Skip to content

release: 1.3.0 - #771

Merged
EVWorth merged 2 commits into
mainfrom
claude/hopeful-bardeen-1k4d1h
Oct 20, 2026
Merged

EVWorth merged 2 commits into
mainfrom
claude/hopeful-bardeen-1k4d1h

Conversation

@EVWorth

@EVWorth EVWorth commented Oct 20, 2026 •

Copy link
Copy Markdown
Owner

Version bump to 1.3.0 in the three manifests (package.json, src-tauri/Cargo.toml, src-tauri/tauri.conf.json) and the two lockfile entries that record the app's own version, as in #761.

It also carries a security fix: three advisories published today made cargo audit fail. See the last item under Fixes and dependencies.

1.2.0 and 1.2.1 were bumped but never tagged, so the last published release is v1.1.0. 1.3.0 carries everything since then.

What's in 1.3.0

Connections (#731)

Grid

Fixes and dependencies

Checks run locally

  • Live suites: mas-core, mas-admin and mas-mcp, one test at a time as the release gate runs them. 210 passed on MySQL 8.0 and 210 on MariaDB 11 for the version bump. 210 passed again on MySQL after the TLS crates were updated.
  • Unit tests: 482 passed across the workspace crates, and the app's --lib tests passed (61).
  • Audit: scripts/cargo-audit-check.sh reports 0 real vulnerabilities after the update.
  • Lockfiles and versions: cargo metadata --locked and npm ls are clean, and check-tauri-versions.sh agrees.

🤖 Generated with Claude Code

https://claude.ai/code/session_01WTypK4RjzzdjoFxd3qk14g

Version bump across the three manifests and the two lockfile entries
that record the app's own version.

1.2.0 and 1.2.1 were bumped but never tagged, so 1.3.0 is the first
release since 1.1.0 and carries everything since it:

Connections (#731)
- Each editor tab runs on its own server session, so SET @var, SET
  SESSION, temporary tables and multi-run transactions carry over (#734)
- Each agent session, and each backup or restore, has connections of its
  own, so none of them can hold up the editor or each other (#732, #770)
- The Min/Max pool size setting and the status-bar pool counter are gone;
  connections are no longer something to size (#769)
- A "busy" error says what is busy and what to wait for (#727)

Grid
- Grid edits save on the tab's session without committing its open
  transaction (#762)
- Copy a long cell value without opening the viewer (#748)

Fixes
- Linux: WebKitGTK's DMABUF renderer is off under Wayland (#742)
- rustls for RUSTSEC-2026-0285 and RUSTSEC-2026-0346..0349 (#728, #759)
- Tauri 2.12.3, tauri-plugin-updater 2.13.3, tauri-plugin-shell 2.5.0
  (#749, #747, #758), and dependency roll-ups

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01WTypK4RjzzdjoFxd3qk14g
….0383

rustls-webpki 0.103.16, webpki-roots and webpki-root-certs 1.0.10. The
advisories were published today: certificate verification could accept
distrusted intermediates, and the bundled roots still trusted the
distrusted emSign intermediates. cargo audit fails on all three, and a
release should not ship them.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01WTypK4RjzzdjoFxd3qk14g
@EVWorth
EVWorth merged commit b94d26b into main Oct 20, 2026
12 checks passed
@EVWorth
EVWorth deleted the claude/hopeful-bardeen-1k4d1h branch October 20, 2026 23:51
EVWorth added a commit that referenced this pull request Oct 21, 2026
…778)

* ci: lint every workspace crate with clippy

CI ran clippy without --workspace in src-tauri, whose Cargo.toml is
both the workspace root and the app package, so the six mas-* crates
were never linted. mas-agent already failed: claude.rs had its session
type after the tests module (items_after_test_module). The tests now
come last, and CI, just lint and the docs all lint the workspace.

Fixes #772.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01WTypK4RjzzdjoFxd3qk14g

* fix(deps): hold mas-mcp's reqwest at 0.12

The cargo group bump (#756) moved mas-mcp's dev-dependency back to 0.13,
undoing #717: built with the app crate, its test client shares the
reqwest that tauri-plugin-updater builds with rustls-no-provider, and
all 8 HTTP tests in endpoint.rs panic for want of a crypto provider.

Back on 0.12, Dependabot told not to offer 0.13, and a CI step runs the
endpoint tests built with the app crate, which is the only build that
shows the failure. CI ran mas-mcp's tests on their own, so it stayed
green both times this broke.

Fixes #773.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01WTypK4RjzzdjoFxd3qk14g

* fix(scripts): keep the caller's PATH in dev.sh

dev.sh replaced PATH with one person's home directories, which named
them in a public repo and left everyone else without cargo. It now adds
$HOME/.cargo/bin, and Linuxbrew where installed, to the caller's PATH.
The other three files #776 listed were fixed when the agent docs moved
(#775).

Fixes #776.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01WTypK4RjzzdjoFxd3qk14g

* fix(just): set the lockfiles' own version in just bump

just bump set package.json, tauri.conf.json and Cargo.toml, but not the
app's own entries in package-lock.json and Cargo.lock, so every release
PR (#751, #761, #771) patched those up by hand. The recipe now sets the
two package-lock.json fields directly, since an npm install would
re-resolve and an npm older than the one that wrote the lockfile drops
fields, and runs `cargo update -p sqlpilot` for Cargo.lock.

Its closing hint, the /bump command and the release-cutter agent all
said to commit on main and `git push origin main --follow-tags`, which
the PRs-only rule and .claude/settings.json forbid. They now describe
the release PR, then a tag on its merge commit.

Fixes #777.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01WTypK4RjzzdjoFxd3qk14g

---------

Co-authored-by: Claude <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants