omnipkg v2.2.3 - Windows Stability, Daemon Overhaul & Concurrency Fixes

Release Notes — omnipkg v2.2.3

This release focuses on major Windows reliability improvements, daemon lifecycle fixes, concurrency stability, and cross-platform process management. After extensive debugging and refactoring, daemon behavior and subprocess handling are now stable under heavy parallel workloads.

⸻

🪟 Windows Compatibility & Stability

Daemon & Worker Execution
• Fixed parallel subprocess deadlocks during metadata parsing and package operations.
• Hardened Windows daemon launch logic to prevent hangs and zombie workers.
• Added compatibility layer for Windows daemon execution.
• Eliminated visible console popups when spawning background workers.
• Improved worker lifecycle handling to prevent orphaned processes.

Console & Encoding Fixes
• Resolved Windows console Unicode and mojibake issues.
• All subprocess calls now explicitly use UTF-8 encoding.
• Enabled proper ANSI escape sequence support on Windows consoles.

Path & Process Handling
• Removed hardcoded /tmp usage in favor of platform-correct temp paths.
• Subprocess execution now consistently uses interpreter-safe invocation patterns.
• Improved interpreter configuration handling across parallel executions.

⸻

⚡ Core Improvements

Worker & Daemon Lifecycle
• Improved daemon start/stop/restart handling.
• Added CLI daemon restart support.
• Idle worker detection and cleanup logic improved.
• Worker reuse and shutdown behavior stabilized.

Output & CI Stability
• Forced unbuffered output in daemon workers.
• Fixed delayed logging during CI/CD runs.
• Reduced buffering issues during concurrent installs.

Dispatcher & Core Execution
• Dispatcher logic simplified and stabilized.
• Reduced race conditions in worker dispatch logic.
• Improved concurrency handling in metadata processing.

⸻

🌍 Internationalization
• Major Japanese translation updates and catalog cleanup.
• Improved message consistency.
• Locale handling fixes across CLI and daemon components.

⸻

🛡️ Maintenance & Infrastructure
• Added missing third-party license files.
• Updated THIRD_PARTY_NOTICES.
• Fixed concurrent metadata builder race conditions.
• Cleanup of misplaced test files and legacy code.
• Removed duplicate module imports and dead code.

⸻

🧪 Test & CI Improvements
• Improved concurrency testing workflows for Windows.
• Updated rich switching and interpreter switching tests.
• Stability improvements in stress and concurrency test suites.

⸻

📦 Summary

55+ files changed
~6900 insertions / ~4500 deletions

This release significantly improves reliability for:
• Windows environments
• Concurrent installs
• Metadata processing
• Worker reuse
• Long-running daemon sessions

⸻

---

New Features:

• feat: daemon idle worker management and i18n updates

Bug Fixes:

• fix: add encoding='utf-8' to all subprocess calls to fix Windows Unicode issues

Updates:

• Update dispatcher.py
• Update worker_daemon.py
• Update test_rich_switching.py
• Update loader.py
• Update test_uv_switching.py
• Update package_meta_builder.py
• Update cli.py
• Update run.py
• Update workers.py
• Update common_utils.py
• ...and 2 more updates

Other Changes:

• fix(windows): resolve parallel subprocess deadlocks and interpreter config
• Remove misplaced test files from root directory
• fix windows subprocess calls
• Create windows_daemon_compat.py
• Revert "pyproject.toml", "requirements-trace.txt" to state before ef66efa (parent: ce64655)
• ...and 4 more changes

55 files changed, 7106 insertions(+), 4488 deletions(-)

omnipkg v2.2.2 - こんにちは, World — 50 Commits, One Release: Japanese i18n + Configurable/Opt‑In Daemons

Implements comprehensive daemon management and i18n improvements:

Daemon & Worker Management:

• Add 'daemon idle' command for Python version-specific worker pool config
• Group idle workers by Python version in resource monitor
• Add stale worker detection (>24h) with interactive cleanup
• Add daemon restart command (stop + start)
• Make Windows daemon opt-in (OMNIPKG_ENABLE_DAEMON_WINDOWS) with UTF-8/unbuffered I/O
• Remove implicit auto-start for explicit control

