[atrinik-classic-dependency-updater]

Updates the Classic client sound lock after complete Sound release verification.

Verified coordinate

Field	Old	New
tag	v1.2.0	v1.3.0
commit	642e5a25a476c96b764054b7b57307274b0fabb5	65f317d8c9a0a4c2c6d2c1cac0b8d401eeda32f9
url	https://github.com/atrinik/sound/releases/download/v1.2.0/atrinik-sound-classic-runtime-1.2.0.tar.gz	https://github.com/atrinik/sound/releases/download/v1.3.0/atrinik-sound-classic-runtime-1.3.0.tar.gz
sha256	0a48a2a0087fecf0f9bbe815f20460ab70f858656b4e4a9d1479f8f03c8b09bf	46680ab1a9f1423829aa0bbab6694db63194be05e18ee1c2fa5ad0555141b5e7
runtime_manifest_sha256	1894c2ca0b563d1b4ab69c29ac839cf5d873680c416f343072aacad4308889cb	d3b4921c8cd3d41e8a41f64441510b0e9aa9781fc519ff5f45f2077e676cb88f
runtime_checksums_sha256	20a86d0ec9117808a9df2eaeef3a38bd6106d953e8c0093dff05b68662bb8fdf	cdc85da891076dca0292adc21904915d8343da37ccf2d2403830b67bce79581d

Verification

• Required one published, non-draft Sound release for every selected tag.
• Verified the immutable tag commit, canonical Classic restoration URL, SHA256SUMS entry, and downloaded archive digest.
• Pinned and verified the restoration manifest, complete checksum inventory, and Vorbis/Opus payload formats.
• Re-ran the authoritative Classic dependency-lock loader before mutation.
• Classic consumers continue to use the digest-pinned offline dependency bundle.

Generated by the repository-owned verified Sound updater. This pull request is never approved or merged by that automation.

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues found.

Scanned Files

None

[zoeyrose]

Reviewed exact head 8db1d432fb31917490022b4f198269a8f7525ec1 against base 0c798c9095218fc344bcad35fabab5ebbe7340f6.

Examined the complete two-file diff and affected Sound updater, runtime-verification, lock-loader, dependency-bundle producer and consumer code. Fresh-context independent reviewer classic_sound_runtime_review (Sol high) found no actionable P0–P3 defects. There are no findings to fix or decline.

The App-owned commit changes only six Sound coordinate fields and their derived bundle descriptor. The canonical Classic runtime archive URL, tag/source commit, archive hash, runtime manifest and checksum inventory match the exact successful updater run 41271218815 attempt 1. App identity, one-commit ancestry, live branch/PR head and unchanged foreign locks/acquisition contracts were checked. Public GitHub release metadata reports immutable:false; the checked identity relies on exact commit and digest pins. Actual archive-byte/provenance verification is the trusted updater's evidence, not a claim of an additional local download.

Local validation passed: authoritative lock loader, bundle descriptor/material digest recomputation, 31 focused Sound/bundle tests, five imported histories and diff whitespace. Independent review additionally passed 67 focused tests, five imported histories and material hash recomputation. No local audible/gameplay/native qualification is claimed. Required hosted CI remains separately required before the ready gate. No human commit, branch rewrite, additional dispatch, deletion, merge or deployment was performed.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!