releases: caret-honest 0.1.0 regime; polymorph-test + deltic + webcrypto pins to v0.1.0

.github/workflows/ci.yml

@@ -95,7 +95,7 @@ jobs:
         # Owns the rev derivation, the rev-keyed tools cache, the
         # install, and the pins gate; `just conformance`'s _ct-tools
         # recognizes the stamped install and does not repeat it.
-        uses: polymorph-components/polymorph-test/actions/setup@b4026866e481ead0738742e3b380601b605e5350
+        uses: polymorph-components/polymorph-test/actions/setup@b4444a25a22106ad4128549bdc9e579552e62210
         with:
           js-locks: |
             conformance/driver-ct/deltic/package-lock.json
@@ -122,7 +122,7 @@ jobs:
       - run: just gha::conformance-checks
       - name: Publish the conformance matrix
         if: always() && hashFiles('conformance/driver-ct/results/*.jsonl') != ''
-        uses: polymorph-components/polymorph-test/actions/aggregate@b4026866e481ead0738742e3b380601b605e5350
+        uses: polymorph-components/polymorph-test/actions/aggregate@b4444a25a22106ad4128549bdc9e579552e62210
         with:
           lock: conformance/guest-ct/tests.lock
           manifest: conformance/driver-ct/targets.toml

Cargo.toml

@@ -55,7 +55,7 @@ futures = { version = "0.3", default-features = false, features = ["std", "async
 # pins bump <rev> --cargo-toml Cargo.toml --package-json
 # conformance/driver-ct/deltic/package.json --workflow
 # .github/workflows/ci.yml`, then the follow-ups it prints.
-component-test-sdk = { git = "https://github.com/polymorph-components/polymorph-test", rev = "b4026866e481ead0738742e3b380601b605e5350" }
+component-test-sdk = { git = "https://github.com/polymorph-components/polymorph-test", rev = "b4444a25a22106ad4128549bdc9e579552e62210" }
 
 aead = { version = "0.6", default-features = false, features = ["alloc"] }
 aes = { version = "0.9", features = ["zeroize"] }

README.md

@@ -19,6 +19,14 @@ measured in [`bench/`](bench/README.md). Upstreaming and the tls-virt
 follow-ons remain — see the
 [issue tracker](https://github.com/polymorph-components/polymorph-tls/issues).
 
+## Releases
+
+Everything here is **unstable** (0.x), but [releases](../../releases) are
+**caret-honest**: within a minor line they stay backward-compatible, and
+anything breaking bumps the minor. Consumption is pinned at a release's
+commit — cargo git dependencies, vendored WIT, the release-pinned
+deltic/JSR graph — and bumped deliberately.
+
 ## Why pure-wasm TLS 1.3 is plausible
 
 Whether an algorithm is safe to run in wasm is a timing-channel question.

conformance/driver-ct/deltic/browser-bundle-entry.ts

@@ -6,5 +6,5 @@
 export * from "@deltic/runtime/embedder";
 export { Translator } from "@deltic/runtime/shim";
 export * from "@deltic/ct-runner";
-export { wasiShims } from "@deltic/wasi-shims";
-export type { WasiShims, WasiShimsOptions } from "@deltic/wasi-shims";
+export { wasi } from "@deltic/wasi";
+export type { WasiImports, WasiOptions } from "@deltic/wasi";

