Release date: 2026-10-23
Deployment and install instructions now authenticate the very first pip download using the Python advisory’s pip 26.2.2 wheel and pinned SHA-256. Dependency installation follows only after that succeeds. Development and release requirements also require certifi >=2026.10.19 (#315).
The TLS audit and recovery guide records the runtime/system trust paths, exact observed versions, artifact scope, and existing-environment repair instructions. The source/sdist includes the deployment fix; wheel metadata carries the corrected installation guide. CogniRelay does not bundle a Python runtime or CA store. Operators must update host certificates and existing venvs separately. No production deployment or exploitation is claimed by this release.
Continuity storage, credentials, service wiring, rollback, and API behavior are unchanged.
Release validation commands:
git diff --check
bash -n deploy/scripts/bootstrap-debian-nginx.sh
./.venv/bin/python -m ruff check app tests tools agent-assets
./.venv/bin/python -m unittest tests.test_pip_bootstrap_315 tests.test_packaging_290 tests.test_prepare_release_293 -v
./.venv/bin/python -m unittest discover -s tests -v
./.venv/bin/python tools/prepare_release.py check --version 1.4.15 --date 2026-10-23
./.venv/bin/python tools/validate_server_json.py
code-guard . --base-ref origin/main --json --json-mode compact
Build artifacts outside the source tree with `python -m build –outdir