Internationalization (i18n):

• Complete Japanese translation (ja/LC_MESSAGES/omnipkg.po)
• Hoist i18n imports to global scope, fix UnboundLocalError
• Add OMNIPKG_LANG env var for language priority
• Propagate lang setting to all subprocesses and shims
• Replace print() with safe_print() for encoding safety

Testing & CI:

• Windows concurrency test workflow improvements
• Stress test CLI args for specific test selection
• Non-blocking daemon startup in concurrent tests

Files changed: 78 files changed, 9304 insertions(+), 6573 deletions(-)

Features:

• feat(i18n): Integrate and propagate i18n across core components

Fixes:

• fix(i18n): finalize Japanese translation
• fix(cli): hoist i18n imports to global scope to prevent UnboundLocalError

Refactoring:

• refactor: remove undefined name from __all__
• refactor: remove reimported module
• refactor: remove unnecessary return statement

Configuration Updates:

• Update windows-concurrency-test.yml
• Update README.md
• Update publish.yml
• Update conda_build.yml
• Update meta-platforms.yaml
• Update meta-noarch.yaml

Other Changes:

• restore: recover deleted changelog

---

omniPkg v2.2.1 - Surgical Knowledge Base, Build Resilience & Global Infrastructure

v2.2.1 represents a major convergence of performance optimization and infrastructure expansion. This release introduces "Surgical Strategy Execution" for ultra-fast metadata updates, integrates a robust fallback for hardware atomics, and merges extensive CI/CD support for global deployment platforms.

🚀 Performance: Surgical Strategy Execution

We have completely overhauled how the Knowledge Base updates after an installation.

• Targeted Discovery: Instead of scanning the entire virtual environment for changes, the metadata builder now performs "surgical" lookups restricted to the active environment and specific bubble directories.
• Parallel Execution: Strategy runners now execute in parallel on these targeted roots.
• Result: Post-install Knowledge Base synchronization is now exponentially faster, especially in large environments.

🛠 Build Resilience & C-Extensions

• Graceful Fallback: setup.py has been hardened. If the C-based hardware atomic extensions fail to compile (e.g., on specific non-standard architectures), the installer now gracefully falls back to a pure Python implementation instead of crashing.
• Noarch Support: Added OMNIPKG_SKIP_C_EXT environment variable support for building platform-agnostic wheels.

🌍 Infrastructure & CI/CD

Merged extensive infrastructure updates from the development branch:

• Multi-Platform Deployment: Added configuration support for Netlify, Vercel, and GitLab Pages.
• Conda Recipes: Updated meta-noarch.yaml and meta-platforms.yaml for better cross-platform build verification.
• CI Workflows: Enhanced GitHub Actions for cross-platform build verification and publishing.

🐛 Critical Bug Fixes

• Crash Fix: Resolved a TypeError in _discover_distributions where targeted_packages could be None.
• Scope Fix: Fixed a NameError regarding bubble_path in the package verification logic.
• Ghost Instance Healing: The Knowledge Base now correctly identifies and removes "ghost" instances (entries in the DB that no longer exist on disk) during synchronization.

🌐 Localization

• Chinese (Simplified): Added comprehensive zh_CN translations for the core CLI and logging outputs.

Full Changelog: v2.2.0...v2.2.1

omnipkg v2.2.0 - Per-Process Python Isolation for Safe, Concurrent, CI-Ready Workflows

Overview

Version 2.2.0 represents a comprehensive architectural redesign focused on performance optimization, automation enhancement, and code quality improvements. This release introduces a persistent daemon architecture, optional hardware-accelerated atomic operations, and fully automated continuous delivery pipelines.

Major Features

High-Performance Worker Daemon

Replaced the on-demand worker system with WorkerPoolDaemon, a persistent service that maintains pre-forked Python processes. This architecture delivers near-instantaneous response times for package execution by eliminating cold-start overhead.

