and 21.14.12. The corrected environment audit is clean; the unreleased local package is skipped. Upstream advisories: GHSA-6q48-6c7w-9gw2 and GHSA-c978-59m8-c77v.
At b4c8580 all 33 applicable hosted checks pass, including source/installed-wheel platform matrices, current and supported-minimum vulnerability scans, strict documentation and MPS. Two jobs skip under configured conditions, including main-only CUDA/performance. Local source, installed-wheel and CPU qualification also pass. Publication uses the protected release workflow with fresh CUDA/performance qualification, artifact identity, PyPI installation and deployed-documentation verification.
Administrative release/dependency maintenance follows the contribution-policy exception. AI assistance: Codex prepared, reviewed and verified the release under the maintainer's instruction.