ci(links): exclude GitHub stargazers/network-members from link check (#358 )

GitHub returns 404 for /stargazers and /network/members to anonymous clients (anti-scraping); the README social-footer badges link there, so the lychee link check (the non-blocking ci.yml job and the standalone links.yml, both using this config) flagged them as dead. The pages are live in a browser. Exclude them.
fix(deps): bump crossbeam-epoch to 0.9.20 (RUSTSEC-2026-0204) (#359 )
2026-07-08 18:29:05 +02:00 · 2026-07-08 18:08:37 +02:00 · 2026-07-06 12:19:51 +02:00 · 2026-07-05 23:40:03 +02:00 · 2026-07-04 17:24:16 +02:00 · 2026-07-03 18:44:18 +02:00
46 changed files with 10289 additions and 6782 deletions
@@ -23,7 +23,7 @@ runs:
  using: composite
  steps:
    - id: first
-      uses: dtolnay/rust-toolchain@29eef336d9b2848a0b548edc03f92a220660cdb8 # stable branch, 2026-03-27
+      uses: dtolnay/rust-toolchain@29eef336d9b2848a0b548edc03f92a220660cdb8 # zizmor: ignore[impostor-commit] pinned to the stable-tag SHA (2026-03-27); tag-pinned, not a branch commit
      continue-on-error: true
      with:
        toolchain: ${{ inputs.toolchain }}
@@ -39,7 +39,7 @@ runs:
    - name: Retry the Rust toolchain install
      if: steps.first.outcome == 'failure'
-      uses: dtolnay/rust-toolchain@29eef336d9b2848a0b548edc03f92a220660cdb8 # stable branch, 2026-03-27
+      uses: dtolnay/rust-toolchain@29eef336d9b2848a0b548edc03f92a220660cdb8 # zizmor: ignore[impostor-commit] pinned to the stable-tag SHA (2026-03-27); tag-pinned, not a branch commit
      with:
        toolchain: ${{ inputs.toolchain }}
        components: ${{ inputs.components }}
@@ -10,9 +10,22 @@ updates:
      default-days: 7
    commit-message:
      prefix: "deps(cargo)"
    # ureq is intentionally pinned to 2.x. ureq 3 unconditionally pulls
    # webpki-root-certs (CDLA-Permissive-2.0); the native-tls / OS-trust-store
    # setup in wickra-data deliberately avoids that licence. Block the major
    # bump (2.x patch/minor still flow through).
    ignore:
      - dependency-name: "ureq"
        update-types: ["version-update:semver-major"]
    groups:
      # napi-rs (napi / napi-derive / napi-build) is a coordinated major
      # migration that must move with @napi-rs/cli on the npm side — keep it in
      # its own PR rather than bundled with unrelated crate bumps.
      napi:
        patterns: ["napi", "napi-derive", "napi-build"]
      cargo:
        patterns: ["*"]
        exclude-patterns: ["napi", "napi-derive", "napi-build"]
  # Node binding npm dependencies.
  - package-ecosystem: npm
@@ -48,7 +48,7 @@ jobs:
    name: Cross-library benchmark report
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
        with:
          persist-credentials: false
@@ -61,7 +61,7 @@ jobs:
      - name: Set up Python
        id: setup_python
        continue-on-error: true
-        uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
+        uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0
        with:
          python-version: "3.11"
          cache: pip
@@ -76,7 +76,7 @@ jobs:
      - name: Set up Python (retry)
        if: steps.setup_python.outcome == 'failure'
-        uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
+        uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0
        with:
          python-version: "3.11"
          cache: pip
@@ -122,7 +122,7 @@ jobs:
    name: Rust cross-library benchmark report
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
        with:
          persist-credentials: false
@@ -40,7 +40,7 @@ jobs:
      matrix:
        os: [ubuntu-latest, macos-latest, windows-latest]
    steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
        with:
          persist-credentials: false
@@ -107,7 +107,7 @@ jobs:
    runs-on: ubuntu-latest
    timeout-minutes: 30 # backstop: cap a wedged job instead of GitHub's 6h default (headroom for slow registry/package installs)
    steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
        with:
          persist-credentials: false
@@ -134,7 +134,7 @@ jobs:
      - name: Set up Python
        id: setup_python
        continue-on-error: true
-        uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
+        uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0
        with:
          python-version: "3.12"
@@ -147,7 +147,7 @@ jobs:
      - name: Set up Python (retry)
        if: steps.setup_python.outcome == 'failure'
-        uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
+        uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0
        with:
          python-version: "3.12"
@@ -197,7 +197,7 @@ jobs:
    runs-on: ubuntu-latest
    timeout-minutes: 30 # backstop: cap a wedged job instead of GitHub's 6h default (headroom for slow registry/package installs)
    steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
        with:
          persist-credentials: false
@@ -209,7 +209,7 @@ jobs:
      - name: Set up Python
        id: setup_python
        continue-on-error: true
-        uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
+        uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0
        with:
          python-version: "3.12"
@@ -222,7 +222,7 @@ jobs:
      - name: Set up Python (retry)
        if: steps.setup_python.outcome == 'failure'
-        uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
+        uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0
        with:
          python-version: "3.12"
@@ -291,7 +291,7 @@ jobs:
            toolchain: "1.88"
            packages: "-p wickra-node"
    steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
        with:
          persist-credentials: false
@@ -330,7 +330,7 @@ jobs:
    runs-on: ubuntu-latest
    timeout-minutes: 30 # backstop: cap a wedged job instead of GitHub's 6h default (headroom for slow registry/package installs)
    steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
        with:
          persist-credentials: false
@@ -345,7 +345,7 @@ jobs:
        timeout-minutes: 6
      - name: Install cargo-llvm-cov
-        uses: taiki-e/install-action@7a79fe8c3a13344501c80d99cae481c1c9085912 # v2.81.10
+        uses: taiki-e/install-action@bffeee26d4db9be238a4ea78d8826604ebcb594d # v2.82.5
        timeout-minutes: 10 # fail fast on a stuck download instead of hanging the job
        with:
          tool: cargo-llvm-cov
@@ -372,7 +372,7 @@ jobs:
    runs-on: ubuntu-latest
    timeout-minutes: 30 # backstop: cap a wedged job instead of GitHub's 6h default (headroom for slow registry/package installs)
    steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
        with:
          persist-credentials: false
@@ -391,7 +391,7 @@ jobs:
    runs-on: ubuntu-latest
    timeout-minutes: 30 # backstop: cap a wedged job instead of GitHub's 6h default (headroom for slow registry/package installs)
    steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
        with:
          persist-credentials: false
@@ -415,7 +415,7 @@ jobs:
