Skip to content

Prepare Lightspeed v0.7.2 with Platform dependency pins #137

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
lukebuehler merged 1 commit into from
Nov 9, 2026
Merged

Prepare Lightspeed v0.7.2 with Platform dependency pins #137

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
10 changes: 5 additions & 5 deletions Cargo.lock
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

2 changes: 1 addition & 1 deletion Cargo.toml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -30,4 +30,4 @@ members = [
resolver = "2"

[workspace.package]
version = "0.7.1"
version = "0.7.2"
7 changes: 7 additions & 0 deletions docs/roadmap/p196-platform-image-security.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -120,6 +120,13 @@ numeric-user setting to the previously validated Linux image. This avoids using
host-staged native dependencies for the Linux startup check. Cluster policies
that require explicit pod user/group fields still need those fields supplied.

### Dependency version pins

Pinned `@azure/msal-node` to `7.1.2` and `semver` 7.x to `7.8.5`, both older than
seven days when selected. Database/backend tests, release tests, TypeScript
checks and runtime packaging passed. Registry acceptance of a newly published
image remains unverified.

### Regression protection

The new release test reproduces an optional development peer leaking into a
Expand Down
41 changes: 25 additions & 16 deletions package-lock.json
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

2 changes: 2 additions & 0 deletions package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -48,6 +48,8 @@
"node": ">=24.21.0"
},
"overrides": {
"@azure/msal-node": "7.1.2",
"semver@^7": "7.8.5",
"@esbuild-kit/core-utils": {
"esbuild": "^0.25.12"
}
Expand Down
2 changes: 1 addition & 1 deletion release/metadata.env
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -6,7 +6,7 @@ LIGHTSPEED_RELEASE_TARGET=x86_64-unknown-linux-gnu
LIGHTSPEED_ENVD_TARGET=x86_64-unknown-linux-musl
# Complete required release set; ENVD_TARGET remains the Linux bootstrap target.
LIGHTSPEED_ENVD_TARGETS=x86_64-unknown-linux-musl,x86_64-pc-windows-msvc
LIGHTSPEED_PRODUCT_VERSION=0.7.1
LIGHTSPEED_PRODUCT_VERSION=0.7.2
LIGHTSPEED_RELEASE_RUST_VERSION=1.99.0
LIGHTSPEED_RELEASE_BUILD_BASE_IMAGE=rust:1.99.0-bookworm@sha256:59037199c44290f2befcdd58dcc540164763fc296950255aaefeef096a1866b0
LIGHTSPEED_API_PROTOCOL_VERSION=lightspeed.agent.api.v1
Expand Down
6 changes: 6 additions & 0 deletions release/notes/v0.7.2.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,6 @@
Lightspeed v0.7.2 is a maintenance release with Platform dependency adjustments.

Upgrade from v0.7.1: deploy matching v0.7.2 artifacts and restart the services.
Workflow compatibility is `restart-in-place`; database schemas and protocols are unchanged.

[Full changelog: v0.7.1...v0.7.2](https://github.com/smartcomputer-ai/lightspeed/compare/v0.7.1...v0.7.2)
Loading