QVAC-21100: Static MSVC runtime for native addons on Windows version bump (#2775)

jpgaribotti · web-flow · commit b91a8a22b46b · 2026-06-22T17:48:15.000+02:00
* Static MSVC runtime for native addons on Windows version bump

* Constrained version bumps for transitive deps
diff --git a/packages/bci-whispercpp/CHANGELOG.md b/packages/bci-whispercpp/CHANGELOG.md
@@ -5,6 +5,21 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.3.2] - 2026-06-22
+
+### Changed
+
+- Windows prebuilds now link the static Visual C++ runtime (`/MT`) instead of
+  importing `vcruntime140.dll`, `msvcp140.dll`, or UCRT DLLs from the MSVC
+  redistributable. Shared monorepo `vcpkg-overlays/triplets/{x64,arm64}-windows.cmake`
+  build dependencies with a static CRT; addon CMake no longer links `msvcrt.lib`,
+  which had forced the dynamic runtime. Per-package vcpkg overlays were
+  consolidated into the shared `vcpkg-overlays/` tree. No public API change.
+
+## Pull Requests
+
+- [#2722](https://github.com/tetherto/qvac/pull/2722) - QVAC-21100: Switch to static C/C++ windows runtimes
+
 ## [0.3.1]
 
 ### Added
diff --git a/packages/bci-whispercpp/package.json b/packages/bci-whispercpp/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@qvac/bci-whispercpp",
-  "version": "0.3.1",
+  "version": "0.3.2",
   "description": "Brain-Computer Interface (BCI) neural signal transcription addon for qvac, powered by whisper.cpp",
   "addon": true,
   "engines": {
diff --git a/packages/classification-ggml/CHANGELOG.md b/packages/classification-ggml/CHANGELOG.md
@@ -7,6 +7,21 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to
 [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.6.1] - 2026-06-22
+
+### Changed
+
+- Windows prebuilds now link the static Visual C++ runtime (`/MT`) instead of
+  importing `vcruntime140.dll`, `msvcp140.dll`, or UCRT DLLs from the MSVC
+  redistributable. Shared monorepo `vcpkg-overlays/triplets/{x64,arm64}-windows.cmake`
+  build dependencies with a static CRT; addon CMake no longer links `msvcrt.lib`,
+  which had forced the dynamic runtime. Per-package vcpkg overlays were
+  consolidated into the shared `vcpkg-overlays/` tree. No public API change.
+
+## Pull Requests
+
+- [#2722](https://github.com/tetherto/qvac/pull/2722) - QVAC-21100: Switch to static C/C++ windows runtimes
+
 ## [0.6.0] - 2026-06-22
 
 ### Changed
diff --git a/packages/classification-ggml/package.json b/packages/classification-ggml/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@qvac/classification-ggml",
-  "version": "0.6.0",
+  "version": "0.6.1",
   "description": "GGML image classification addon for QVAC (MobileNetV3-Small CPU inference)",
   "addon": true,
   "scripts": {
diff --git a/packages/diffusion-cpp/CHANGELOG.md b/packages/diffusion-cpp/CHANGELOG.md
@@ -1,5 +1,22 @@
 # Changelog
 
+## [0.12.0] - 2026-06-22
+
+Windows prebuilds now ship without a dependency on the MSVC redistributable.
+Addons link the static Visual C++ runtime (`/MT`) via shared
+`vcpkg-overlays/triplets/{x64,arm64}-windows.cmake`, and CMake no longer links
+`msvcrt.lib`, which had forced dynamic CRT imports. Per-package vcpkg overlays
+were consolidated into the monorepo `vcpkg-overlays/` tree. No public API change.
+
+### Changed
+
+- Windows `.bare` prebuilds no longer import `vcruntime140.dll`, `msvcp140.dll`,
+  or UCRT DLLs; CI verifies this with `dumpbin` on every Windows prebuild.
+
+## Pull Requests
+
+- [#2722](https://github.com/tetherto/qvac/pull/2722) - QVAC-21100: Switch to static C/C++ windows runtimes
+
 ## [0.11.2] - 2026-06-05
 