Key Benefits:

• Sub-millisecond latency for subsequent executions
• Reduced system resource overhead
• Improved process isolation and lifecycle management

Hardware-Accelerated Atomic Operations

Introduced an optional C extension (omnipkg_atomic) implementing compare-and-swap (CAS) operations using native CPU atomic instructions. The system gracefully degrades to a pure-Python implementation when compilation is unavailable.

Technical Details:

• HFT-grade concurrency control
• Lock-free data structures
• Zero-overhead abstraction with automatic fallback

Automated Conda-Forge Release Pipeline

Implemented end-to-end automation for conda-forge distribution:

1. Monitors PyPI publication
2. Computes package SHA256 checksums
3. Generates conda-forge feedstock pull requests
4. Validates CI/CD test results
5. Auto-merges upon successful validation
6. Manages multi-platform build orchestration

Enhancements

Internationalization Expansion

Expanded translation coverage across CLI interfaces and logging systems, improving accessibility for international users.

Intelligent Resource Monitoring

Enhanced 8pkg daemon monitor with daemon API integration for real-time worker pool status and accurate process tracking.

Dependency-Aware Verification

Improved installation verification logic to include transitive dependencies in bubble environments (e.g., providing TensorFlow when verifying Keras imports).

Integrated Historical Package Support

Consolidated time-machine functionality directly into core installation logic, eliminating the need for a separate module.

Code Quality Improvements

Architectural Simplification

• Removed deprecated components: worker_controller.py, deptimemachine.py, lockmanager.py
• Consolidated daemon logic into centralized modules
• Reduced codebase complexity by ~1,500 lines

Test Suite Modernization

• Refactored test suite to align with daemon architecture
• Removed obsolete test files
• Focused on production-grade performance benchmarks

Breaking Changes

None. This release maintains backward compatibility with v2.1.x configurations.

Upgrade Instructions

pip install --upgrade omnipkg
# or
conda install -c conda-forge omnipkg

For users running the daemon, restart is recommended:

8pkg daemon stop && 8pkg daemon start

omnipkg v2.1.2 - Urllib3 CVE Patch, Speed & The Live Bridge

omnipkg v2.1.2 - Urllib3 CVE Patch, Speed & The Live Bridge

This release hardens the security posture, optimizes the core installation logic, and expands the interactive documentation suite.

🔒 Critical Security

• CVE-2026-21441 Patched: Forced upgrade to urllib3==2.6.3 to address potential request vulnerabilities.
• Smart Bridge Routing: The Web UI now intelligently detects the connection context. It automatically routes API requests via the secure Tailscale proxy (/omnipkg-api) when accessing remotely, or utilizes direct ports when on localhost.

⚡ Core Improvements

• Installation Optimization: Removed a redundant pip install execution path in the core logic. This eliminates unnecessary "Requirement already satisfied" checks, resulting in a cleaner console output and faster resolution times.
• Real-Time KB Feedback: The Knowledge Base builder now streams security scan progress (Safety/Pip-Audit) in real-time, providing better feedback during long-running background operations.

📚 Interactive Documentation

• New Deep-Dive Demos: Added comprehensive documentation and live demos for:
  • Multiverse Healing: Cross-python context switching logic.
  • Script Healing: The omnipkg run auto-wrapper.
• Remote Telemetry: Enhanced telemetry tracking for interactive sessions connected via Tailscale to monitor bridge health and latency.

