2026年07月03日 - 2026年07月10日
Overview
18 pull requests merged by 1 user
Merged
#104 Fix double-free of archive_hash in createPackageArtifact
Merged
#103 Key the build profile cache on resolved dependency versions, not names
Merged
#102 Acquire the store lock in pin/profile commands before touching the store
Merged
#101 Handle -- as an end-of-flags separator in ArgumentParser.parse
Merged
#100 Fetch vendored C deps via build.zig.zon instead of curl+sha256sum
Merged
#99 Open cached repo.db from verified bytes, not a second disk read
Merged
#98 Verify manifest signature before parsing it in mere dev import
Merged
#97 Parse manifest.v1 from the exact bytes verified, not a second disk read
Merged
#96 fsync staged package content and store directory before/after atomic rename
Merged
#95 Consolidate CLI error-boundary handling and fix hardcoded exit codes
Merged
#94 Fix mere shell ignoring the positional profile file with a passthrough command
Merged
#93 Fix uninstall --cascade for multiple independently-required packages
Merged
#92 Fix cross-package provider selection comparing versions
Merged
#91 Re-verify cached repo.db every time it's opened, not just on download
Merged
#90 Verify signatures for file:// repos declared in config.kdl
Merged
#89 Create GC roots when keeping a generation
Merged
#88 Remove --system flag from mere store init
Merged
#87 Verify archive_hash before caching downloaded packages
1 unresolved conversation
Open
#67
Installing & running fully rootless?