        # attributes the modern nightly compiler rejects, so the install
        # never gets off the ground. The prebuilt binary avoids the entire
        # transitive-dep compile.
-        uses: taiki-e/install-action@7a79fe8c3a13344501c80d99cae481c1c9085912 # v2.81.10
+        uses: taiki-e/install-action@bffeee26d4db9be238a4ea78d8826604ebcb594d # v2.82.5
        timeout-minutes: 10 # fail fast on a stuck download instead of hanging the job
        with:
          tool: cargo-fuzz
@@ -450,7 +450,7 @@ jobs:
        os: [ubuntu-latest, macos-latest, windows-latest]
        python-version: ["3.9", "3.11", "3.12", "3.13"]
    steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
        with:
          persist-credentials: false
@@ -470,7 +470,7 @@ jobs:
      - name: Set up Python
        id: setup_python
        continue-on-error: true
-        uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
+        uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0
        with:
          python-version: ${{ matrix.python-version }}
          cache: pip
@@ -485,7 +485,7 @@ jobs:
      - name: Set up Python (retry)
        if: steps.setup_python.outcome == 'failure'
-        uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
+        uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0
        with:
          python-version: ${{ matrix.python-version }}
          cache: pip
@@ -527,7 +527,7 @@ jobs:
    runs-on: ubuntu-latest
    timeout-minutes: 30 # backstop: cap a wedged job instead of GitHub's 6h default (headroom for slow registry/package installs)
    steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
        with:
          persist-credentials: false
@@ -549,7 +549,7 @@ jobs:
        # same taiki-e prebuilt-binary installer we already use for
        # cargo-llvm-cov and cargo-fuzz; it tracks the latest wasm-pack
        # release, which has `--features` as a top-level flag (since 0.12).
-        uses: taiki-e/install-action@7a79fe8c3a13344501c80d99cae481c1c9085912 # v2.81.10
+        uses: taiki-e/install-action@bffeee26d4db9be238a4ea78d8826604ebcb594d # v2.82.5
        timeout-minutes: 10 # fail fast on a stuck download instead of hanging the job
        with:
          tool: wasm-pack
@@ -582,7 +582,7 @@ jobs:
        os: [ubuntu-latest, macos-latest, windows-latest]
        node-version: ["22", "24"]
    steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
        with:
          persist-credentials: false
@@ -663,7 +663,7 @@ jobs:
      matrix:
        os: [ubuntu-latest, macos-latest, windows-latest]
    steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
        with:
          persist-credentials: false
@@ -676,7 +676,7 @@ jobs:
        timeout-minutes: 6
      - name: Install cbindgen
-        uses: taiki-e/install-action@7a79fe8c3a13344501c80d99cae481c1c9085912 # v2.81.10
+        uses: taiki-e/install-action@bffeee26d4db9be238a4ea78d8826604ebcb594d # v2.82.5
        timeout-minutes: 10 # fail fast on a stuck download instead of hanging the job
        with:
          tool: cbindgen
@@ -719,7 +719,7 @@ jobs:
      matrix:
        os: [ubuntu-latest, macos-latest, windows-latest]
    steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
        with:
          persist-credentials: false
@@ -735,7 +735,7 @@ jobs:
      # local store instead of hitting nuget.org every run. No packages.lock.json
      # exists, so key on the project files; never block the job on a slow restore.
      - name: Cache NuGet packages
-        uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5
+        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
        continue-on-error: true
        timeout-minutes: 6
        with:
@@ -792,7 +792,7 @@ jobs:
      matrix:
        os: [ubuntu-latest, macos-latest, windows-latest]
    steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
        with:
          persist-credentials: false
@@ -802,7 +802,7 @@ jobs:
      - name: Set up Go
        id: setup-go
        continue-on-error: true
-        uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
+        uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0
        with:
          go-version: "stable"
          cache: false
@@ -816,7 +816,7 @@ jobs:
      - name: Set up Go (retry)
        if: steps.setup-go.outcome == 'failure'
-        uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0
+        uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0
        with:
          go-version: "stable"
          cache: false
@@ -918,7 +918,7 @@ jobs:
      WICKRA_INCLUDE_DIR: ${{ github.workspace }}/bindings/c/include
      WICKRA_LIB_DIR: ${{ github.workspace }}/target/release
    steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
        with:
          persist-credentials: false
@@ -937,7 +937,7 @@ jobs:
        run: cargo build -p wickra-c --release
      - name: Set up R
-        uses: r-lib/actions/setup-r@a51a8012b0aab7c32ef9d19bf54da93f3254335e # v2
+        uses: r-lib/actions/setup-r@d3c5be51b12e724e68f33216ca3c148b66d5f0b6 # v2
        with:
          r-version: "release"
          use-public-rspm: true
@@ -947,7 +947,7 @@ jobs:
      # compiling testthat / knitr and their deps from source — the slow, flaky
      # path that previously blew past the job timeout on the ubuntu runner.
      - name: Install R dependencies (cached binaries)
-        uses: r-lib/actions/setup-r-dependencies@a51a8012b0aab7c32ef9d19bf54da93f3254335e # v2
+        uses: r-lib/actions/setup-r-dependencies@d3c5be51b12e724e68f33216ca3c148b66d5f0b6 # v2
        with:
          working-directory: bindings/r
          extra-packages: |
@@ -1029,7 +1029,7 @@ jobs:
      matrix:
        os: [ubuntu-latest, macos-latest, windows-latest]
    steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
        with:
          persist-credentials: false
@@ -1052,7 +1052,7 @@ jobs:
      - name: Set up JDK 25
        id: setup-java
        continue-on-error: true
-        uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
+        uses: actions/setup-java@1bcf9fb12cf4aa7d266a90ae39939e61372fe520 # v5.4.0
        with:
          distribution: temurin
          java-version: "25"
@@ -1067,7 +1067,7 @@ jobs:
      - name: Set up JDK 25 (retry)
        if: steps.setup-java.outcome == 'failure'
-        uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
+        uses: actions/setup-java@1bcf9fb12cf4aa7d266a90ae39939e61372fe520 # v5.4.0
        with:
          distribution: temurin
          java-version: "25"
@@ -1120,7 +1120,7 @@ jobs:
      matrix:
        manylinux: [auto, musllinux_1_2]
    steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
        with:
          persist-credentials: false
@@ -1146,3 +1146,22 @@ jobs:
  # (.github/workflows/bench.yml) — see audit finding R10. It runs nightly
  # at 03:00 UTC and on-demand via `workflow_dispatch`, and is no longer on
  # the every-push / every-PR critical path.
  # Non-blocking external-link heads-up on PRs. The authoritative check is the
  # scheduled links.yml; here it only surfaces link rot early without ever
  # gating a PR — external sites flake (rate limits, transient outages, moves),
  # so `continue-on-error` keeps a third-party hiccup from blocking the merge.
  # Redirects are reported as warnings (lychee only fails on hard errors).
  links:
    name: External links (non-blocking)
    runs-on: ubuntu-latest
    continue-on-error: true
    timeout-minutes: 10
    steps:
      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
        with:
          persist-credentials: false
      - uses: lycheeverse/lychee-action@8646ba30535128ac92d33dfc9133794bfdd9b411 # v2
        with:
          args: --config lychee.toml --no-progress --root-dir "${{ github.workspace }}" "*.md" "bindings/*/README.md"
          fail: true
@@ -40,7 +40,7 @@ jobs:
            build-mode: none
    steps:
      - name: Checkout
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
        with:
          persist-credentials: false
@@ -0,0 +1,28 @@
 name: Link check
 # External link rot is non-deterministic (third-party sites go down, rate-limit,
 # or move), so the authoritative check runs on a weekly schedule and on demand
 # rather than gating PRs or releases. ci.yml additionally runs a non-blocking
 # lychee job on PRs for an early heads-up (continue-on-error), and release.yml is
 # deliberately NOT gated on it — a transient external outage must never block an
 # irreversible publish.
 on:
  schedule:
    - cron: "0 6 * * 1" # Mondays 06:00 UTC
  workflow_dispatch:
 permissions:
  contents: read
 jobs:
  links:
    name: External links (lychee)
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
        with:
          persist-credentials: false
      - uses: lycheeverse/lychee-action@8646ba30535128ac92d33dfc9133794bfdd9b411 # v2
        with:
          args: --config lychee.toml --no-progress --root-dir "${{ github.workspace }}" "*.md" "bindings/*/README.md"
          fail: true
@@ -46,7 +46,7 @@ jobs:
    # Settings -> Environments.
    environment: release
    steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
        with:
          persist-credentials: false
      - uses: ./.github/actions/setup-rust
@@ -111,7 +111,7 @@ jobs:
      # consumers can audit the published dependency tree without
      # re-resolving Cargo.lock.
      - name: Install cargo-cyclonedx
-        uses: taiki-e/install-action@7a79fe8c3a13344501c80d99cae481c1c9085912 # v2.81.10
+        uses: taiki-e/install-action@bffeee26d4db9be238a4ea78d8826604ebcb594d # v2.82.5
        timeout-minutes: 10 # fail fast on a stuck download instead of hanging the job
        with:
          tool: cargo-cyclonedx
@@ -159,13 +159,13 @@ jobs:
          - { os: windows-11-arm, target: aarch64, manylinux: auto }
    runs-on: ${{ matrix.os }}
    steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
        with:
          persist-credentials: false
      - name: Set up Python
        id: setup_python
        continue-on-error: true
-        uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
+        uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0
        with:
          python-version: "3.11"
      - name: Wait before Python retry
@@ -176,7 +176,7 @@ jobs:
          sleep 30
      - name: Set up Python (retry)
        if: steps.setup_python.outcome == 'failure'
-        uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
+        uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0
        with:
          python-version: "3.11"
      - name: Sync root README into bindings/python so it ships with the wheel
@@ -214,7 +214,7 @@ jobs:
    timeout-minutes: 45 # backstop only: release build/publish jobs compile from source (vendored OpenSSL) and must not be killed mid-build; far above the ~10 min real runtime
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
        with:
          persist-credentials: false
      - name: Sync root README into bindings/python so it ships in the sdist
@@ -268,7 +268,7 @@ jobs:
          - { host: windows-11-arm, target: aarch64-pc-windows-msvc }
    runs-on: ${{ matrix.host }}
    steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
        with:
          persist-credentials: false
@@ -335,7 +335,7 @@ jobs:
      contents: read
      id-token: write
    steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
        with:
          persist-credentials: false
@@ -381,7 +381,8 @@ jobs:
      # drop the freshly built .node binary into the matching directory.
      - name: Move binaries into platform package layout
        working-directory: bindings/node
-        run: npx napi artifacts --dir artifacts
+        # napi-rs CLI 3 renamed `--dir` to `--output-dir` (`-d`).
        run: npx napi artifacts --output-dir artifacts
      # Publish each platform package individually. Skip versions that are
      # already on npm. A first-attempt 403 from npm's spam filter is
@@ -510,7 +511,7 @@ jobs:
      contents: read
      id-token: write
    steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
        with:
          persist-credentials: false
@@ -547,7 +548,7 @@ jobs:
      - name: Install wasm-pack (latest, via prebuilt binary)
        # See the matching note in ci.yml: jetli's default installs an old
        # 0.10.x wasm-pack whose build subcommand rejects --features.
-        uses: taiki-e/install-action@7a79fe8c3a13344501c80d99cae481c1c9085912 # v2.81.10
+        uses: taiki-e/install-action@bffeee26d4db9be238a4ea78d8826604ebcb594d # v2.82.5
        timeout-minutes: 10 # fail fast on a stuck download instead of hanging the job
        with:
          tool: wasm-pack
@@ -624,7 +625,7 @@ jobs:
          - { host: windows-11-arm, target: aarch64-pc-windows-msvc }
    runs-on: ${{ matrix.host }}
    steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
        with:
          persist-credentials: false
@@ -675,7 +676,7 @@ jobs:
      contents: read
      id-token: write # request the GitHub OIDC token for trusted publishing
    steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
        with:
          persist-credentials: false
@@ -763,7 +764,7 @@ jobs:
    runs-on: ubuntu-latest
    environment: release
    steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
        with:
          persist-credentials: false
@@ -803,7 +804,7 @@ jobs:
      # setup-java writes a settings.xml with the 'central' server credentials
      # (mapped from the env vars below) and imports the GPG signing key.
      - name: Set up JDK 25 + Maven Central credentials + GPG
-        uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
+        uses: actions/setup-java@1bcf9fb12cf4aa7d266a90ae39939e61372fe520 # v5.4.0
        with:
          distribution: temurin
          java-version: "25"
@@ -834,7 +835,7 @@ jobs:
    needs: c-abi-build
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
        with:
          persist-credentials: false
@@ -925,7 +926,7 @@ jobs:
      tag: ${{ steps.tag.outputs.tag }}
      version: ${{ steps.tag.outputs.version }}
    steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
        with:
          persist-credentials: false
          fetch-depth: 0
@@ -979,7 +980,7 @@ jobs:
          echo "asset-count=$(ls release-assets/ | wc -l)"
      - name: Create / update the draft GitHub Release with assets
-        uses: softprops/action-gh-release@b4309332981a82ec1c5618f44dd2e27cc8bfbfda # v3.0.0
+        uses: softprops/action-gh-release@718ea10b132b3b2eba29c1007bb80653f286566b # v3.0.1
        with:
          tag_name: ${{ steps.tag.outputs.tag }}
          name: Wickra ${{ steps.tag.outputs.tag }}
@@ -1075,7 +1076,7 @@ jobs:
          merge-multiple: true
      - name: Attest build provenance
        id: attest
-        uses: actions/attest-build-provenance@a2bbfa25375fe432b6a289bc6b6cd05ecd0c4c32 # v4.1.0
+        uses: actions/attest-build-provenance@0f67c3f4856b2e3261c31976d6725780e5e4c373 # v4.1.1
        with:
          subject-path: |
            artifacts/crates/*.crate
@@ -24,7 +24,7 @@ jobs:
      id-token: write # OIDC token to publish results to the OpenSSF API
    steps:
      - name: Checkout code
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
        with:
          persist-credentials: false
@@ -93,7 +93,7 @@ jobs:
      # Fetching the now-gone `refs/heads/<branch>` then fails the run (exit 1).
      # The head SHA stays reachable via `refs/pull/N/head` after the branch is
      # gone, so the checkout — and the run — survives an instant merge.
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
        with:
          fetch-depth: 1
          ref: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.sha || github.ref }}
@@ -14,10 +14,10 @@ jobs:
    name: metadata audit
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
        with:
          persist-credentials: false
-      - uses: actions/setup-python@a309ff8b426b58ec0e2a45f0f869d46889d02405 # v6.2.0
+      - uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0
        with:
          python-version: "3.12"
      - name: Audit repo-metadata.toml drift
@@ -32,9 +32,9 @@ jobs:
      actions: read # online audits resolve referenced actions
    steps:
      - name: Checkout
-        uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
        with:
          persist-credentials: false
      - name: Run zizmor
-        uses: zizmorcore/zizmor-action@5f14fd08f7cf1cb1609c1e344975f152c7ee938d # v0.5.6
+        uses: zizmorcore/zizmor-action@192e21d79ab29983730a13d1382995c2307fbcaa # v0.5.7
@@ -7,6 +7,35 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ## [Unreleased]
 ## [0.9.9] - 2026-06-28
 Maintenance release. No library or binding code changes from `0.9.8`; this
 re-release simply runs through the corrected release workflow (the `0.9.8` npm
 publish required a hotfix to the napi-rs 3 `napi artifacts` invocation, now in
 place), so the published `0.9.9` artifacts are byte-identical to `0.9.8`.
 ## [0.9.8] - 2026-06-28
 Maintenance release. The library API and every indicator are unchanged from
 `0.9.7`; this release migrates the Node.js binding's build to napi-rs 3 and
 carries routine dependency and CI tooling updates.
 ### Changed
 - **Node binding built with napi-rs 3.** Migrate `napi` 2.16 → 3.9, `napi-derive`
  2.16 → 3.5 (Rust) and `@napi-rs/cli` 2.18 → 3.7 (npm). The published API and
  every computed value are unchanged — the generated TypeScript surface is
  identical (626 symbols), only the code-generation format differs. napi 3's
  derive macros emit `#[allow(unsafe_code)]`, so the Node crate's `unsafe_code`
  lint is relaxed from the workspace `forbid` to `deny` for that crate only;
  `forbid` stays in force for every other crate. The `engines.node` floor is
  raised to `>= 22` (matching the CI test matrix). `ureq` is intentionally held
  at 2.x — ureq 3 unconditionally pulls `webpki-root-certs` (CDLA-Permissive-2.0),
  which the native-tls / OS-trust-store setup deliberately avoids.
 - **Dependency and CI housekeeping.** Bump the Maven
  `central-publishing-maven-plugin` and the GitHub Actions used by CI
  (`actions/checkout`, `taiki-e/install-action`, `actions/setup-java`,
  `softprops/action-gh-release`). No runtime code changes.
 ## [0.9.7] - 2026-06-21
 Maintenance release. The library API and every indicator are unchanged from
@@ -1893,7 +1922,9 @@ public API changes.
  optional Binance live feed.
 - Bindings for Python, Node.js, and WebAssembly.
-[Unreleased]: https://github.com/wickra-lib/wickra/compare/v0.9.7...HEAD
+[Unreleased]: https://github.com/wickra-lib/wickra/compare/v0.9.9...HEAD
 [0.9.9]: https://github.com/wickra-lib/wickra/compare/v0.9.8...v0.9.9
 [0.9.8]: https://github.com/wickra-lib/wickra/compare/v0.9.7...v0.9.8
 [0.9.7]: https://github.com/wickra-lib/wickra/compare/v0.9.6...v0.9.7
 [0.9.6]: https://github.com/wickra-lib/wickra/compare/v0.9.5...v0.9.6
 [0.9.5]: https://github.com/wickra-lib/wickra/compare/v0.9.4...v0.9.5
@@ -198,9 +198,9 @@ dependencies = [
 [[package]]
 name = "convert_case"
-version = "0.6.0"
+version = "0.11.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ec182b0ca2f35d8fc196cf3404988fd8b8c739a4d270ff118a398feb0cbec1ca"
+checksum = "affbf0190ed2caf063e3def54ff444b449371d55c58e513a95ab98eca50adb49"
 dependencies = [
 "unicode-segmentation",
 ]
@@ -277,9 +277,9 @@ dependencies = [
 [[package]]
 name = "crossbeam-epoch"
-version = "0.9.18"
+version = "0.9.20"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5b82ac4a3c2ca9c3460964f020e1402edd5753411d7737aa39c3714ad1b5420e"
+checksum = "2d6914041f254d6e9176c01941b21115dcfb7089e55135a35411081bd106ef3f"
 dependencies = [
 "crossbeam-utils",
 ]
@@ -329,13 +329,9 @@ dependencies = [
 [[package]]
 name = "ctor"
-version = "0.2.9"
+version = "1.0.7"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "32a2785755761f3ddc1492979ce1e48d2c00d09311c39e4466429188f3dd6501"
+checksum = "01334b89b69ff726750c5ce5073fc8bd860e99aa9a8fc5ca11b04730e3aee97a"
 dependencies = [
 "quote",
 "syn",
 ]
 [[package]]
 name = "data-encoding"
@@ -428,12 +424,54 @@ dependencies = [
 "percent-encoding",
 ]
 [[package]]
 name = "futures"
 version = "0.3.32"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "8b147ee9d1f6d097cef9ce628cd2ee62288d963e16fb287bd9286455b241382d"
 dependencies = [
 "futures-channel",
 "futures-core",
 "futures-executor",
 "futures-io",
 "futures-sink",
 "futures-task",
 "futures-util",
 ]
 [[package]]
 name = "futures-channel"
 version = "0.3.32"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "07bbe89c50d7a535e539b8c17bc0b49bdb77747034daa8087407d655f3f7cc1d"
 dependencies = [
 "futures-core",
 "futures-sink",
 ]
 [[package]]
 name = "futures-core"
 version = "0.3.32"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "7e3450815272ef58cec6d564423f6e755e25379b217b0bc688e295ba24df6b1d"
 [[package]]
 name = "futures-executor"
 version = "0.3.32"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "baf29c38818342a3b26b5b923639e7b1f4a61fc5e76102d4b1981c6dc7a7579d"
 dependencies = [
 "futures-core",
 "futures-task",
 "futures-util",
 ]
 [[package]]
 name = "futures-io"
 version = "0.3.32"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "cecba35d7ad927e23624b22ad55235f2239cfa44fd10428eecbeba6d6a717718"
 [[package]]
 name = "futures-macro"
 version = "0.3.32"
@@ -463,10 +501,13 @@ version = "0.3.32"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "389ca41296e6190b48053de0321d02a77f32f8a5d2461dd38762c0593805c6d6"
 dependencies = [
 "futures-channel",
 "futures-core",
 "futures-io",
 "futures-macro",
 "futures-sink",
 "futures-task",
 "memchr",
 "pin-project-lite",
 "slab",
 ]
@@ -690,9 +731,9 @@ checksum = "68ab91017fe16c622486840e4c83c9a37afeff978bd239b5293d61ece587de66"
 [[package]]
 name = "libloading"
-version = "0.8.9"
+version = "0.9.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d7c4b02199fee7c5d21a5ae7d8cfa79a6ef5bb2fc834d6e9058e89c825efdc55"
+checksum = "754ca22de805bb5744484a5b151a9e1a8e837d5dc232c2d7d8c2e3492edc8b60"
 dependencies = [
 "cfg-if",
 "windows-link",
@@ -751,15 +792,17 @@ dependencies = [
 [[package]]
 name = "napi"
-version = "2.16.17"
+version = "3.9.4"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "55740c4ae1d8696773c78fdafd5d0e5fe9bc9f1b071c7ba493ba5c413a9184f3"
+checksum = "b41bda2ac390efb5e8d22025d925ccc3f3807d8c1bea6d19b36127247c4b8f83"
 dependencies = [
 "bitflags",
 "ctor",
- "napi-derive",
+ "futures",
 "napi-build",
 "napi-sys",
- "once_cell",
+ "nohash-hasher",
 "rustc-hash",
 ]
 [[package]]
@@ -770,12 +813,12 @@ checksum = "c9c366d2c8c60b86fa632df75f745509b52f9128f91a6bad4c796e44abb505e1"
 [[package]]
 name = "napi-derive"
-version = "2.16.13"
+version = "3.5.7"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7cbe2585d8ac223f7d34f13701434b9d5f4eb9c332cccce8dee57ea18ab8ab0c"
+checksum = "61d66f70256ad5aef58659966064471d0ad90e2897bc36a5a5e0389c85aabc1e"
 dependencies = [
 "cfg-if",
 "convert_case",
 "ctor",
 "napi-derive-backend",
 "proc-macro2",
 "quote",
@@ -784,24 +827,22 @@ dependencies = [
 [[package]]
 name = "napi-derive-backend"
-version = "1.0.75"
+version = "5.0.5"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1639aaa9eeb76e91c6ae66da8ce3e89e921cd3885e99ec85f4abacae72fc91bf"
+checksum = "81b4b08f15eed7a2a20c3f4c6314013fc3ac890a3afa9892b594485299ebdb2d"
 dependencies = [
 "convert_case",
 "once_cell",
 "proc-macro2",
 "quote",
 "regex",
 "semver",
 "syn",
 ]
 [[package]]
 name = "napi-sys"
-version = "2.4.0"
+version = "3.2.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "427802e8ec3a734331fec1035594a210ce1ff4dc5bc1950530920ab717964ea3"
+checksum = "1f5bcdf71abd3a50d00b49c1c2c75251cb3c913777d6139cd37dabc093a5e400"
 dependencies = [
 "libloading",
 ]
@@ -823,6 +864,12 @@ dependencies = [
 "tempfile",
 ]
 [[package]]
 name = "nohash-hasher"
 version = "0.2.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "2bf50223579dc7cdcfb3bfcacf7069ff68243f8c363f62ffa99cf000a6b9c451"
 [[package]]
 name = "nu-ansi-term"
 version = "0.50.3"
@@ -1211,6 +1258,12 @@ version = "0.8.10"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "dc897dd8d9e8bd1ed8cdad82b5966c3e0ecae09fb1907d58efaa013543185d0a"
 [[package]]
 name = "rustc-hash"
 version = "2.1.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "94300abf3f1ae2e2b8ffb7b58043de3d399c73fa6f4b73826402a5c457614dbe"
 [[package]]
 name = "rustix"
 version = "1.1.4"
@@ -1785,7 +1838,7 @@ dependencies = [
 [[package]]
 name = "wickra"
-version = "0.9.7"
+version = "0.9.9"
 dependencies = [
 "approx",
 "criterion",
@@ -1796,7 +1849,7 @@ dependencies = [
 [[package]]
 name = "wickra-bench"
-version = "0.9.7"
+version = "0.9.9"
 dependencies = [
 "criterion",
 "kand",
@@ -1808,7 +1861,7 @@ dependencies = [
 [[package]]
 name = "wickra-c"
-version = "0.9.7"
+version = "0.9.9"
 dependencies = [
 "tokio",
 "wickra-core",
@@ -1817,7 +1870,7 @@ dependencies = [
 [[package]]
 name = "wickra-core"
-version = "0.9.7"
+version = "0.9.9"
 dependencies = [
 "approx",
 "proptest",
@@ -1827,7 +1880,7 @@ dependencies = [
 [[package]]
 name = "wickra-data"
-version = "0.9.7"
+version = "0.9.9"
 dependencies = [
 "approx",
 "csv",
@@ -1846,7 +1899,7 @@ dependencies = [
 [[package]]
 name = "wickra-examples"
-version = "0.9.7"
+version = "0.9.9"
 dependencies = [
 "serde_json",
 "tokio",
@@ -1856,7 +1909,7 @@ dependencies = [
 [[package]]
 name = "wickra-node"
-version = "0.9.7"
+version = "0.9.9"
 dependencies = [
 "napi",
 "napi-build",
@@ -1868,7 +1921,7 @@ dependencies = [
 [[package]]
 name = "wickra-python"
-version = "0.9.7"
+version = "0.9.9"
 dependencies = [
 "bytemuck",
 "pyo3",
@@ -1879,7 +1932,7 @@ dependencies = [
 [[package]]
 name = "wickra-wasm"
-version = "0.9.7"
+version = "0.9.9"
 dependencies = [
 "console_error_panic_hook",
 "js-sys",
@@ -14,7 +14,7 @@ members = [
 exclude = ["fuzz"]
 [workspace.package]
-version = "0.9.7"
+version = "0.9.9"
 authors = ["kingchenc <support@wickra.org>"]
 edition = "2021"
 rust-version = "1.86"
@@ -26,8 +26,8 @@ keywords = ["finance", "trading", "indicators", "technical-analysis", "ta"]
 categories = ["finance", "mathematics", "science"]
 [workspace.dependencies]
-wickra-core = { path = "crates/wickra-core", version = "0.9.7" }
+wickra-core = { path = "crates/wickra-core", version = "0.9.9" }
-wickra-data = { path = "crates/wickra-data", version = "0.9.7" }
+wickra-data = { path = "crates/wickra-data", version = "0.9.9" }
 thiserror = "2"
 rayon = "1.10"
@@ -18,10 +18,17 @@
 [![OpenSSF Best Practices](https://raw.githubusercontent.com/wickra-lib/.github/main/profile/badges/best-practices.svg)](https://www.bestpractices.dev/projects/13094)
 [![Build provenance](https://raw.githubusercontent.com/wickra-lib/.github/main/profile/badges/provenance.svg)](https://github.com/wickra-lib/wickra/attestations)
 [![Docs](https://raw.githubusercontent.com/wickra-lib/.github/main/profile/badges/docs.svg)](https://docs.wickra.org)
 [![Live demo](https://img.shields.io/badge/live%20demo-live.wickra.org-3b82f6)](https://live.wickra.org)
 [![Verified across 10 languages](https://raw.githubusercontent.com/wickra-lib/.github/main/profile/badges/verified.svg)](https://docs.wickra.org/FAQ#do-all-the-language-bindings-compute-the-same-values)
 ---
 **Streaming-first technical indicators. Install with `pip install wickra` — no system dependencies, zero third-party packages.**
 > **▶ Live demo:** all 514 indicators over real Binance market data, computed live in your browser — **[live.wickra.org](https://live.wickra.org)** · zero backend, powered by `wickra-wasm`.
 **Part of the [Wickra ecosystem](#ecosystem):** the same data-driven core and ten-language binding surface also power [wickra-exchange](https://github.com/wickra-lib/wickra-exchange), [wickra-backtest](https://github.com/wickra-lib/wickra-backtest), [wickra-terminal](https://github.com/wickra-lib/wickra-terminal), [wickra-screener](https://github.com/wickra-lib/wickra-screener), [wickra-xray](https://github.com/wickra-lib/wickra-xray), [wickra-radar](https://github.com/wickra-lib/wickra-radar), [wickra-copilot](https://github.com/wickra-lib/wickra-copilot) and [wickra-shazam](https://github.com/wickra-lib/wickra-shazam).
 Wickra is a multi-language technical-analysis library with a Rust core and
 native bindings for Python, Node.js and WASM, plus a C ABI that C, C++,
 C#, Go, Java, R and any other C-capable language links against. Every indicator is a
@@ -435,6 +442,22 @@ order-book, trade, profile, alt-chart bars, footprint). This catches FFI wiring
 bugs the math-only core tests cannot see — it has already found and fixed real
 cross-language marshalling bugs in the Java and R bindings.
 ## Ecosystem
 Wickra is the core library. The same data-driven core + ten-language binding
 pattern powers a family of products built on it:
 - [**wickra-exchange**](https://github.com/wickra-lib/wickra-exchange) — unified market-data + execution across ten crypto exchanges
 - [**wickra-backtest**](https://github.com/wickra-lib/wickra-backtest) — event-driven backtester over the Wickra core
 - [**wickra-terminal**](https://github.com/wickra-lib/wickra-terminal) — the trading terminal: a TUI and a browser renderer over the stack
 - [**wickra-screener**](https://github.com/wickra-lib/wickra-screener) — parallel multi-symbol screening over 514 streaming indicators
 - [**wickra-xray**](https://github.com/wickra-lib/wickra-xray) — market-microstructure explorer: footprint, order-book heatmap, liquidation map, funding/OI divergence
 - [**wickra-radar**](https://github.com/wickra-lib/wickra-radar) — perp-universe alert radar: OI delta, funding flip, book imbalance, liquidation clusters, OI/price divergence
 - [**wickra-copilot**](https://github.com/wickra-lib/wickra-copilot) — local market copilot grounded in real order-book, liquidation and funding microstructure
 - [**wickra-shazam**](https://github.com/wickra-lib/wickra-shazam) — match an asset's current microstructure fingerprint against its entire history
 Docs live at [docs.wickra.org](https://docs.wickra.org) ([wickra-docs](https://github.com/wickra-lib/wickra-docs)); the marketing site and in-browser demo at [wickra.org](https://wickra.org) ([webpage](https://github.com/wickra-lib/webpage)).
 ## Contributing
 Contributions are very welcome — issues, bug reports, ideas, and pull requests
@@ -507,6 +530,6 @@ The library is provided **as is**, without warranty of any kind; see
 <p align="center">
  <a href="https://star-history.com/#wickra-lib/wickra&Date">
    <img alt="Wickra star history" width="640"
-         src="https://raw.githubusercontent.com/wickra-lib/.github/main/profile/badges/star-history.svg">
+         src="https://raw.githubusercontent.com/wickra-lib/.github/main/profile/badges/star-history.svg?v=2">
  </a>
 </p>
@@ -2,13 +2,13 @@
 ## Supported versions
-Wickra is pre-1.0. Security fixes are applied to the latest released `0.9.7`
+Wickra is pre-1.0. Security fixes are applied to the latest released `0.9.9`
 version only; please upgrade to the newest release before reporting an issue.
 | Version | Supported |
 | --- | --- |
-| 0.9.7 (latest) | :white_check_mark: |
+| 0.9.9 (latest) | :white_check_mark: |
-| < 0.9.7 | :x: |
+| < 0.9.9 | :x: |
 ## Reporting a vulnerability
@@ -11,7 +11,7 @@ Most questions are answered in the documentation:
  data layer, and an FAQ.
 - **README:** <https://github.com/wickra-lib/wickra#readme> — installation and a
  quick overview.
- **API docs (Rust):** <https://docs.rs/wickra>.
+- **API docs (Rust):** <https://docs.rs/wickra/latest/wickra/>.
 ## Questions and help
@@ -1,9 +1,17 @@
 <p align="center">
  <a href="https://wickra.org"><img src="https://raw.githubusercontent.com/wickra-lib/.github/main/profile/wickra-banner.webp?v=514" alt="Wickra — streaming-first technical indicators" width="100%"></a>
 </p>
 [![CI](https://raw.githubusercontent.com/wickra-lib/.github/main/profile/badges/ci.svg)](https://github.com/wickra-lib/wickra/actions/workflows/ci.yml)
 [![codecov](https://raw.githubusercontent.com/wickra-lib/.github/main/profile/badges/codecov.svg)](https://codecov.io/gh/wickra-lib/wickra)
 [![GitHub release](https://raw.githubusercontent.com/wickra-lib/.github/main/profile/badges/release.svg)](https://github.com/wickra-lib/wickra/releases/latest)
 [![License: MIT OR Apache-2.0](https://raw.githubusercontent.com/wickra-lib/.github/main/profile/badges/license.svg)](https://github.com/wickra-lib/wickra#license)
 # Wickra — C / C++
-[![CI](https://github.com/wickra-lib/wickra/actions/workflows/ci.yml/badge.svg)](https://github.com/wickra-lib/wickra/actions/workflows/ci.yml)
+---
-[![codecov](https://codecov.io/gh/wickra-lib/wickra/branch/main/graph/badge.svg)](https://codecov.io/gh/wickra-lib/wickra)
+
-[![GitHub release](https://img.shields.io/github/v/release/wickra-lib/wickra?logo=github&color=green)](https://github.com/wickra-lib/wickra/releases/latest)
+> **▶ Live demo:** all 514 indicators over real Binance market data, computed live in your browser — **[live.wickra.org](https://live.wickra.org)** · zero backend, powered by `wickra-wasm`.
 [![License: MIT OR Apache-2.0](https://img.shields.io/badge/license-MIT_OR_Apache--2.0-blue)](https://github.com/wickra-lib/wickra#license)
 **Streaming-first technical indicators for C and C++. A prebuilt shared/static
 library plus a generated `wickra.h` — no system dependencies.**
@@ -1,9 +1,17 @@
 <p align="center">
  <a href="https://wickra.org"><img src="https://raw.githubusercontent.com/wickra-lib/.github/main/profile/wickra-banner.webp?v=514" alt="Wickra — streaming-first technical indicators" width="100%"></a>
 </p>
 [![CI](https://raw.githubusercontent.com/wickra-lib/.github/main/profile/badges/ci.svg)](https://github.com/wickra-lib/wickra/actions/workflows/ci.yml)
 [![codecov](https://raw.githubusercontent.com/wickra-lib/.github/main/profile/badges/codecov.svg)](https://codecov.io/gh/wickra-lib/wickra)
 [![NuGet](https://raw.githubusercontent.com/wickra-lib/.github/main/profile/badges/nuget.svg)](https://www.nuget.org/packages/Wickra)
 [![License: MIT OR Apache-2.0](https://raw.githubusercontent.com/wickra-lib/.github/main/profile/badges/license.svg)](https://github.com/wickra-lib/wickra#license)
 # Wickra — C#
-[![CI](https://github.com/wickra-lib/wickra/actions/workflows/ci.yml/badge.svg)](https://github.com/wickra-lib/wickra/actions/workflows/ci.yml)
+---
-[![codecov](https://codecov.io/gh/wickra-lib/wickra/branch/main/graph/badge.svg)](https://codecov.io/gh/wickra-lib/wickra)
+
-[![NuGet](https://img.shields.io/nuget/v/Wickra.svg?logo=nuget&color=blue)](https://www.nuget.org/packages/Wickra)
+> **▶ Live demo:** all 514 indicators over real Binance market data, computed live in your browser — **[live.wickra.org](https://live.wickra.org)** · zero backend, powered by `wickra-wasm`.
 [![License: MIT OR Apache-2.0](https://img.shields.io/badge/license-MIT_OR_Apache--2.0-blue)](https://github.com/wickra-lib/wickra#license)
 **Streaming-first technical indicators for C#. `dotnet add package Wickra` —
 prebuilt native library, no system dependencies.**
@@ -9,7 +9,7 @@
  </PropertyGroup>
  <ItemGroup>
-    <PackageReference Include="Microsoft.NET.Test.Sdk" Version="18.6.0" />
+    <PackageReference Include="Microsoft.NET.Test.Sdk" Version="18.7.0" />
    <PackageReference Include="xunit" Version="2.9.3" />
    <PackageReference Include="xunit.runner.visualstudio" Version="3.1.5" />
  </ItemGroup>
@@ -11,7 +11,7 @@
    <!-- NuGet package metadata -->
    <PackageId>Wickra</PackageId>
-    <Version>0.9.7</Version>
+    <Version>0.9.9</Version>
    <Authors>kingchenc</Authors>
    <Description>High-performance streaming technical-analysis indicators (514 indicators) for .NET, backed by the native Rust core via the Wickra C ABI.</Description>
    <PackageLicenseExpression>MIT OR Apache-2.0</PackageLicenseExpression>
@@ -1,9 +1,17 @@
 <p align="center">
  <a href="https://wickra.org"><img src="https://raw.githubusercontent.com/wickra-lib/.github/main/profile/wickra-banner.webp?v=514" alt="Wickra — streaming-first technical indicators" width="100%"></a>
 </p>
 [![CI](https://raw.githubusercontent.com/wickra-lib/.github/main/profile/badges/ci.svg)](https://github.com/wickra-lib/wickra/actions/workflows/ci.yml)
 [![codecov](https://raw.githubusercontent.com/wickra-lib/.github/main/profile/badges/codecov.svg)](https://codecov.io/gh/wickra-lib/wickra)
 [![Go module](https://raw.githubusercontent.com/wickra-lib/.github/main/profile/badges/go.svg)](https://pkg.go.dev/github.com/wickra-lib/wickra/bindings/go)
 [![License: MIT OR Apache-2.0](https://raw.githubusercontent.com/wickra-lib/.github/main/profile/badges/license.svg)](https://github.com/wickra-lib/wickra#license)
 # Wickra — Go
-[![CI](https://github.com/wickra-lib/wickra/actions/workflows/ci.yml/badge.svg)](https://github.com/wickra-lib/wickra/actions/workflows/ci.yml)
+---
-[![codecov](https://codecov.io/gh/wickra-lib/wickra/branch/main/graph/badge.svg)](https://codecov.io/gh/wickra-lib/wickra)
+
-[![Go module](https://raw.githubusercontent.com/wickra-lib/.github/main/profile/badges/go.svg)](https://pkg.go.dev/github.com/wickra-lib/wickra/bindings/go)
+> **▶ Live demo:** all 514 indicators over real Binance market data, computed live in your browser — **[live.wickra.org](https://live.wickra.org)** · zero backend, powered by `wickra-wasm`.