📦 Installation

pip install omnipkg==2.1.2

omniokg v2.1.1 - Fix streaming output for interactive docs + comprehensive documentation

Critical Fix

• BREAKING: Fixed execute endpoint to stream output in real-time via SSE
  • Changed from buffered subprocess.run() to streaming subprocess.Popen()
  • Implements Server-Sent Events (SSE) for line-by-line output delivery
  • Prevents timeout/hanging issues in interactive documentation console
  • Essential for demo functionality in web-based docs

Bridge API Improvements

• Added streaming generator pattern to execute_omnipkg_command()
• Enhanced CORS origins for local development (localhost:5000, 127.0.0.1:8085)
• Improved error handling with streaming error messages
• Added health check telemetry logging
• Cloudflare Worker telemetry forwarding (fire-and-forget)
• DEV_MODE now allows missing Origin header for curl/testing

Documentation Overhaul (Interactive)

• New Structure: Organized into sections with .pages.yml navigation
  • CLI Commands: overview, details, run command deep-dive
  • Platform Support: CI verification matrix, 70+ builds documented
  • Demos: 4 interactive examples (C extensions, Rich, TensorFlow, uv)
• Enhanced MkDocs Config:
  • Fixed site_url for Cloudflare Pages deployment
  • Added navigation.instant, .tracking, .sections, .expand features
  • Enabled mkdocs-awesome-pages-plugin for auto-navigation
  • Added mkdocs-macros, minify, redirects plugins
  • YAML front matter support via meta extension
• All docs now include:
  • Generated metadata headers (title, doc_type, status, created date)
  • Interactive command execution via embedded terminal
  • Real-time streaming output (powered by fixed SSE endpoint)

Package Metadata Updates

• Version bump: 2.1.0 → 2.1.1
• Updated conda recipes with new PyPI SHA256
• Fixed aiohttp version constraint (>=3.13.3) for Conda-Forge
• Added flask + flask-cors to dependencies for Conda-Forge
• Updated doc URLs to omnipkg.pages.dev
• Added interactive console URL to package description

Files Changed

• src/omnipkg/apis/local_bridge.py: SSE streaming implementation
• docs/: +15 new markdown files with interactive content
• mkdocs.yml: Complete restructure with modern nav features
• pyproject.toml: Version bump + metadata refresh
• requirements-docs.txt: Added missing MkDocs plugins

Testing

• Interactive docs console tested with streaming output
• CORS validated for localhost + Cloudflare origins
• Health check telemetry confirmed working
• All 24 conda-forge builds passing (verified via CI links in docs)

Fixes #N/A (emergency release for docs functionality)

---

# GitHub Release Notes

## 🚨 v2.1.1 - Critical Streaming Fix + Interactive Documentation

**Release Date**: January 7, 2026

### 🔥 Breaking Change - Streaming Output API

The `/execute` endpoint now **streams output in real-time** using Server-Sent Events (SSE) instead of buffering the entire response. This is **essential** for the interactive documentation console to work properly.

