- Update Tauri 2 JavaScript and Cargo dependencies; remove unused JS filesystem plugin.
- Refresh verified Windows/Linux FFmpeg sources and pin workflow actions.
- Test supported Node lines, move native jobs to Node 24, and target the macOS 27 runner.
- Build patched Windows Aria2 with MSYS2 UCRT64 and fingerprint the selected environment.
- replace hardcoded make -j2 with dynamic CPU core detection in aria2 build.sh
- isolate Aria2 source build cache from prebuilt engine downloads
- add atomic cache validation, restoration, and promotion in scripts/engine-aria2-cache.js
- add Rust dependency and target caching with Swatinem/rust-cache@v2
- raise Desktop checks timeout to 45 minutes to prevent job aborts
- harden temporary directory cleanup on Windows process abort
- cache target-scoped engine payloads with exact lock and toolchain keys\n- validate manifest provenance, checksums, and paths before reuse\n- restrict cache writes to trusted main pushes while allowing release restores\n- fall back to source provisioning when a cache is absent or invalid\n- harden release checksum generation against pipeline races
NimBold