 This release restores caller control over where the diffusion text-conditioning path runs on macOS. It removes an Apple-specific override that forced the CLIP/text encoder path onto CPU.
diff --git a/packages/diffusion-cpp/package.json b/packages/diffusion-cpp/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@qvac/diffusion-cpp",
-  "version": "0.11.2",
+  "version": "0.12.0",
   "description": "stable-diffusion.cpp addon for qvac image/video generation",
   "addon": true,
   "scripts": {
diff --git a/packages/embed-llamacpp/CHANGELOG.md b/packages/embed-llamacpp/CHANGELOG.md
@@ -1,5 +1,20 @@
 # Changelog
 
+## [0.22.1] - 2026-06-22
+
+### Changed
+
+- Windows prebuilds now link the static Visual C++ runtime (`/MT`) instead of
+  importing `vcruntime140.dll`, `msvcp140.dll`, or UCRT DLLs from the MSVC
+  redistributable. Shared monorepo `vcpkg-overlays/triplets/{x64,arm64}-windows.cmake`
+  build dependencies with a static CRT; addon CMake no longer links `msvcrt.lib`,
+  which had forced the dynamic runtime. Per-package vcpkg overlays were
+  consolidated into the shared `vcpkg-overlays/` tree. No public API change.
+
+## Pull Requests
+
+- [#2722](https://github.com/tetherto/qvac/pull/2722) - QVAC-21100: Switch to static C/C++ windows runtimes
+
 ## [0.22.0] - 2026-06-22
 
 ### Changed
diff --git a/packages/embed-llamacpp/package.json b/packages/embed-llamacpp/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@qvac/embed-llamacpp",
-  "version": "0.22.0",
+  "version": "0.22.1",
   "description": "bert addon for qvac",
   "addon": true,
   "engines": {
diff --git a/packages/llm-llamacpp/CHANGELOG.md b/packages/llm-llamacpp/CHANGELOG.md
@@ -1,4 +1,19 @@
 # Changelog
+## [0.29.1] - 2026-06-22
+
+### Changed
+
+- Windows prebuilds now link the static Visual C++ runtime (`/MT`) instead of
+  importing `vcruntime140.dll`, `msvcp140.dll`, or UCRT DLLs from the MSVC
+  redistributable. Shared monorepo `vcpkg-overlays/triplets/{x64,arm64}-windows.cmake`
+  build dependencies with a static CRT; addon CMake no longer links `msvcrt.lib`,
+  which had forced the dynamic runtime. Per-package vcpkg overlays were
+  consolidated into the shared `vcpkg-overlays/` tree. No public API change.
+
+## Pull Requests
+
+- [#2722](https://github.com/tetherto/qvac/pull/2722) - QVAC-21100: Switch to static C/C++ windows runtimes
+
 ## [0.29.0] - 2026-06-22
 
 This release makes reasoning-token budgets configurable per model load and per request, while improving how chat-template thinking markers are detected and streamed. It also tightens GPU backend validation so unsupported quantized KV-cache combinations fail early with clear errors instead of reaching backend-specific runtime failures.
diff --git a/packages/llm-llamacpp/package.json b/packages/llm-llamacpp/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@qvac/llm-llamacpp",
-  "version": "0.29.0",
+  "version": "0.29.1",
   "description": "llama addon for qvac",
   "addon": true,
   "scripts": {
diff --git a/packages/ocr-ggml/CHANGELOG.md b/packages/ocr-ggml/CHANGELOG.md
@@ -4,6 +4,21 @@ All notable changes to this package will be documented here. The format
 follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/) and the
 project uses [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.6.0] - 2026-06-22
+
+### Changed
+
+- Windows prebuilds now link the static Visual C++ runtime (`/MT`) instead of
+  importing `vcruntime140.dll`, `msvcp140.dll`, or UCRT DLLs from the MSVC
+  redistributable. Shared monorepo `vcpkg-overlays/triplets/{x64,arm64}-windows.cmake`
+  build dependencies with a static CRT; addon CMake no longer links `msvcrt.lib`,
+  which had forced the dynamic runtime. Per-package vcpkg overlays were
+  consolidated into the shared `vcpkg-overlays/` tree. No public API change.
+
+## Pull Requests
+
+- [#2722](https://github.com/tetherto/qvac/pull/2722) - QVAC-21100: Switch to static C/C++ windows runtimes
+
 ## [0.5.0] - 2026-06-22
 
