From a24f23a2365049a84b84cf530860f957c296d95f Mon Sep 17 00:00:00 2001
From: Ralf Anton Beier <ralf_beier@me.com>
Date: Thu, 16 Jul 2026 18:40:24 +0200
Subject: [PATCH] =?UTF-8?q?chore(release):=20v0.41.2=20=E2=80=94=20stale?=
 =?UTF-8?q?=20reloc.CODE=20offsets=20hard-fail,=20not=20silent=20miscompil?=
 =?UTF-8?q?e?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Ships the #351 soundness backstop (#352, SR-53 verified): meld now hard-fails
with MisalignedReloc when a reloc.CODE memory-address site does not land on a
rebasable immediate (stale/drifted relocs from LEB-relaxation; upstream
pulseengine/wasm-tools#3), instead of silently miscompiling shared-memory fusion.

rivet release status v0.41.2 → cuttable (1 artifact verified).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
---
 CHANGELOG.md | 10 ++++++++++
 Cargo.lock   |  4 ++--
 Cargo.toml   |  2 +-
 3 files changed, 13 insertions(+), 3 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index bbdee4a..f6eebfd 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -4,6 +4,16 @@ All notable changes to this project will be documented in this file.
 
 ## [Unreleased]
 
+## [0.41.2] - 2026-07-16
+
+Soundness patch: stale relocation metadata can no longer silently miscompile
+shared-memory fusion.
+
+**Falsification:** if a producer's drifted `reloc.CODE` site slipped through
+un-rebased again, `test_351_stale_reloc_offsets_hard_error` fails — it fuses the
+exact reproducing components and asserts the hard `MisalignedReloc` at code
+offset 42, while the consistent-reloc oracle still rebases correctly.
+
 ### Fixed
 
 - **Stale `reloc.CODE` offsets no longer silently miscompile shared-memory
diff --git a/Cargo.lock b/Cargo.lock
index 2334794..adc4348 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -1381,7 +1381,7 @@ checksum = "4facc753ae494aeb6e3c22f839b158aebd4f9270f55cd3c79906c45476c47ab4"
 
 [[package]]
 name = "meld-cli"
-version = "0.41.1"
+version = "0.41.2"
 dependencies = [
  "anyhow",
  "clap",
@@ -1396,7 +1396,7 @@ dependencies = [
 
 [[package]]
 name = "meld-core"
-version = "0.41.1"
+version = "0.41.2"
 dependencies = [
  "anyhow",
  "bitflags",
diff --git a/Cargo.toml b/Cargo.toml
index c998eb8..2e13dda 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -10,7 +10,7 @@ exclude = [
 ]
 
 [workspace.package]
-version = "0.41.1"
+version = "0.41.2"
 authors = ["PulseEngine <https://github.com/pulseengine>"]
 edition = "2024"
 license = "Apache-2.0"