- update i18next, React i18n, Lucide, and compatible npm and Cargo locks
- refresh Windows and Linux FFmpeg 9.0.2 archives with verified hashes
- report compatible npm wanted versions and handle nested, duplicate, and optional packages
- update Node and Rust CI pins and document Windows 10 22H2 qualification
- Update Tauri 2 JavaScript and Cargo dependencies; remove unused JS filesystem plugin.
- Refresh verified Windows/Linux FFmpeg sources and pin workflow actions.
- Test supported Node lines, move native jobs to Node 24, and target the macOS 27 runner.
- Build patched Windows Aria2 with MSYS2 UCRT64 and fingerprint the selected environment.
- replace hardcoded make -j2 with dynamic CPU core detection in aria2 build.sh
- isolate Aria2 source build cache from prebuilt engine downloads
- add atomic cache validation, restoration, and promotion in scripts/engine-aria2-cache.js
- add Rust dependency and target caching with Swatinem/rust-cache@v2
- raise Desktop checks timeout to 45 minutes to prevent job aborts
- harden temporary directory cleanup on Windows process abort
- cache target-scoped engine payloads with exact lock and toolchain keys\n- validate manifest provenance, checksums, and paths before reuse\n- restrict cache writes to trusted main pushes while allowing release restores\n- fall back to source provisioning when a cache is absent or invalid\n- harden release checksum generation against pipeline races
NimBold