 ### Changed
diff --git a/packages/ocr-ggml/package.json b/packages/ocr-ggml/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@qvac/ocr-ggml",
-  "version": "0.5.0",
+  "version": "0.6.0",
   "description": "GGML-backed OCR addon for qvac (EasyOCR pipeline on GGUF weights)",
   "addon": true,
   "engines": {
diff --git a/packages/ocr-onnx/CHANGELOG.md b/packages/ocr-onnx/CHANGELOG.md
@@ -5,6 +5,22 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.7.0] - 2026-06-22
+
+### Changed
+
+- Windows prebuilds now link the static Visual C++ runtime (`/MT`) instead of
+  importing `vcruntime140.dll`, `msvcp140.dll`, or UCRT DLLs from the MSVC
+  redistributable. Shared monorepo `vcpkg-overlays/triplets/{x64,arm64}-windows.cmake`
+  build dependencies with a static CRT; addon CMake no longer links `msvcrt.lib`,
+  which had forced the dynamic runtime. Package-local vcpkg triplets now layer
+  on the shared `vcpkg-overlays/` tree. Bumped `@qvac/onnx` to `^0.15.1` for
+  the same static-runtime baseline. No public API change.
+
+## Pull Requests
+
+- [#2722](https://github.com/tetherto/qvac/pull/2722) - QVAC-21100: Switch to static C/C++ windows runtimes
+
 ## [0.6.0] - 2026-06-02
 
 ### Changed
diff --git a/packages/ocr-onnx/package.json b/packages/ocr-onnx/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@qvac/ocr-onnx",
-  "version": "0.6.0",
+  "version": "0.7.0",
   "description": "OCR addon for qvac",
   "addon": true,
   "engines": {
@@ -74,7 +74,7 @@
   "dependencies": {
     "@qvac/error": "^0.1.0",
     "@qvac/infer-base": "^0.4.0",
-    "@qvac/onnx": "^0.15.0",
+    "@qvac/onnx": "^0.15.1",
     "bare-fs": "^4.5.1",
     "bare-os": "^3.9.1"
   },
diff --git a/packages/onnx/CHANGELOG.md b/packages/onnx/CHANGELOG.md
@@ -1,5 +1,21 @@
 # Changelog
 
+## [0.15.1] - 2026-06-22
+
+### Changed
+
+- Windows prebuilds now link the static Visual C++ runtime (`/MT`) instead of
+  importing `vcruntime140.dll`, `msvcp140.dll`, or UCRT DLLs from the MSVC
+  redistributable. Shared monorepo `vcpkg-overlays/triplets/{x64,arm64}-windows.cmake`
+  build vcpkg dependencies with a static CRT; addon CMake no longer links
+  `msvcrt.lib`, which had forced the dynamic runtime. `INTEGRATION.md` now
+  documents that consumer addons must not link `msvcrt.lib` for the same reason.
+  No public API change.
+
+## Pull Requests
+
+- [#2722](https://github.com/tetherto/qvac/pull/2722) - QVAC-21100: Switch to static C/C++ windows runtimes
+
 ## [0.15.0] - 2026-05-11
 
 ### Changed
diff --git a/packages/onnx/package.json b/packages/onnx/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@qvac/onnx",
-  "version": "0.15.0",
+  "version": "0.15.1",
   "description": "Bare addon for ONNX Runtime session management",
   "addon": true,
   "engines": {
diff --git a/packages/transcription-parakeet/CHANGELOG.md b/packages/transcription-parakeet/CHANGELOG.md
@@ -5,6 +5,21 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.8.1] - 2026-06-22
+
+### Changed
+
+- Windows prebuilds now link the static Visual C++ runtime (`/MT`) instead of
+  importing `vcruntime140.dll`, `msvcp140.dll`, or UCRT DLLs from the MSVC
+  redistributable. Shared monorepo `vcpkg-overlays/triplets/{x64,arm64}-windows.cmake`
+  build dependencies with a static CRT; addon CMake no longer links `msvcrt.lib`,
+  which had forced the dynamic runtime. Package-local vcpkg overlays were
+  consolidated into the shared `vcpkg-overlays/` tree. No public API change.
+
+## Pull Requests
+
+- [#2722](https://github.com/tetherto/qvac/pull/2722) - QVAC-21100: Switch to static C/C++ windows runtimes
+
 ## [0.8.0]
 
 ### Added
diff --git a/packages/transcription-parakeet/package.json b/packages/transcription-parakeet/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@qvac/transcription-parakeet",
-  "version": "0.8.0",
+  "version": "0.8.1",
   "description": "High-performance speech-to-text inference addon using NVIDIA Parakeet models for Bare runtime",
   "addon": true,
   "engines": {
diff --git a/packages/transcription-whispercpp/CHANGELOG.md b/packages/transcription-whispercpp/CHANGELOG.md
@@ -5,6 +5,21 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.10.1] - 2026-06-22
+
+### Changed
+
+- Windows prebuilds now link the static Visual C++ runtime (`/MT`) instead of
+  importing `vcruntime140.dll`, `msvcp140.dll`, or UCRT DLLs from the MSVC
+  redistributable. Shared monorepo `vcpkg-overlays/triplets/{x64,arm64}-windows.cmake`
+  build dependencies with a static CRT; addon CMake no longer links `msvcrt.lib`,
+  which had forced the dynamic runtime. Per-package vcpkg overlays were
+  consolidated into the shared `vcpkg-overlays/` tree. No public API change.
+
+## Pull Requests
+
+- [#2722](https://github.com/tetherto/qvac/pull/2722) - QVAC-21100: Switch to static C/C++ windows runtimes
+
 ## [0.10.0]
 
 ### Changed
diff --git a/packages/transcription-whispercpp/package.json b/packages/transcription-whispercpp/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@qvac/transcription-whispercpp",
-  "version": "0.10.0",
+  "version": "0.10.1",
   "description": "transcription addon for qvac",
   "addon": true,
   "engines": {
diff --git a/packages/translation-nmtcpp/CHANGELOG.md b/packages/translation-nmtcpp/CHANGELOG.md
@@ -5,6 +5,21 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [6.2.1] - 2026-06-22
+
+### Changed
+
+- Windows prebuilds now link the static Visual C++ runtime (`/MT`) instead of
+  importing `vcruntime140.dll`, `msvcp140.dll`, or UCRT DLLs from the MSVC
+  redistributable. Shared monorepo `vcpkg-overlays/triplets/{x64,arm64}-windows.cmake`
+  build dependencies with a static CRT; addon CMake no longer links `msvcrt.lib`,
+  which had forced the dynamic runtime. Per-package vcpkg overlays were
+  consolidated into the shared `vcpkg-overlays/` tree. No public API change.
+
+## Pull Requests
+
+- [#2722](https://github.com/tetherto/qvac/pull/2722) - QVAC-21100: Switch to static C/C++ windows runtimes
+
 ## [6.2.0] - 2026-06-22
 
 ### Changed
diff --git a/packages/translation-nmtcpp/package.json b/packages/translation-nmtcpp/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@qvac/translation-nmtcpp",
-  "version": "6.2.0",
+  "version": "6.2.1",
   "description": "translation addon for qvac",
   "addon": true,
   "engines": {
diff --git a/packages/tts-ggml/CHANGELOG.md b/packages/tts-ggml/CHANGELOG.md
@@ -5,6 +5,21 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.3.3] - 2026-06-22
+
+### Changed
+
+- Windows prebuilds now link the static Visual C++ runtime (`/MT`) instead of
+  importing `vcruntime140.dll`, `msvcp140.dll`, or UCRT DLLs from the MSVC
+  redistributable. Shared monorepo `vcpkg-overlays/triplets/{x64,arm64}-windows.cmake`
+  build dependencies with a static CRT; addon CMake no longer links `msvcrt.lib`,
+  which had forced the dynamic runtime. Per-package vcpkg overlays were
+  consolidated into the shared `vcpkg-overlays/` tree. No public API change.
+
+## Pull Requests
+
+- [#2722](https://github.com/tetherto/qvac/pull/2722) - QVAC-21100: Switch to static C/C++ windows runtimes
+
 ## [0.3.2] - 2026-06-19
 
