Skip to content

Releases, tags and versions

A release is a claim. It says this version exists, this is what changed, and this is what it was tried against. The rule in every repository here is that a claim in a release note has something behind it in the repository that you can run yourself.

The convention is semantic versioning, MAJOR.MINOR.PATCH. Patch for a fix that leaves behaviour alone, minor for something added while existing commands keep working, major for a change that breaks what you depend on. Tags carry the version with a v prefix, and in molo the tag is what publishes: CI builds the macOS .app and .dmg, the Windows executable and the Android APK on every push, then attaches all three to a release on a v* tag.

A licence change is a version boundary and gets recorded as one. Plancia is GPL-3.0-or-later today, and its README states that versions up to 0.2.0 were MIT and stay MIT, so anyone who took an earlier copy knows where they stand.

Four things: what changed, what breaks, what was checked, and what the release does not promise. The fourth is the one usually left out, so here it is in practice, from the repositories themselves.

  • Molo’s builds are unsigned. packaging/sign_and_notarize.sh performs the whole Developer ID flow, and it has not been run end to end, because this machine has no certificate.
  • Molo’s Windows executable and Android APK compile in CI and have never been run on real hardware. Only the macOS build has been launched and used for a full download.
  • Molo verifies the yt-dlp wheel it fetches against the sha256 PyPI publishes. That catches a truncated or corrupted download, the same protection pip gives over HTTPS. It is no signature and would not stop a compromised release.
  • claude-codex-bridge supports the Claude Code 2.1.* and Codex 0.146.* session formats, and every target write is gated on the version. --allow-unsupported-version relaxes the source read gate alone. A note that omits those version prefixes is incomplete, since the tool refuses to run outside them.

If a release claims a check, the check is in the repository

Section titled “If a release claims a check, the check is in the repository”

Under a name you can type, on your own machine, before you trust the build.

repository command what it runs
plancia python3 tools/prova.py eighty two checks in about ten seconds, against a throwaway archive that never touches yours
rada python3 tools/prova.py seventy checks in a couple of seconds, no model and no real memory allocated, including a four hundred round adversarial simulation of the fairness rules
argano pytest and node --test web/lib/*.test.mjs samples built with ffmpeg, broken, repaired and compared against the originals, with frame counts required to match exactly
claude-codex-bridge python3 tools/verify-drift.py --json a live probe of both CLIs, run before a release or an upgrade

Plancia’s suite also runs in CI, in the prova.yml workflow, and contributors turn it on before every push with git config core.hooksPath .githooks. How a plancia release is cut is written down in docs/RILASCIO.md. Molo enforces its one hard limit with a test, so a patch carrying circumvention code fails CI before it reaches anyone’s inbox. The drift probe in claude-codex-bridge consumes two Claude calls and one Codex call and removes only the probe sessions it created, so it runs manually and weekly on a private macOS runner, while standard CI validates its non-networked command surface and never spends quota.

Synced 2026-08-04, eleven repositories.

standard state
README 11 of 11
licence 11 of 11, eight MIT and three GPL-3.0
description 11 of 11
contributing guide 2 of 11, molo and claude-codex-bridge
pull request template 1 of 11, molo
code of conduct 1 of 11, molo
issue template 0 of 11
community health score molo 100, claude-codex-bridge 71, the other nine 42
stars 0, across all eleven

The gap is left visible. Everything a release depends on, a README, a licence and a description, is in place across all eleven. Molo is the only repository carrying the full set of community files. The templates that make an incoming contribution cheaper are missing from nine, and that is the next thing on the list.