conformance/driver-ct/deltic/deno.json

@@ -1,11 +1,11 @@
 {
-  "//": "The deltic pin: every @deltic/* import is an exact-pinned JSR prerelease (0.1.0-pre.g078aa15); the hash names one upstream commit and @deltic/translator ships the translator wasm for that SAME commit. deno.lock carries integrity, --frozen enforced. One version repo-wide is asserted by the pin gate (../justfile).",
+  "//": "The deltic pin: every @deltic/* import is an exact-pinned JSR release (caret-honest upstream: within a minor line releases stay compatible, breaking bumps the minor; per-commit `<next>-pre.g<hash>` prereleases exist between releases — pin exactly); @deltic/translator ships the translator wasm for the SAME commit. deno.lock carries integrity, --frozen enforced. One version repo-wide is asserted by the pin gate (../justfile).",
   "imports": {
-    "@deltic/ct-runner": "jsr:@deltic/ct-runner@0.1.0-pre.g078aa15",
-    "@deltic/runtime/embedder": "jsr:@deltic/runtime@0.1.0-pre.g078aa15/embedder",
-    "@deltic/runtime/shim": "jsr:@deltic/runtime@0.1.0-pre.g078aa15/shim",
-    "@deltic/wasi-shims": "jsr:@deltic/wasi-shims@0.1.0-pre.g078aa15",
-    "@deltic/translator": "jsr:@deltic/translator@0.1.0-pre.g078aa15"
+    "@deltic/ct-runner": "jsr:@deltic/ct-runner@0.1.0",
+    "@deltic/runtime/embedder": "jsr:@deltic/runtime@0.1.0/embedder",
+    "@deltic/runtime/shim": "jsr:@deltic/runtime@0.1.0/shim",
+    "@deltic/wasi": "jsr:@deltic/wasi@0.1.0",
+    "@deltic/translator": "jsr:@deltic/translator@0.1.0"
   },
   "minimumDependencyAge": { "age": "P1D", "exclude": ["jsr:@deltic/*"] },
   "tasks": {

conformance/driver-ct/deltic/package.json

@@ -4,7 +4,7 @@
   "type": "module",
   "description": "Node driver for the deltic-browser conformance rows: the composed artifacts runtime-linked inside headless Chromium through the upstream page driver and deltic worker.",
   "dependencies": {
-    "@polymorph/component-test-js": "github:polymorph-components/polymorph-test#b4026866e481ead0738742e3b380601b605e5350",
+    "@polymorph/component-test-js": "github:polymorph-components/polymorph-test#b4444a25a22106ad4128549bdc9e579552e62210",
     "playwright-core": "1.62.1"
   }
 }

conformance/driver-ct/deltic/run-browser.mjs

@@ -10,7 +10,7 @@
 //
 // The artifacts import only wasi 0.2 and test-context, so there is no
 // SUT host module on this leg and the stock upstream worker serves it
-// unmodified (wasiShims + test-context are inside the bundle).
+// unmodified (wasi() + test-context are inside the bundle).
 //
 // Gates in CI (the Actions runner image ships Chrome); locally it runs
 // under CONFORMANCE_BROWSER=1 (`just conformance-ct::all`) or directly

conformance/driver-ct/deltic/run.ts

@@ -8,7 +8,7 @@
 //   run-node.mjs                          | this runner
 //   --------------------------------------+---------------------------
 //   jco transpile + loadCoreModules       | translator.translate(bytes)
-//   bindImports (preview2-shim, both      | wasiShims() (track-keyed:
+//   bindImports (preview2-shim, both      | wasi() (track-keyed:
 //     wasi minor spellings bound)         |   one @0.2 provider serves
 //                                         |   every minor)
 //   inventoryLookup(coreBytes) + missing  | deltic reads the suite's own
@@ -33,7 +33,7 @@
 import { Translator } from "@deltic/runtime/shim";
 import type { ComponentArtifacts } from "@deltic/runtime/embedder";
 import { runSuite } from "@deltic/ct-runner";
-import { wasiShims } from "@deltic/wasi-shims";
+import { wasi } from "@deltic/wasi";
 import { defaultTranslator } from "@deltic/translator";
 
 const ROOT = new URL("../../../", import.meta.url);
@@ -120,7 +120,7 @@ async function main() {
 
   const lines: string[] = [];
   const counts = await runSuite(artifacts, {
-    imports: wasiShims(),
+    imports: wasi(),
     target: cli.target,
     suiteName: cli.suiteName,
     missing: cli.missing,

examples/webcrypto-signer/wit/deps/polymorph-webcrypto/.pinned-rev

@@ -1 +1 @@
-61fbd02c55141a1c0d76eb524e7af4bb9488fc31
+5bb3d483f30e78b0b029bdedb500956710234c1b