Version Packages (rc)

Author: github-actions[bot]

.changeset/pre.json

@@ -45,7 +45,9 @@
     "eql-v3-typed-client",
     "eql-v3-typed-schema",
     "eql-v3-wasm-inline",
+    "init-pins-runtime-versions",
     "prisma-next-0-14",
+    "remove-legacy-drizzle-package",
     "remove-secrets-leftovers",
     "rename-db-install-to-eql-install",
     "schema-stevec-standard-pin",

e2e/CHANGELOG.md

@@ -1,5 +1,13 @@
 # @cipherstash/e2e
 
+## 0.0.3-rc.2
+
+### Patch Changes
+
+- Updated dependencies [6fcb967]
+- Updated dependencies [413ca39]
+  - stash@1.0.0-rc.2
+
 ## 0.0.3-rc.1
 
 ### Patch Changes

e2e/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cipherstash/e2e",
-  "version": "0.0.3-rc.1",
+  "version": "0.0.3-rc.2",
   "private": true,
   "description": "End-to-end tests that exercise built CipherStash binaries and cross-package behaviour.",
   "type": "module",

examples/basic/CHANGELOG.md

@@ -1,5 +1,12 @@
 # @cipherstash/basic-example
 
+## 1.2.14-rc.2
+
+### Patch Changes
+
+- Updated dependencies [413ca39]
+  - @cipherstash/stack-drizzle@1.0.0-rc.2
+
 ## 1.2.14-rc.1
 
 ### Patch Changes

examples/basic/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@cipherstash/basic-example",
   "private": true,
-  "version": "1.2.14-rc.1",
+  "version": "1.2.14-rc.2",
   "type": "module",
   "scripts": {
     "start": "tsx index.ts"

packages/bench/CHANGELOG.md

@@ -1,5 +1,12 @@
 # @cipherstash/bench
 
+## 0.0.5-rc.2
+
+### Patch Changes
+
+- Updated dependencies [413ca39]
+  - @cipherstash/stack-drizzle@1.0.0-rc.2
+
 ## 0.0.5-rc.1
 
 ### Patch Changes

packages/bench/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cipherstash/bench",
-  "version": "0.0.5-rc.1",
+  "version": "0.0.5-rc.2",
   "private": true,
   "description": "Performance / index-engagement benchmarks for stack integrations (Drizzle, encryptedSupabase, Prisma).",
   "type": "module",

packages/cli/CHANGELOG.md

@@ -1,5 +1,44 @@
 # @cipherstash/cli
 
+## 1.0.0-rc.2
+
+### Patch Changes
+
+- 6fcb967: `stash init` now pins the packages it installs (`@cipherstash/stack`, the
+  integration adapter, and `stash` itself) to the exact versions this CLI
+  release was built alongside, instead of installing bare package names that
+  resolve through npm dist-tags (#661). During a pre-release window dist-tags
+  lag or point at placeholders, so an unpinned `init` could silently deliver a
+  different release than the CLI driving the setup — stale `@cipherstash/stack`,
+  or an empty placeholder adapter — breaking `/v3` imports out of the box. The
+  versions are embedded at build time from the release train itself
+  (`src/release-train.ts`, the single source both the build and the runtime
+  check against), so they can never disagree with what was published together.
+
+  Init also now surfaces **version skew** on already-installed packages —
+  unconditionally, before any prompt or early exit, including when the install
+  is declined or partially fails. Interactively it offers to align the skewed
+  packages in the same confirm as the missing installs (keeping `stash` a dev
+  dependency); non-interactively it never mutates an existing install — it
+  warns and prints the exact align commands. A package whose manifest exists
+  but can't be read (an aborted install) is reported as skew, not treated as
+  matching. All other install guidance is pinned the same way: the
+  missing-package hints, `.cipherstash/context.json`'s `installCommand`, the
+  `install-eql` manual note, the native-module recovery hint (previously
+  `stash@latest`), and the `stash wizard` one-shot spawn (previously an
+  unpinned `npx @cipherstash/wizard`). The `stash-cli` skill documents the
+  behaviour, and the other bundled skills' manual install commands now carry a
+  verify-what-resolved note.
+
+- 413ca39: The legacy `@cipherstash/drizzle` package (the `@cipherstash/protect`-based
+  Drizzle integration) is removed from the repository and the release train —
+  `@cipherstash/protect` is sunsetting at Stack 1.0, and the package's successor
+  is `@cipherstash/stack-drizzle`. Already-published versions remain installable
+  from npm (deprecated, pointing here); the git history preserves the source for
+  any emergency maintenance. The `stash-drizzle` skill and the
+  `@cipherstash/stack-drizzle` README now state the deprecation explicitly so
+  nobody (human or agent) installs the legacy package by mistake.
+
 ## 1.0.0-rc.1
 
 ### Minor Changes

packages/cli/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "stash",
-	"version": "1.0.0-rc.1",
+	"version": "1.0.0-rc.2",
 	"description": "CipherStash CLI — the one stash command for auth, init, encryption schema, database setup, and secrets.",
 	"repository": {
 		"type": "git",

packages/stack-drizzle/CHANGELOG.md

@@ -1,5 +1,18 @@
 # @cipherstash/stack-drizzle
 
+## 1.0.0-rc.2
+
+### Patch Changes
+
+- 413ca39: The legacy `@cipherstash/drizzle` package (the `@cipherstash/protect`-based
+  Drizzle integration) is removed from the repository and the release train —
+  `@cipherstash/protect` is sunsetting at Stack 1.0, and the package's successor
+  is `@cipherstash/stack-drizzle`. Already-published versions remain installable
+  from npm (deprecated, pointing here); the git history preserves the source for
+  any emergency maintenance. The `stash-drizzle` skill and the
+  `@cipherstash/stack-drizzle` README now state the deprecation explicitly so
+  nobody (human or agent) installs the legacy package by mistake.
+
 ## 1.0.0-rc.1
 
 ### Minor Changes