You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
This PR promotes @stll/aho-corasick and @stll/aho-corasick-wasm from 1.0.0-rc.1 to 1.0.0 stable across all manifests: Cargo.toml, Cargo.lock, package.json, four platform npm/*/package.json files, wasm/package.json, index.cjs version-check guards, the bun.lock lockfile, and the CycloneDX SBOM. The SBOM inconsistencies flagged in the prior review thread have been resolved — all version, purl, and bom-ref fields in provenance/sbom.cdx.json now consistently reflect 1.0.0.
Confidence Score: 5/5
Safe to merge; the only finding is a P2 noting that bun.lock integrity hashes need regeneration after the packages are published to npm.
All version strings are consistently updated across every manifest, the SBOM is now internally consistent (previous thread concerns resolved), and all native-binding version guards are correct. The sole remaining concern — stale sha512 hashes in bun.lock — is a post-publish housekeeping task that doesn't block correctness before publishing, warranting a full 5/5.
bun.lock — integrity hashes should be regenerated after 1.0.0 packages are published to npm.
Important Files Changed
Filename
Overview
bun.lock
Version strings updated from 1.0.0-rc.1 to 1.0.0 for all five platform packages, but the sha512 integrity hashes are identical to the rc.1 hashes — stale if packages haven't been published yet.
provenance/sbom.cdx.json
All bom-ref, purl, and version fields for both stella-aho-corasick (Cargo) and @stll/aho-corasick (npm) components updated to 1.0.0 — previously flagged inconsistencies resolved.
index.cjs
All 20+ platform version-check guards updated from 1.0.0-rc.1 to 1.0.0 consistently.
package.json
Root package version and all optionalDependency pinned versions updated to 1.0.0.
Cargo.toml
Package version bumped from 1.0.0-rc.1 to 1.0.0.
wasm/package.json
WASM package version bumped from 1.0.0-rc.1 to 1.0.0.
Flowchart
%%{init: {'theme': 'neutral'}}%%
flowchart TD
A["PR: bump 1.0.0-rc.1 to 1.0.0"] --> B["Cargo.toml / Cargo.lock"]
A --> C["package.json + npm/* + wasm/package.json"]
A --> D["index.cjs version guards"]
A --> E["bun.lock"]
A --> F["provenance/sbom.cdx.json"]
B --> G["stella-aho-corasick crate 1.0.0 ✓"]
C --> H["@stll/aho-corasick 1.0.0 + 5 platform packages ✓"]
D --> I["All 20 platform version checks expect 1.0.0 ✓"]
E --> J["Version strings updated ✓ — sha512 hashes stale ⚠"]
F --> K["All bom-ref / purl / version fields 1.0.0 ✓"]
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for freeto subscribe to this conversation on GitHub.
Already have an account?
Sign in.
Labels
None yet
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
![devin-ai-integration[bot]](https://avatars.githubusercontent.com/in/811515?s=60&v=4){kind=small}
![greptile-apps[bot]](https://avatars.githubusercontent.com/in/867647?s=60&v=4){kind=small}
Summary
Bumps
@stll/aho-corasickand@stll/aho-corasick-wasmfrom1.0.0-rc.1to1.0.0.Why
This is part of the stable release cut for the Stella text-search engine stack.
Validation
node scripts/version-sync.mjs check --tag v1.0.0npm pack --json --ignore-scripts --dry-runcd wasm && npm pack --json --ignore-scripts --dry-run