Repository navigation
Prepare v0.3.0: automatic setup, pagination, and dependency cleanup - #34
Merged
Merged
Conversation
Jaredcastorena
changed the title
Jaredcastorena
marked this pull request as ready for review
October 24, 2026 21:55
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Spine v0.3.0 reduces first-run setup to a model server URL and heart passphrase. Bare
spinestarts chat, validates the connection before creating a heart, downloads pinned and checksum-verified MiniLM assets automatically, and remembers successful nonsecret connection and launch preferences. Reopening reuses those settings; failed setup preserves the last working profile.The release also restores bounded Unicode file pagination from #18, updates stable dependencies and Rust 1.99.1, refreshes pinned CI/container images, and regenerates licenses. ZIP 9.1.0 plus a minimal, provenance-checked Candle 0.11.0 compatibility backport from huggingface/candle#4041 resolves the inherited ZIP advisories. Both audits report zero known vulnerabilities; the upstream
pasteunmaintained warning remains informational. No advisories are suppressed.Windows dependency sources use a fixed public directory so native compiler paths cannot expose the build-user profile. The existing binary privacy gate remains enforced. The Windows integration smoke test allows cold PowerShell startup while retaining output and cancellation assertions.
Validation: all 231 locked workspace tests, strict Clippy, formatting, fuzz compilation, license freshness, source privacy/provenance, and actionlint pass. GitHub CI and all five release targets pass on
244ce4d505e5a16ddf5d0c87e1cab057bca76dfe(CI, release candidate). Genuine MiniLM/NLI inference, native and container first-run/download/chat/reopen, failed-settings preservation, and old/new/old v0.2.0 heart compatibility checks pass.Closes #29
Closes #30
Closes #31
Closes #32
Closes #33