Restore lockfile and cut v0.2.20

Author: moradology

Cargo.lock

@@ -4,7 +4,7 @@ members = ["crates/*"]
 exclude = ["support/m80-close-range"]
 
 [workspace.package]
-version = "0.2.19"
+version = "0.2.20"
 edition = "2021"
 license = "Apache-2.0 OR MIT"
 repository = "https://github.com/nathanp/m80"

Cargo.toml

@@ -28,16 +28,16 @@ fn current_latest_version_cutover_names_real_repair_tag() {
             .expect("read installer layout fixture");
 
     assert!(
-        cargo_toml.contains("version = \"0.2.19\""),
+        cargo_toml.contains("version = \"0.2.20\""),
         "workspace package version must match the current repair tag"
     );
     assert!(
-        runbook.contains("workspace package version `0.2.19`")
-            && runbook.contains("expected release tag is `v0.2.19`"),
+        runbook.contains("workspace package version `0.2.20`")
+            && runbook.contains("expected release tag is `v0.2.20`"),
         "release runbook must document the real current repair version"
     );
     assert!(
-        behavior.contains("matching stable tag is `v0.2.19`")
+        behavior.contains("matching stable tag is `v0.2.20`")
             && behavior.contains("`v0.2.7` installer handoff"),
         "behavior doc must name the repaired tag and the superseded latest state"
     );

crates/m80-cli/tests/release/current_latest_version_cutover.rs

@@ -32,20 +32,22 @@ GitHub-hosted latest-promotion gate. `v0.2.18` preserves the public installer's
 configured command directory inside its sanitized child environment, then
 published and promoted latest but failed while writing the anonymous
 public-access receipt because GitHub's latest API lagged the latest promotion.
-`v0.2.19` keeps the installer fix and retries only those transient stale-latest
-observations before declaring the public-access receipt failed.
+`v0.2.19` carried that retry but failed before release mutation because the
+version bump accidentally rewrote the locked `libc 0.2.186` entry. `v0.2.20`
+keeps the installer fix, restores the lockfile, and retries only transient
+stale-latest observations before declaring the public-access receipt failed.
 
-The current repair source therefore uses workspace package version `0.2.19`.
-The matching stable tag is `v0.2.19`; tags at or before the existing public
+The current repair source therefore uses workspace package version `0.2.20`.
+The matching stable tag is `v0.2.20`; tags at or before the existing public
 latest `v0.2.11` are intentionally rejected as old-release backfill candidates
 by `scripts/current_latest_repair_preflight.py`.
 
 The release runbook documents this as the real source-state expectation rather
 than a fixture-only value. Dev builds still render as `<package-version>-dev`,
-so an unreleased local build now reports `0.2.19-dev` and remains barred from
+so an unreleased local build now reports `0.2.20-dev` and remains barred from
 using mutable `releases/latest` implicitly.
 
-Fixture and release-script coverage uses `v0.2.19` as the packageable release
+Fixture and release-script coverage uses `v0.2.20` as the packageable release
 tag. Rust installer-layout fixtures derive their release tag from
 `CARGO_PKG_VERSION`, so the bundled layout tests also follow the same cutover.
 Tests may still use other tags only when they are explicitly testing mismatch,

docs/behaviors/release/current-latest-version-cutover.md

@@ -16,7 +16,7 @@ M80_RELEASE_TAG=vX.Y.Z \
 ```
 
 The injected tag must be the exact `v<workspace package version>` tag. For the
-workspace package version `0.2.19`, the expected release tag is `v0.2.19`.
+workspace package version `0.2.20`, the expected release tag is `v0.2.20`.
 The injected source commit must be the exact commit used by the release build
 manifest and signed release integrity material.
 The injected Rust target triple must be one of the target triples recorded in

docs/runbook/release.md

@@ -22,8 +22,8 @@ def test_accepts_clean_new_stable_tag_that_supersedes_current_latest(self) -> No
         artifact = accepted_fixture()
 
         self.assertTrue(artifact["decision"]["ok"])
-        self.assertEqual(artifact["target_tag"], "v0.2.19")
-        self.assertEqual(artifact["expected_release_tag"], "v0.2.19")
+        self.assertEqual(artifact["target_tag"], "v0.2.20")
+        self.assertEqual(artifact["expected_release_tag"], "v0.2.20")
         self.assertFalse(artifact["dirty_tree"]["dirty"])
         self.assertEqual(artifact["existing_latest"]["tag"], "v0.2.11")
         self.assertFalse(artifact["supersedes_missing_installer_latest_state"])
@@ -51,7 +51,7 @@ def test_rejects_tag_version_mismatch(self) -> None:
 
         diagnostic = only_diagnostic(artifact)
         self.assertEqual(diagnostic["field"], "target_tag")
-        self.assertEqual(diagnostic["expected"], "v0.2.19")
+        self.assertEqual(diagnostic["expected"], "v0.2.20")
         self.assertEqual(diagnostic["observed"], "v0.2.14")
         self.assertIn("Cargo.toml workspace.package.version", diagnostic["safe_repair_action"])
 
@@ -92,7 +92,7 @@ def test_cli_accepts_current_workspace_version_without_override(self) -> None:
                     "python3",
                     str(SCRIPT),
                     "--release-tag",
-                    "v0.2.19",
+                    "v0.2.20",
                     "--source-commit",
                     SOURCE_COMMIT,
                     "--tag-commit",
@@ -116,8 +116,8 @@ def test_cli_accepts_current_workspace_version_without_override(self) -> None:
 
             self.assertEqual(result.returncode, 0, result.stderr)
             payload = json.loads(out.read_text())
-        self.assertEqual(payload["workspace_package_version"], "0.2.19")
-        self.assertEqual(payload["expected_release_tag"], "v0.2.19")
+        self.assertEqual(payload["workspace_package_version"], "0.2.20")
+        self.assertEqual(payload["expected_release_tag"], "v0.2.20")
         self.assertEqual(payload["decision"]["status"], "accepted")
 
     def test_cli_writes_rejected_artifact_before_exiting_nonzero(self) -> None:
@@ -128,9 +128,9 @@ def test_cli_writes_rejected_artifact_before_exiting_nonzero(self) -> None:
                     "python3",
                     str(SCRIPT),
                     "--release-tag",
-                    "v0.2.19",
+                    "v0.2.20",
                     "--workspace-version",
-                    "0.2.19",
+                    "0.2.20",
                     "--source-commit",
                     SOURCE_COMMIT,
                     "--tag-commit",
@@ -161,9 +161,9 @@ def test_cli_writes_rejected_artifact_before_exiting_nonzero(self) -> None:
 
 def accepted_fixture(**overrides: object) -> dict:
     values = {
-        "release_tag": "v0.2.19",
+        "release_tag": "v0.2.20",
         "source_commit": SOURCE_COMMIT,
-        "workspace_package_version": "0.2.19",
+        "workspace_package_version": "0.2.20",
         "tag_commit": SOURCE_COMMIT,
         "existing_latest_tag": "v0.2.11",
         "existing_latest_url": "https://github.com/moradology/m80/releases/tag/v0.2.11",