Prepare release 2026.8.29.2

Author: canvascoding

CHANGELOG.md

@@ -11,6 +11,18 @@ This project uses calendar-style release versions, currently `YYYY.M.D.N`.
 
 - Nothing yet.
 
+## [2026.8.29.2] - 2026-08-29
+
+### Fixed
+
+- Fixed release-time dependency installation for Node.js 22 Linux CLI builders.
+- Fixed Postgres URL validation reporting for unsafe encoded passwords.
+- Fixed strict TypeScript fixtures and React Compiler memoization validation in the release build.
+
+### Verification
+
+- `npm run verify:release`
+
 ## [2026.8.29.1] - 2026-08-29
 
 ### Added

THIRD_PARTY_NOTICES.md

@@ -3,9 +3,9 @@
 This file is generated from `package-lock.json`, installed package license files,
 versioned overrides, and the bundled non-npm component inventory.
 
-- Canvas Notebook version: 2026.8.29.1
-- Lockfile SHA-256: `6ebe3df5d9477b003f67aa98bec21387a5aed37e573cda3020e7d0c9ff25f1e6`
-- Distributed components: 1510
+- Canvas Notebook version: 2026.8.29.2
+- Lockfile SHA-256: `def641158bbf31399da057719fc6c4fdea9af65fed2b0dcbf40dcb684b233d82`
+- Distributed components: 1511
 - Release gate: **approved**
 
 Canvas Notebook itself is licensed separately under the root `LICENSE` file.
@@ -495,6 +495,7 @@ Third-party trademarks and branding are not granted by the software licenses bel
 | @swc/core | 1.15.43 | runtime | Apache-2.0 | allowed |
 | @swc/counter | 0.1.3 | runtime | Apache-2.0 | allowed |
 | @swc/helpers | 0.5.15 | runtime | Apache-2.0 | allowed |
+| @swc/helpers | 0.5.23 | runtime | Apache-2.0 | allowed |
 | @swc/types | 0.1.27 | runtime | Apache-2.0 | allowed |
 | @testing-library/dom | 10.4.1 | runtime | MIT | allowed |
 | @testing-library/react | 16.3.2 | runtime | MIT | allowed |
@@ -5134,7 +5135,7 @@ CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
 
 ### License text 21da174fa230
 
-Applies to @swc/core-darwin-arm64@1.15.43, @swc/core-darwin-x64@1.15.43, @swc/core-linux-arm-gnueabihf@1.15.43, @swc/core-linux-arm64-gnu@1.15.43, @swc/core-linux-arm64-musl@1.15.43, @swc/core-linux-ppc64-gnu@1.15.43, @swc/core-linux-s390x-gnu@1.15.43, @swc/core-linux-x64-gnu@1.15.43, @swc/core-linux-x64-musl@1.15.43, @swc/core-win32-arm64-msvc@1.15.43, @swc/core-win32-ia32-msvc@1.15.43, @swc/core-win32-x64-msvc@1.15.43, @swc/core@1.15.43, @swc/counter@0.1.3, @swc/helpers@0.5.15, @swc/types@0.1.27.
+Applies to @swc/core-darwin-arm64@1.15.43, @swc/core-darwin-x64@1.15.43, @swc/core-linux-arm-gnueabihf@1.15.43, @swc/core-linux-arm64-gnu@1.15.43, @swc/core-linux-arm64-musl@1.15.43, @swc/core-linux-ppc64-gnu@1.15.43, @swc/core-linux-s390x-gnu@1.15.43, @swc/core-linux-x64-gnu@1.15.43, @swc/core-linux-x64-musl@1.15.43, @swc/core-win32-arm64-msvc@1.15.43, @swc/core-win32-ia32-msvc@1.15.43, @swc/core-win32-x64-msvc@1.15.43, @swc/core@1.15.43, @swc/counter@0.1.3, @swc/helpers@0.5.15, @swc/helpers@0.5.23, @swc/types@0.1.27.
 
 Copyright notices:
 