**Before (v2.1.0):**
```python
# Buffered - waits for completion
result = subprocess.run(cmd, capture_output=True, timeout=180)
return jsonify({"output": result.stdout})

After (v2.1.1):

# Streaming - yields line-by-line
def generate():
    for line in execute_omnipkg_command(cmd):
        yield f"data: {json.dumps({'line': line})}\n\n"
    yield "data: {\"done\": true}\n\n"

Why This Matters

Without streaming, the interactive docs console would:

• ❌ Hang waiting for commands to complete (3 minute timeout)
• ❌ Show nothing until the entire command finished
• ❌ Make demos unusable for long-running commands
• ❌ Provide poor UX for users testing omnipkg via browser

📚 New Interactive Documentation

Visit omnipkg.pages.dev to explore:

Live Command Execution 🎮

Run real omnipkg commands directly in your browser:

omnipkg install requests@2.31.0 --isolated
omnipkg list-pkgs
omnipkg run requests -- python -c "import requests; print(requests.__version__)"

Output streams live as it happens on your local machine!

New Documentation Sections

• 📖 CLI Commands - Complete command reference with examples
• 🎯 Platform Support - 70+ CI builds across all platforms
• 🎬 Interactive Demos - 4 live demonstrations:
  • C Extension Version Switching
  • Rich Module Styling
  • TensorFlow Dependency Management
  • UV Binary Hot-Swapping

🛠️ Bridge API Enhancements

CORS Origins Expanded:

ALLOWED_ORIGINS = {
    "https://1minds3t.echo-universe.ts.net",  # Tailscale Funnel
    "https://omnipkg.pages.dev",              # Cloudflare Pages
    "https://omnipkg.workers.dev",            # CF Worker
    "http://localhost:5000",                  # MkDocs local dev
    "http://127.0.0.1:8085",                  # Bridge local
}

New Features:

• ✅ Health check telemetry logging
• ✅ Cloudflare Worker analytics forwarding
• ✅ DEV_MODE allows missing Origin for testing
• ✅ Improved error messages with streaming context

📦 Installation

# PyPI (recommended)
pip install omnipkg==2.1.1

# conda-forge (24 platform variants)
conda install -c conda-forge omnipkg=2.1.1

# Development
pip install git+https://github.com/1minds3t/omnipkg@v2.1.1

🔍 What's Included

Python Support: 3.10, 3.11, 3.12, 3.13
Platforms: Linux (x86_64, aarch64, ppc64le, s390x), macOS (Intel, Apple Silicon), Windows (x86_64)
Total CI Builds: 70+ (24 conda-forge + 22 GitHub Actions + 12 piwheels + ARM64 QEMU)

📊 Verification

All builds passing:

• ✅ conda-forge Azure Pipelines
• ✅ GitHub Actions - Cross-Platform
• ✅ piwheels ARM32

🚀 Try It Now

Interactive Console (no installation required):
👉 https://1minds3t.echo-universe.ts.net/omnipkg/

Documentation (with embedded console):
👉 https://omnipkg.pages.dev/

---

📝 Full Changelog

Compare: v2.1.0...v2.1.1

Files Changed: 30 files (+1,975 additions, -160 deletions)

---

⚠️ Upgrade Notes

If you're running the local bridge (omnipkg bridge), you must upgrade to v2.1.1 for the interactive docs to work correctly. The streaming API change is not backwards compatible with v2.1.0 clients.

pip install --upgrade omnipkg
omnipkg bridge  # Restart with new streaming endpoint

---

Questions? Open an issue or visit the interactive docs 🚀

omnipkg v2.1.0 - Executable Documentation & Hybrid Local Cloud

---

Release v2.1.0 — Executable Documentation & Hybrid Local Cloud

OmniPkg is no longer just a package manager.
It is now an execution platform.

This release introduces Executable Documentation: a secure hybrid architecture that allows users to run real OmniPkg commands directly from the documentation website — with execution happening on their own machine, not in the cloud.

Static docs are dead.
Your environment is now the runtime.

---

🚀 What’s New

Executable Documentation

Documentation pages now include live Run buttons that execute the exact command being shown and stream real output back to the browser.

• No copy/paste

• No terminal switching

• No “works on my machine”

If the docs show it, you can run it.

---

OmniPkg Web Bridge

A new local service that securely connects your browser to your machine:

• Runs as a local Flask service

