Skip to content

Commit 4b37254

Browse files
jeswrcodex
andauthored
chore(release): prepare exact-source v0.1.2 recovery (#6541)
* chore(release): prepare exact-source v0.1.2 recovery Bump the workspace and all three public npm packages without upgrading external dependencies. Preserve the path-only introspection test dependency and private LWS version. Reconcile local package identities in Cargo locks, distinguish the immutable incomplete v0.1.1 history from post-tag changes, and single-source conditional registry install instructions for README and mdBook. Co-Authored-By: GPT-6 <noreply@openai.com> * fix(security): update rustls for RUSTSEC-2026-0285 * chore(security): record patched TLS dependency trust * fix(release): close v0.1.2 review gaps * fix(ci): fetch pinned OWL archive over HTTPS Use HTTPS for the Internet Archive transport while preserving the captured HTTP-origin snapshot and SHA-256 pin. Keep cache and ratchet behavior unchanged, and guard the URL and pins with a hermetic regression test. Co-Authored-By: GPT-6 <noreply@openai.com> --------- Co-authored-by: GPT-6 <noreply@openai.com>
1 parent 24609e7 commit 4b37254

79 files changed

Lines changed: 1134 additions & 405 deletions

File tree

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

‎.github/workflows/ci.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -2783,7 +2783,7 @@ jobs:
27832783
save-if: ${{ github.ref == 'refs/heads/main' }}
27842784
# [OPUS-5] #4935 — AVAILABILITY DECOUPLING for the only two corpora in this
27852785
# GATING lane that come from a non-GitHub third party: the OWL 2 test-case
2786-
# export (an Internet Archive snapshot, fetched over plain http://) and the
2786+
# export (an Internet Archive snapshot, fetched over HTTPS) and the
27872787
# W3C RIF WG Core_v1.22 archive. Both are FIXED, sha256-pinned exports, yet
27882788
# they were re-downloaded live on every run — so a bad few minutes at
27892789
# web.archive.org concluded this leg `failure` with nothing measured, which

‎CHANGELOG.md‎

Lines changed: 56 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -7,17 +7,62 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
77

88
## [Unreleased]
99

10+
## [0.1.2] - 2026-09-20
11+
12+
[GPT-6] Recovery release prepared from the changes after the immutable `v0.1.1`
13+
source tag. Publication is not implied by this version entry; verify the release
14+
artifacts and registries using [the release runbook](docs/release.md).
15+
16+
### Added
17+
18+
- Experimental, default-off `sparq-core/overlay-deleted-projections` caches
19+
deletion counts by index permutation. Its retained-memory and cold-read tradeoffs
20+
are documented in the core README and `bench/overlay-count`; no universal speedup
21+
is claimed.
22+
- The experimental private `sparq-lws-core` server resolves `acl:agentGroup`
23+
membership from same-pod group documents. Missing, malformed, off-origin, and
24+
non-member groups grant nothing; resolution performs no outbound fetch.
25+
26+
### Changed
27+
28+
- Bind joins reuse contiguous groups only after validating sorted input; capped
29+
seed blocks can reuse bounded right-hand scans when no query budget is armed.
30+
- Core updates preserve the numeric memo when the dictionary is unchanged.
31+
- Workspace packages and all three public npm packages target `0.1.2`, including
32+
`@sparq-org/eyereasoner-compat` (previously `0.1.0`). The private native LWS crate
33+
retains its independent version. PyPI `sparq-rdf` derives the workspace version.
34+
- CI now verifies completed nightly work and reporter identity, reserves heavy
35+
runner capacity, and bounds benchmark dashboard publication. Site and GUI
36+
dependency patches update Next.js and sharp.
37+
38+
### Fixed
39+
40+
- Nested queries restore the outer budget, cancellation handle, accounting, and
41+
sticky error on return or unwind; child budgets remain independent.
42+
- Predicate statistics serialize in stable predicate-ID order without changing
43+
the on-disk format. UPDATE differential tests preserve RDF term identity.
44+
- Scheduler queue-occupancy tests park both workers and release them safely on
45+
assertion panic, preventing the feature-matrix test hang.
46+
- Release SLSA permissions permit the reusable provenance workflow. The Cargo
47+
bootstrap graph excludes the path-only introspection test dependency, while
48+
retaining versioned dev-dependencies in dependency-first publish validation.
49+
- Release and package workflows require matching tag, build commit, and manifest
50+
versions. Automatic release-plz version calculation is contained until the first
51+
crates.io bootstrap; the manual version PR's tag handoff remains active.
52+
1053
## [0.1.1] - 2026-08-31
1154

12-
First release: an experimental, from-scratch RDF triplestore and SPARQL engine in Rust
13-
(dictionary-encoded, six sorted permutation indexes, parallel execution), published as the
14-
`sparq-*` crate family — `sparq-core` / `sparq-engine` / `sparq-reason` / `sparq-cli` /
15-
`sparq-server` plus the opt-in capability crates (see `docs/release.md` §4 for the full
16-
publish set). The API is unstable; SERVICE federation remains unimplemented — see
17-
`research/roadmap.md`.
55+
[GPT-6] **Incomplete bootstrap, not a complete release.** The immutable source tag
56+
points to `1a63aa7c638bd80da55f1811d5fb97e8d014f631`. The features below describe
57+
that source snapshot, not successful registry or binary publication. As verified on
58+
2026-09-12, its release workflow failed before starting jobs; no GitHub Release,
59+
crates.io packages, or PyPI `sparq-rdf` distribution were published. npm
60+
`@sparq-org/sparq@0.1.1` and `@sparq-org/solid-server@0.1.1` exist without
61+
`dist.attestations` and cannot be republished to add provenance.
1862

19-
The earlier `v0.1.0` tag was an incomplete CI tag with no final GitHub Release or registry
20-
publication. It remains in place for auditability; v0.1.1 is the first complete release.
63+
The earlier `v0.1.0` tag was also incomplete. Both tags remain fixed for auditability;
64+
post-tag fixes and complete-release recovery belong to `0.1.2`, not this snapshot.
65+
APIs remain experimental and unstable.
2166

2267
**Crates.io build caveat:** crates.io builds resolve upstream `spargebra` 0.4.6 — the vendored SPARQL-parser conformance fixes (`vendor/spargebra/SPARQ-PATCHES.md`) apply only to git builds until the upstream PRs land.
2368

@@ -501,5 +546,6 @@ reproduce):
501546
single-pattern/FILTER comparisons short-circuit via index range-counting and are excluded
502547
from the claims above.
503548

504-
[Unreleased]: https://github.com/sparq-org/sparq/compare/v0.1.1...HEAD
505-
[0.1.1]: https://github.com/sparq-org/sparq/releases/tag/v0.1.1
549+
[Unreleased]: https://github.com/sparq-org/sparq/compare/v0.1.2...HEAD
550+
[0.1.2]: https://github.com/sparq-org/sparq/compare/v0.1.1...v0.1.2
551+
[0.1.1]: https://github.com/sparq-org/sparq/tree/v0.1.1

0 commit comments

Comments
 (0)