docs/compliance/third-party-components.json

@@ -1,15 +1,15 @@
 {
   "schemaVersion": 1,
   "generator": "scripts/generate-third-party-notices.ts",
-  "packageVersion": "2026.8.29.1",
-  "lockfileSha256": "6ebe3df5d9477b003f67aa98bec21387a5aed37e573cda3020e7d0c9ff25f1e6",
+  "packageVersion": "2026.8.29.2",
+  "lockfileSha256": "def641158bbf31399da057719fc6c4fdea9af65fed2b0dcbf40dcb684b233d82",
   "summary": {
-    "totalComponents": 2034,
-    "npmComponents": 2011,
+    "totalComponents": 2035,
+    "npmComponents": 2012,
     "nonNpmComponents": 23,
-    "runtimeComponents": 1510,
+    "runtimeComponents": 1511,
     "developmentOnlyComponents": 524,
-    "allowed": 1984,
+    "allowed": 1985,
     "reviewRequired": 50,
     "blocked": 0,
     "distributedReviewRequired": 0,
@@ -21582,6 +21582,30 @@
       "name": "@swc/helpers",
       "versionOrCommit": "0.5.15",
       "sourceUrl": "https://github.com/swc-project/swc",
+      "packagePathOrArtifact": "node_modules/next/node_modules/@swc/helpers",
+      "usage": "runtime",
+      "distributedIn": [
+        "source-release",
+        "next-server",
+        "docker-image",
+        "electron-web-app"
+      ],
+      "declaredLicense": "Apache-2.0",
+      "verifiedLicense": "Apache-2.0",
+      "licenseTextRef": "node_modules/next/node_modules/@swc/helpers/LICENSE",
+      "licenseTextSha256": "21da174fa23042e1b27dce5a4f691c0340f8df53dbc3e435f2646a9d0ea8c3ec",
+      "copyrightNotices": [
+        "(c) You must retain, in the Source form of any Derivative Works",
+        "Copyright 2024 SWC contributors.",
+        "that You distribute, all copyright, patent, trademark, and"
+      ],
+      "modified": false,
+      "policyDecision": "allowed"
+    },
+    {
+      "name": "@swc/helpers",
+      "versionOrCommit": "0.5.23",
+      "sourceUrl": "https://github.com/swc-project/swc",
       "packagePathOrArtifact": "node_modules/@swc/helpers",
       "usage": "runtime",
       "distributedIn": [

docs/compliance/third-party-license-cache.json

@@ -1,6 +1,6 @@
 {
   "schemaVersion": 6,
-  "lockfileSha256": "6ebe3df5d9477b003f67aa98bec21387a5aed37e573cda3020e7d0c9ff25f1e6",
+  "lockfileSha256": "def641158bbf31399da057719fc6c4fdea9af65fed2b0dcbf40dcb684b233d82",
   "entries": {
     "node_modules/@aws-sdk/credential-provider-http@3.972.70": {
       "packagePath": "node_modules/@aws-sdk/credential-provider-http",

install/bin/canvas-notebook

@@ -1,7 +1,7 @@
 #!/usr/bin/env bash
 set -euo pipefail
 
-CANVAS_CLI_VERSION="2026.8.29.1"
+CANVAS_CLI_VERSION="2026.8.29.2"
 INSTALL_DIR="${CANVAS_INSTALL_DIR:-/opt/canvas-notebook}"
 COMPOSE_FILE="${CANVAS_COMPOSE_FILE:-${INSTALL_DIR}/canvas-notebook-compose.yaml}"
 DATA_DIR="${CANVAS_DATA_DIR:-${HOME:-/opt}/canvas-notebook-data}"

install/lib/commands/database.sh

@@ -468,6 +468,11 @@ _database_reconcile_postgres_auth() (
     return 1
   fi
   if ! CANVAS_ALLOW_POSTGRES_SECRET_GENERATION=false config_json_ensure_postgres_infrastructure_config >/dev/null 2>&1; then
+    local config_validation_error
+    config_validation_error="$(postgres_assert_database_url_matches_runtime 2>&1)" || {
+      _database_reconcile_error preflight "$config_validation_error"
+      return 1
+    }
     _database_reconcile_error preflight "Desired Postgres credentials are incomplete, masked, or inconsistent."
     return 1
   fi

install/lib/shared/output.sh

@@ -3,7 +3,7 @@
 # Sourced by both install/bin/canvas-notebook and install/lib/common.sh
 
 [[ -n "${_SHARED_OUTPUT_LOADED:-}" ]] && return 0
-CANVAS_CLI_VERSION="${CANVAS_CLI_VERSION:-2026.8.29.1}"
+CANVAS_CLI_VERSION="${CANVAS_CLI_VERSION:-2026.8.29.2}"
 _SHARED_OUTPUT_LOADED=1
 
 CANVAS_USE_COLOR="${CANVAS_USE_COLOR:-true}"

package-lock.json

@@ -1,6 +1,6 @@
 {
   "name": "canvas-notebook",
-  "version": "2026.8.29.1",
+  "version": "2026.8.29.2",
   "private": true,
   "license": "SEE LICENSE IN LICENSE",
   "engines": {
@@ -509,6 +509,7 @@
   "devDependencies": {
     "@electric-sql/pglite": "0.5.4",
     "@playwright/test": "^1.61.1",
+    "@swc/helpers": "^0.5.23",
     "@tailwindcss/postcss": "^4",
     "@types/bcryptjs": "^2.4.6",
     "@types/better-sqlite3": "^7.6.13",