• Executes commands in a constrained subprocess

• Streams stdout / stderr live

• Enforces strict CORS and command allowlisting

• Requires no open ports

Your browser becomes a remote control for your environment.

---

Hybrid Cloud–Local Architecture

OmniPkg now spans three layers — without centralizing compute:

Layer | Role -- | -- Cloudflare Pages | Static docs, UI, WASM, zero trust Cloudflare Worker | Edge proxy and request routing Local Bridge | Actual execution on the user’s machine

Execution never leaves the user’s hardware.

---

Tailscale Remote Execution (Optional)

When the user is on the same Tailnet:

• Commands can be executed from any device

• Phone → Browser → Edge → Tailscale → Local machine

• Fully end-to-end encrypted (WireGuard)

This enables:

• Remote patching

• Fleet demos

• Live “watch this run” moments

Without SSH.
Without VPN configuration.

---

Privacy-First Telemetry (Local-Only)

Telemetry has been redesigned from the ground up:

• Stored locally in ~/.omnipkg/telemetry.db

• Tracks command names and UI interactions only

• No IP addresses

• No environment data

• No cloud persistence

You own your data. Period.

---

🧰 New CLI Commands

omnipkg web start    # Start the local web bridge
omnipkg web stop     # Stop it cleanly
omnipkg web status   # Health, PID, uptime, URL
omnipkg web logs -f  # Follow live execution + telemetry

The bridge is opt-in, visible, and fully controllable.

---

🔒 Security Model

• Strict CORS enforcement

• Explicit command allowlisting

• No arbitrary shell execution

• Local-only execution by default

• Tailscale required for remote access

• Cloud never executes user commands

This is zero-trust by design — not by marketing.

---

📈 Why This Matters

You did not just add a UI.

You created:

• Executable documentation

• Zero-infrastructure scaling

• Local-first compute

• Cloud-powered discovery

• A clear path to paid orchestration features

This architecture supports:

• Free local usage

• Paid cloud-assisted workflows

• Enterprise fleet control

• Post-quantum machine identity (future)

Without ever centralizing user workloads.

---

📊 Release Stats

• Files changed: 25

• Insertions: 2,131

• Deletions: 333

---

🏷 Versioning Decision

Bumped to v2.1.0

This release introduces:

• A new execution surface

• A new networking model

• A new CLI namespace

• A new telemetry architecture

This is a textbook minor version under SemVer.

---

🧭 What’s Next

• Per-command executable documentation pages

• Streamed output UI upgrades

• Machine identity + JWT bridge (optional)

• Paid cloud assist without forced cloud execution

---

OmniPkg docs are now alive.
They don’t explain commands.
They run them.

---

📥 How to Upgrade

The bridge and web UI are available immediately in v2.1.0.

# 1. Update OmniPkg
pip install --upgrade omnipkg

# 2. Launch the Web Bridge
omnipkg web start

# 3. Open the Docs & Start Clicking
# Your browser will automatically open to the local dashboard.

Note: flask and flask-cors will be installed automatically if missing.

---

💬 Community & Feedback

This is a major architectural shift. We need your breakage reports, your "it works!" screams, and your security audits.

• GitHub: 1minds3t/omnipkg
• Docs: omnipkg.pages.dev

---

OmniPkg v2.1.0
The gap between "reading the docs" and "running the code" just vanished.

omnipkg v2.0.8.1 - Patch: Fix _show_version_details display bug

v2.0.8.1 - Patch Release (2025-01-02)

Bug Fixes

• Fixed critical display bug in _show_version_details: Removed erroneous return True statement that caused the function to exit immediately after validating cache connection, preventing package details from being displayed
• Fixed if-elif-else chain: Corrected conditional logic for License and Description field processing - these fields now properly display their truncated values
• Code organization: Relocated _save_last_known_good_snapshot method for better logical grouping

New (Experimental)

• Local Bridge API: Added local_bridge.py for web-based command execution (alpha testing)
