[DEPS-STABLE-01] Check all FS-GG repositories and update dependencies to current stable releases #5251

Work level: Outcome · Track: Active delivery · Intended Status: In progress

Owner

Programme/root; repository owners retain their source and release contracts.

Done when

The user's 2026-11-02 request is fulfilled: check all dependencies in all accessible FS-GG repositories and update to the most current stable versions. Census all organization repositories, including forks, private repositories and empty repositories, and account for every dependency-bearing surface: NuGet, npm, Python, SDK/tool manifests, GitHub Actions, container/base images and other detected package systems. Resolve stable versions from current authoritative registries; do not infer latest from stale dashboards or include prereleases. Update active declarations and lockfiles coherently, perform needed compatibility migrations, validate and land through normal repository gates. Preserve historical fixtures, immutable evidence and deliberately frozen qualification inputs; record their concrete semantic role rather than silently rewriting history. Any unavailable registry, incompatible migration, publication/installed qualification prerequisite or ownership overlap remains an explicit owned remainder, not accepted completion. Internal FS.GG consumers use actually published coherent versions. Keep private repository details in private native records. Completion requires a final current census and accepted update/readback for every scoped dependency or an explicit unresolved blocker.

Current deliverable

The accepted census covers all27 organization repositories. Algorithms#37, FsQuint#55, Net#118, Audio#346 and shared external/tool source#5254 are accepted and merged. Shared Core producer#5253 source and coherent0.114.4 publication are now delivered: all16 release effects verified, registry PR#5260 merged07229d66 and merged-main feed41509055725 passed. Actual reconciler installation and first corrected three-write apply passed; permanent six-rule automatic operation is accepted and #5206 is closed after genuine hourly/post-merge proof. Archive#5170 executed8 real archives with readback; its permanent daily timer is enabled and awaits its first genuine scheduled invocation.

Governance #484, HighBar bootstrap #5257 and client #5256 are accepted and closed. Algorithms Actions PR65 and Recoil Actions PR2/PR4 are merged; the broader Actions Delivery #5265 remains open. Recoil Catch2 PR3 is also merged with scoped native compile qualification; the remaining native/container work stays owned by #5267.

Templates #851 is accepted and closed after PR853 merged 9ef3495c with full accessibility, container and real keyboard/Orca checks. TypeScript 7 Delivery #852 is assembled on that accepted base and undergoing final independent composition review. Rendering #5213 is fully accepted and closed after a genuine fast-forward workflow canary. The IME caller PR1492 merged cf1e2db1; #5238 remains open for its actual current-public composition and three real IME cases. Dependency PR1508's repaired benchmark passed; remaining original CI and final composition acceptance are still required.

Game #819 passed all 613 actual browser checks for its first dependency slice. Its compiler/WASM migration and source-only qualification advance separately; the existing published profile does not qualify changed protected inputs. Manifest-binding repair #756 and legacy owned-PR continuation #5269 have reviewed source awaiting legitimate integration capacity. A private-repository lane retains its scoped merge-provenance credential hold.

SDD 2.6.0 publication is delivered: Root independently joined all four retained candidate packages to both feeds, with original publisher success and immutable dual-feed receipt. Immediate post-publication tool resolution failed; later clean public CLI and Knowledge verification passed. Separate public qualification passed feed rejoin and clean installs, then exposed missing Java setup before Q2/Q3; that workflow repair remains open. Genuine retained2.5.4 workspace adoption and normal sync pass with the specification unchanged; full ordinary lifecycle verification remains blocked by absent lifecycle inputs in that retained typed-only workspace.

Rendering dependency #1507 is accepted and closed after PR1508 merge1ae34fca, required CI, full browser/AT qualification and repaired benchmark. HighBar Actions PR19 and closing-keyword caller PR20 are merged and verified. Enrollment source PR5268 merged05fbf8ed with all checks passing; #5263 remains open for canonical0.114.5 publication, installed constructor and coordinated enrollment/archive acceptance. Continuation tooling #5269 now has original PR5270 in CI; existing hub5244 is being assembled on the accepted enrollment source. Templates #852 has a reviewed diagnostic repair for its original unexplained inventory refusal; IME supplier test isolation is independently reviewed. Native HighBar retains ten completed ports and prepares a separately bounded remaining gRPC/GTest operation. Game compiler/WASM source repairs and isolated tool acquisition continue. Usage-limited workers were replaced through durable recovery; completed operations are retained.

Next action

Integrate qualified same-owner candidates promptly as original gates finish. Advance independent Actions batches, Game's causal repair, Rendering composition, and enrollment repair in parallel. Complete SDD publication and genuine public fresh/in-place journeys. Continue all remaining dependency surfaces and final current census; published stable suppliers can proceed independently of future releases.

Blocked on

No organization-wide completion is claimed. Remaining work includes original CI and accepted integration, SDD publication and public journeys, Game's coherent compiler/WASM successor, HighBar's actual native build, Actions and container updates, enrollment activation and the final current census. HighBar's first native attempt exposed a private build-tool loader dependency; the repaired continuation retains its original aggregate deadline. The private repository's check-provenance read permission remains an external hold. Hub and Coordination source batches retain actual open-PR capacity constraints; source preparation and independent reviews continue. Historical/frozen inputs and genuine qualification prerequisites are not silently rewritten or waived.

Acceptance evidence

Accepted inventory: #5252 (comment). Accepted Algorithms source: FS-GG/FS.GG.Algorithms#37 (comment). Accepted FsQuint source: FS-GG/FsQuint#55 (comment). Registry selection filters unlisted/yanked/prerelease releases; historical and frozen inputs remain classified separately. The initial census is not the required final freshness readback.

Accepted Net source: FS-GG/FS.GG.Net#118 (comment). Producer activation: FS-GG/FS.GG.Net#120 (comment).

Accepted Audio source: FS-GG/FS.GG.Audio#346 (comment).

Governance acceptance: FS-GG/FS.GG.Governance#484 (comment). Automatic reconciliation acceptance: #5206 (comment).

HighBar bootstrap acceptance: #5257 (comment). HighBar client acceptance: #5256 (comment). Algorithms Actions scoped acceptance: #5265 (comment). Canonical legacy recovery acceptance: #5264 (comment).

Parallel native/container Delivery#5267 is now filed and active. Recoil Actions PR2 mergedc8272a4f with independently reviewed source and exact native delivered-tree proof; its guarded engine job was skipped, not runtime-qualified. Acceptance: #5265 (comment). Rendering prerequisite PR1505 merged8b4a4d72; dependency PR1508 and existing IME caller PR1492 now have independent original CI cohorts. Current-source failures are repaired on their owning PRs while useful original qualification drains.

Templates #851 acceptance: FS-GG/FS.GG.Templates#851 (comment). Rendering #5213 full acceptance: #5213 (comment). SDD retained publication selection: FS-GG/FS.GG.SDD#1156 (comment).