 ### Added
diff --git a/packages/tts-ggml/package.json b/packages/tts-ggml/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@qvac/tts-ggml",
-  "version": "0.3.2",
+  "version": "0.3.3",
   "description": "Text to Speech (TTS) addon for qvac (ggml backend, wrapping the chatterbox + supertonic engines from tts-cpp)",
   "addon": true,
   "engines": {
@@ -87,7 +87,7 @@
   "devDependencies": {
     "@qvac/langdetect-text": "^0.1.2",
     "@qvac/registry-client": "^0.4.0",
-    "@qvac/transcription-whispercpp": "^0.10.0",
+    "@qvac/transcription-whispercpp": "^0.10.1",
     "bare-process": "^4.2.2",
     "bare-subprocess": "^5.2.1",
     "brittle": "^3.17.0",
diff --git a/packages/tts-onnx/CHANGELOG.md b/packages/tts-onnx/CHANGELOG.md
@@ -5,6 +5,22 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.10.0] - 2026-06-22
+
+### Changed
+
+- Windows prebuilds now link the static Visual C++ runtime (`/MT`) instead of
+  importing `vcruntime140.dll`, `msvcp140.dll`, or UCRT DLLs from the MSVC
+  redistributable. Shared monorepo `vcpkg-overlays/triplets/{x64,arm64}-windows.cmake`
+  build dependencies with a static CRT; addon CMake no longer links `msvcrt.lib`,
+  which had forced the dynamic runtime. Package-local vcpkg triplets now layer
+  on the shared `vcpkg-overlays/` tree. Bumped `@qvac/onnx` to `^0.15.1` for
+  the same static-runtime baseline. No public API change.
+
+## Pull Requests
+
+- [#2722](https://github.com/tetherto/qvac/pull/2722) - QVAC-21100: Switch to static C/C++ windows runtimes
+
 ## [Unreleased]
 
 ## [0.9.2] - 2026-06-09
diff --git a/packages/tts-onnx/package.json b/packages/tts-onnx/package.json
diff --git a/packages/vla-ggml/CHANGELOG.md b/packages/vla-ggml/CHANGELOG.md
diff --git a/packages/vla-ggml/package.json b/packages/vla-ggml/package.json

Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"name": "@qvac/bci-whispercpp",`
`3`		`- "version": "0.3.1",`
	`3`	`+ "version": "0.3.2",`
`4`	`4`	`"description": "Brain-Computer Interface (BCI) neural signal transcription addon for qvac, powered by whisper.cpp",`
`5`	`5`	`"addon": true,`
`6`	`6`	`"engines": {`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"name": "@qvac/classification-ggml",`
`3`		`- "version": "0.6.0",`
	`3`	`+ "version": "0.6.1",`
`4`	`4`	`"description": "GGML image classification addon for QVAC (MobileNetV3-Small CPU inference)",`
`5`	`5`	`"addon": true,`
`6`	`6`	`"scripts": {`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"name": "@qvac/diffusion-cpp",`
`3`		`- "version": "0.11.2",`
	`3`	`+ "version": "0.12.0",`
`4`	`4`	`"description": "stable-diffusion.cpp addon for qvac image/video generation",`
`5`	`5`	`"addon": true,`
`6`	`6`	`"scripts": {`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"name": "@qvac/embed-llamacpp",`
`3`		`- "version": "0.22.0",`
	`3`	`+ "version": "0.22.1",`
`4`	`4`	`"description": "bert addon for qvac",`
`5`	`5`	`"addon": true,`
`6`	`6`	`"engines": {`
Original file line number	Diff line number	Diff line change
`@@ -1,6 +1,6 @@`
`1`	`1`	`{`
`2`	`2`	`"name": "@qvac/llm-llamacpp",`
`3`		`- "version": "0.29.0",`
	`3`	`+ "version": "0.29.1",`
`4`	`4`	`"description": "llama addon for qvac",`
`5`	`5`	`"addon": true,`
`6`	`6`	`"scripts": {`