mcpplibs.os 0.2.9 uses the corrected confinement graph (#698)

Index immutable os 0.2.9 source archives and advance the os smoke member. All applicable checks pass, including all four candidate builds and native workspace checks. GLOBAL and CN source bytes, archive identity and the Linux 0.24.1 dependency are verified. Producer CI passes all twenty checks, with actual hosted macOS read-only and writable grant assertions; local indexed consumption passes too.

Co-authored-by: speak-agent <248744407+speak-agent@users.noreply.github.com>

Author: Sunrisepeak

CHANGELOG.md

@@ -15,6 +15,8 @@
 
 ### Added
 
+- **mcpplibs.os 0.2.9.** Linux selects openkal-linux 0.24.1 for corrected read-only confinement, and hosted/image qualification uses platform 0.23.3. The C++ API and implementation are unchanged. The os test member follows the release. GLOBAL and CN archives have the same verified SHA256.
+
 - **openkal-platform 0.23.3.** Both image and hosted arrangements select the corrected Linux confinement graph: Linux 0.24.1, musl 0.27.3, llvm-runtime 0.18.4 and image 0.4.3. It requires mcpp 2026.11.3.1. GLOBAL and CN archives have the same verified SHA256.
 
 - **openkal-llvm-runtime 0.18.4.** Both allocator arrangements select openkal-musl 0.27.3, which propagates Linux 0.24.1 and image loader 0.4.3. The C++ runtime implementation is unchanged. The openkal test member follows the release for musl targets. GLOBAL and CN archives have the same verified SHA256.

pkgs/o/os.lua

@@ -31,6 +31,13 @@ package = {
 
     xpm = {
         linux = {
+            ["0.2.9"] = {
+                url    = {
+                    GLOBAL = "https://github.com/mcpplibs/os/archive/refs/tags/0.2.9.tar.gz",
+                    CN     = "https://gitcode.com/mcpp-res/os/releases/download/0.2.9/os-0.2.9.tar.gz",
+                },
+                sha256 = "4168f6a1a1608856bfd79b79d8edd46245905baebe57be0c86371a772a967639",
+            },
             ["0.2.8"] = {
                 url    = {
                     GLOBAL = "https://github.com/mcpplibs/os/archive/refs/tags/0.2.8.tar.gz",
@@ -108,6 +115,13 @@ package = {
             },
         },
         macosx = {
+            ["0.2.9"] = {
+                url    = {
+                    GLOBAL = "https://github.com/mcpplibs/os/archive/refs/tags/0.2.9.tar.gz",
+                    CN     = "https://gitcode.com/mcpp-res/os/releases/download/0.2.9/os-0.2.9.tar.gz",
+                },
+                sha256 = "4168f6a1a1608856bfd79b79d8edd46245905baebe57be0c86371a772a967639",
+            },
             ["0.2.8"] = {
                 url    = {
                     GLOBAL = "https://github.com/mcpplibs/os/archive/refs/tags/0.2.8.tar.gz",
@@ -185,6 +199,13 @@ package = {
             },
         },
         windows = {
+            ["0.2.9"] = {
+                url    = {
+                    GLOBAL = "https://github.com/mcpplibs/os/archive/refs/tags/0.2.9.tar.gz",
+                    CN     = "https://gitcode.com/mcpp-res/os/releases/download/0.2.9/os-0.2.9.tar.gz",
+                },
+                sha256 = "4168f6a1a1608856bfd79b79d8edd46245905baebe57be0c86371a772a967639",
+            },
             ["0.2.8"] = {
                 url    = {
                     GLOBAL = "https://github.com/mcpplibs/os/archive/refs/tags/0.2.8.tar.gz",

tests/examples/os/mcpp.toml

@@ -7,7 +7,7 @@ name    = "os-tests"
 version = "0.1.0"
 
 [dependencies.mcpplibs]
-os = "0.2.8"
+os = "0.2.9"
 
 [indices]
 mcpplibs = { path = "../../.." }