From 43883b05c08dec259ea5aed76b56f8c7ab49b275 Mon Sep 17 00:00:00 2001 From: rldyourmnd Date: Mon, 21 Sep 2026 17:11:38 +0500 Subject: [PATCH] chore(release): 0.1.26 --- CHANGELOG.md | 21 ++++++++++++++------- VERSION | 2 +- 2 files changed, 15 insertions(+), 8 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index eb9390a..f91baf1 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -7,13 +7,20 @@ The project follows Semantic Versioning. ## [Unreleased] -### Fixed - -- `dependabot-catalog-convergence` now builds the trusted tool environment and - launches `sync_action_catalog.py` through the execution-contract launcher. - The bare `python3 -I` invocation could not resolve the `ci_workflows_tools` - verified-file-spec package, so every convergence run since the sibling-import - migration failed with `ModuleNotFoundError`. +## [0.1.26] - 2026-09-21 + +- **`dependabot-catalog-convergence` repaired.** The job now builds the + trusted tool environment and launches `sync_action_catalog.py` through the + execution-contract launcher. The bare `python3 -I` invocation could not + resolve the `ci_workflows_tools` verified-file-spec package, so every + convergence run since the sibling-import migration failed with + `ModuleNotFoundError`. The workflow is registered in the catalog `used_by` + for `setup-python` and `setup-uv` like every other consumer. +- **Catalog review record.** `setup-rust-toolchain` v2.0.0 review outcome is + now persisted in `catalog/tools.yml`: the major bump stays held because the + implicit `RUSTFLAGS=-D warnings` default becomes `build.warnings` (cargo + >= 1.97), which would silently weaken the gate for callers on older + toolchains. The Dependabot PR remains the tracking surface. ## [0.1.25] - 2026-09-21 diff --git a/VERSION b/VERSION index 0e7400f..7db2672 100644 --- a/VERSION +++ b/VERSION @@ -1 +1 @@ -0.1.25 +0.1.26