  • Enables remote omnipkg command execution via REST API
  • Connects to Cloudflare-hosted web terminal interface
  • Foundation for upcoming features: interactive docs, telemetry, MCP integration, and multi-environment orchestration
  • Note: This is an early development preview and not yet documented for public use

Technical Details

This patch addresses a regression where 8pkg info <package> would display only headers without package information when using SQLite cache. Root cause: incorrect return True in connection validation logic.

Files Added

• src/omnipkg/apis/local_bridge.py - Flask-based bridge server
• src/omnipkg/conda-recipes/meta-{noarch,platform}.yaml - Conda build recipes

omnipkg v2.0.8 - Universal Platform Support & Infrastructure Improvements

🎯 Release Highlights

This release represents a major milestone in cross-platform compatibility and developer experience, with comprehensive platform support now verified across 24+ architecture variants and multiple distribution channels.

---

🌍 Multi-Platform Distribution Expansion

Conda-forge Platform Matrix (NEW!)

omnipkg is now built and verified on 24 platform variants via conda-forge, moving from noarch-only to platform-specific optimized builds:

Linux:

• ✅ x86_64 (Python 3.10, 3.11, 3.12, 3.13)
• ✅ ARM64/aarch64 (Python 3.10, 3.11, 3.12, 3.13)
• ✅ PowerPC 64 LE (Python 3.10, 3.11, 3.12, 3.13)

macOS:

• ✅ Intel x86_64 (Python 3.10, 3.11, 3.12, 3.13)
• ✅ Apple Silicon ARM64 (Python 3.10, 3.11, 3.12, 3.13)

Windows:

• ✅ x86_64 (Python 3.10, 3.11, 3.12, 3.13)

Install via conda-forge:

conda install -c conda-forge omnipkg
# or with mamba (faster)
mamba install -c conda-forge omnipkg

Docker Multi-Architecture Support (NEW!)

New Docker images across multiple base distributions with multi-arch support (amd64 + arm64):

# Debian (most compatible, ~98MB)
docker pull 1minds3t/omnipkg:latest
docker pull 1minds3t/omnipkg:debian
docker pull 1minds3t/omnipkg:2.0.8-debian

# Alpine (smallest, ~76MB)
docker pull 1minds3t/omnipkg:alpine
docker pull 1minds3t/omnipkg:slim
docker pull 1minds3t/omnipkg:2.0.8-alpine

# Ubuntu variants
docker pull 1minds3t/omnipkg:ubuntu-20.04
docker pull 1minds3t/omnipkg:ubuntu-22.04
docker pull 1minds3t/omnipkg:ubuntu-24.04

# Fedora/RHEL
docker pull 1minds3t/omnipkg:fedora
docker pull 1minds3t/omnipkg:2.0.8-fedora

# CUDA/GPU support (amd64 only, ~1.46GB)
docker pull 1minds3t/omnipkg:cuda
docker pull 1minds3t/omnipkg:gpu

# Development environment (with extra tools, ~220MB)
docker pull 1minds3t/omnipkg:dev

All images support both linux/amd64 and linux/arm64 (except CUDA which is amd64-only).

---

🐛 Bug Fixes

Cache Connection Stability Fix

Fixed a critical bug where cache connection checks could cause AttributeError during initialization in certain edge cases:

• ✅ Safe attribute checking with hasattr() before accessing cache status
• ✅ Proper initialization of cache attributes in all code paths (_cache_connection_status, cache_client, _info_cache, _installed_packages_cache)
• ✅ Graceful handling of minimal mode initialization

Technical Details:

• Added defensive checks in src/omnipkg/core.py for _cache_connection_status attribute
• Fixed multiple locations where uninitialized attributes could cause crashes
• Ensures stable behavior regardless of initialization order

---

📦 Infrastructure Improvements

Trusted Publishing (OIDC) ✨

After 73 manual releases with API tokens, omnipkg now uses PyPI's Trusted Publishing via OIDC:

• ✅ Cryptographically verified releases directly from GitHub Actions
• ✅ Improved security posture
• ✅ Streamlined release workflow

This is the first release published using the new trusted workflow!

Enhanced Docker Tagging Strategy

• Version-specific: 2.0.8, 2.0.8-debian, 2.0.8-alpine
• Distro-specific: debian, ubuntu-24.04, fedora
• Rolling updates: latest, alpine, slim
• Specialized: cuda, gpu, dev

Testing Infrastructure

• Added test_flask_port_finder_universal.py for concurrent port allocation validation
• Comprehensive test suite for multi-threaded Flask scenarios

---

📊 Platform Verification

Verified Distributions

