Releases

Fix source-owned local dependency removal on restart while retaining immutable artifact checks; authenticate CLI module search for private modules.

Focused maintenance release: restores local replacement trees and history consistently, improves replacement diagnostics, redacts PostgreSQL credentials, fixes HTTP/WebSocket and SQLite behavior, and hardens shutdown, naming, KV and Raft lifecycles. Includes go-lua v1.5.21 and the existing WASM mounted-file read fix. Does not include WASM actors or Builder/Bee application-launch APIs.

Adds SQLite change-data capture alongside PostgreSQL CDC, hardens capture contracts and shutdown behavior, fixes terminal navigation keys and bounded canvas rendering, and expands CI with native Lua application and real CDC integration coverage.

Fixed event bus unsubscribe so it now stops any further deliveries immediately after unsubscribing.

Fix workspace replacement lock reconciliation and diagnostics; expose HTTP request headers to Lua; migrate to Go 1.27 and refresh runtime dependencies.

Added Pyodide/WASM runtime support with instance-owned TCP sockets and better socket deadlines, plus fixes for Docker volume handling, async call cancellation, shutdown sync, and legacy state migration.

Expose atomic registry snapshot state with ownership and dependency-root provenance for consistent lifecycle consumers.

Fix DI binding refusal errors to name the affected entries, and preserve legacy dependency roots when replaying the registry.

Registry-owned provenance now replaces entry stamping, and hot installs no longer strand consumers when entries update. Locked manifest providers also defer replaced modules instead of failing offline evidence checks.

Cached verified deployment startup, fixed JSON Schema enum compilation, and tightened validation around transactional contract changes and cloud storage Lua integer options.