QEMU ARM64 Verification:

• Debian 12 (Bookworm) - ARM64
• Ubuntu 24.04/22.04 - ARM64
• Fedora 39 - ARM64
• Rocky Linux 9 - ARM64
• Alpine Linux - ARM64

Native x86_64 Verification:

• All major Linux distros (Debian, Ubuntu, Fedora, Rocky, Arch)
• macOS Intel + Apple Silicon
• Windows Server

Installation Matrix

Now documented with distro-specific installation notes:

• PEP 668 handling for modern Debian/Ubuntu (--break-system-packages)
• Python 3.9 upgrade path for EL8
• Alpine build dependencies guide (gcc, musl-dev)
• Arch Linux installation patterns

---

🔧 Development Experience

New Files

• docker/Dockerfile.{alpine,debian,ubuntu,fedora,cuda,dev} - Multi-distro Docker builds
• requirements-trace.txt - Pin-locked dependency trace
• src/omnipkg/conda-recipe/meta-{platform,noarch}.yaml - Split conda recipes

Updated Files

• pyproject.toml - Version bump to 2.0.8
• README.md - Expanded platform support documentation
• .github/workflows/* - New Docker build pipelines and trusted publishing
• src/omnipkg/core.py - Cache initialization fixes

---

📈 Expansion Metrics

• Docker Pulls: Multi-arch images now available across 10+ variants
• Supported Platforms: 24 verified conda-forge variants
• Conda Downloads: Significant uptick after platform-specific builds

---

🙏 Acknowledgments

Special thanks to:

• conda-forge maintainers for platform build infrastructure
• QEMU team for enabling ARM64 verification without native hardware
• GitHub Actions for trusted publishing support
• Community contributors for testing and feedback

---

📝 Installation

# PyPI (all platforms)
pip install omnipkg

# Conda (now with platform-specific builds!)
conda install -c conda-forge omnipkg

# Docker (multi-arch)
docker pull 1minds3t/omnipkg:latest

# Homebrew (macOS)
brew install omnipkg

# UV (recommended)
uv pip install omnipkg

---

🔗 Links

• PyPI: https://pypi.org/project/omnipkg/
• Conda-forge: https://anaconda.org/conda-forge/omnipkg
• Docker Hub: https://hub.docker.com/r/1minds3t/omnipkg
• GitHub: https://github.com/1minds3t/omnipkg
• Documentation: https://omnipkg.readthedocs.io/

Full Changelog: [v2.0.7...v2.0.8](v2.0.7...v2.0.8)

---

What's Changed

Platform Expansion:

• 24 conda-forge platform variants (Linux x86_64/ARM64/ppc64le, macOS Intel/ARM, Windows x64)
• Multi-arch Docker images (Debian, Alpine, Ubuntu, Fedora, CUDA)
• QEMU ARM64 verification pipeline

Infrastructure:

• Migrated to PyPI Trusted Publishing (OIDC) for secure releases
• Enhanced Docker tagging strategy with distro-specific variants
• VS Code Dev Container support

Bug Fixes:

• Fixed cache connection AttributeError during initialization
• Safe attribute checking with proper initialization paths

Full Changelog: v2.0.7...v2.0.8

omnipkg v2.0.7 - The Security Shield Release

"Protecting the legacy so the future can build."

This release introduces critical security enforcement for legacy Python environments (3.7 & 3.8) and major stability fixes for Windows/Cross-platform environments.

🔒 Security Enhancements

• Forced urllib3-lts Adoption: Now mandates the installation of urllib3-lts on Python 3.7 and 3.8.
  • Protects against:
    • 🚨 CVE-2025-66471: Compression Bomb DoS
    • 🚨 CVE-2025-66418: Unbounded Links DoS
    • 🚨 CVE-2025-50181: Redirect Retry Bypass
  • Omnipkg automatically injects this backport to heal the dependency tree where upstream requests has dropped support.

🐛 Bug Fixes

• Fix: Windows Interpreter Detection: Resolved a critical regression where the integrity check would fail on Windows by looking in the wrong parent directory (interpreters vs cpython-3.x). Now correctly handles python.exe (Windows) vs bin/python (Unix) structures.
• Fix: Package Name Normalization: Fixed an issue where pip download fallbacks failed for packages with dashes (e.g., urllib3-lts) because the filename extractor didn't account for PyPI's underscore normalization (urllib3_lts).

📝 Documentation

• Added notes regarding potential future need for safety-lts to handle marshmallow CVEs on older environments.

---

Upgrade Now:

pip install --upgrade omnipkg