 [![License: MIT OR Apache-2.0](https://img.shields.io/badge/license-MIT_OR_Apache--2.0-blue)](https://github.com/wickra-lib/wickra#license)
 **Streaming-first technical indicators for Go, over the Wickra C ABI hub via cgo.**
@@ -1,9 +1,17 @@
 <p align="center">
  <a href="https://wickra.org"><img src="https://raw.githubusercontent.com/wickra-lib/.github/main/profile/wickra-banner.webp?v=514" alt="Wickra — streaming-first technical indicators" width="100%"></a>
 </p>
 [![CI](https://raw.githubusercontent.com/wickra-lib/.github/main/profile/badges/ci.svg)](https://github.com/wickra-lib/wickra/actions/workflows/ci.yml)
 [![codecov](https://raw.githubusercontent.com/wickra-lib/.github/main/profile/badges/codecov.svg)](https://codecov.io/gh/wickra-lib/wickra)
 [![Maven Central](https://raw.githubusercontent.com/wickra-lib/.github/main/profile/badges/maven.svg)](https://central.sonatype.com/artifact/org.wickra/wickra)
 [![License: MIT OR Apache-2.0](https://raw.githubusercontent.com/wickra-lib/.github/main/profile/badges/license.svg)](https://github.com/wickra-lib/wickra#license)
 # Wickra — Java
-[![CI](https://github.com/wickra-lib/wickra/actions/workflows/ci.yml/badge.svg)](https://github.com/wickra-lib/wickra/actions/workflows/ci.yml)
+---
-[![codecov](https://codecov.io/gh/wickra-lib/wickra/branch/main/graph/badge.svg)](https://codecov.io/gh/wickra-lib/wickra)
+
-[![Maven Central](https://img.shields.io/maven-central/v/org.wickra/wickra.svg?logo=apache-maven&color=blue)](https://central.sonatype.com/artifact/org.wickra/wickra)
+> **▶ Live demo:** all 514 indicators over real Binance market data, computed live in your browser — **[live.wickra.org](https://live.wickra.org)** · zero backend, powered by `wickra-wasm`.
 [![License: MIT OR Apache-2.0](https://img.shields.io/badge/license-MIT_OR_Apache--2.0-blue)](https://github.com/wickra-lib/wickra#license)
 **Streaming-first technical indicators for the JVM, on the Java Foreign Function
 & Memory API — prebuilt native library, no JNI, no system dependencies.**
@@ -30,14 +38,14 @@ Maven:
 <dependency>
  <groupId>org.wickra</groupId>
  <artifactId>wickra</artifactId>
-  <version>0.9.7</version>
+  <version>0.9.9</version>
 </dependency>
 ```
 Gradle:
 ```kotlin
-implementation("org.wickra:wickra:0.9.7")
+implementation("org.wickra:wickra:0.9.9")
 ```
 The native library ships prebuilt per platform (Linux, macOS, Windows — x64 and
@@ -21,7 +21,7 @@
    <dependency>
      <groupId>org.wickra</groupId>
      <artifactId>wickra</artifactId>
-      <version>0.8.8</version>
+      <version>0.9.7</version>
    </dependency>
  </dependencies>
@@ -6,7 +6,7 @@
  <groupId>org.wickra</groupId>
  <artifactId>wickra</artifactId>
-  <version>0.9.7</version>
+  <version>0.9.9</version>
  <packaging>jar</packaging>
  <name>Wickra</name>
@@ -157,7 +157,7 @@
          <plugin>
            <groupId>org.sonatype.central</groupId>
            <artifactId>central-publishing-maven-plugin</artifactId>
-            <version>0.10.0</version>
+            <version>0.11.0</version>
            <extensions>true</extensions>
            <configuration>
              <publishingServerId>central</publishingServerId>
@@ -20,14 +20,35 @@ publish = false
 [lib]
 crate-type = ["cdylib"]
-[lints]
+# Mirrors [workspace.lints] (the source of truth) EXCEPT `unsafe_code`, which is
-workspace = true
+# relaxed from the workspace `forbid` to `deny`: the napi-rs 3 derive macros emit
 # `#[allow(unsafe_code)]`, which `forbid` cannot permit. `deny` still fails the
 # build on any unguarded unsafe in our own code. Keep this list in sync with the
 # workspace if its lints change.
 [lints.rust]
 unsafe_code = "deny"
 missing_debug_implementations = "warn"
 unreachable_pub = "warn"
 unused_must_use = "deny"
 [lints.clippy]
 all = { level = "warn", priority = -1 }
 pedantic = { level = "warn", priority = -1 }
 module_name_repetitions = "allow"
 must_use_candidate = "allow"
 missing_errors_doc = "allow"
 missing_panics_doc = "allow"
 cast_precision_loss = "allow"
 cast_possible_truncation = "allow"
 cast_sign_loss = "allow"
 similar_names = "allow"
 float_cmp = "allow"
 [dependencies]
 wickra-core = { workspace = true }
 wickra-data = { workspace = true, features = ["live-binance"] }
-napi = { version = "2.16", features = ["napi8"] }
+napi = { version = "3.9", features = ["napi8"] }
-napi-derive = "2.16"
+napi-derive = "3.5"
 # Drives the async Binance feed behind the blocking poll.
 tokio = { version = "1", features = ["rt", "net", "time"] }
@@ -1,9 +1,17 @@
 <p align="center">
  <a href="https://wickra.org"><img src="https://raw.githubusercontent.com/wickra-lib/.github/main/profile/wickra-banner.webp?v=514" alt="Wickra — streaming-first technical indicators" width="100%"></a>
 </p>
 [![CI](https://raw.githubusercontent.com/wickra-lib/.github/main/profile/badges/ci.svg)](https://github.com/wickra-lib/wickra/actions/workflows/ci.yml)
 [![codecov](https://raw.githubusercontent.com/wickra-lib/.github/main/profile/badges/codecov.svg)](https://codecov.io/gh/wickra-lib/wickra)
 [![npm](https://raw.githubusercontent.com/wickra-lib/.github/main/profile/badges/npm.svg)](https://www.npmjs.com/package/wickra)
 [![License: MIT OR Apache-2.0](https://raw.githubusercontent.com/wickra-lib/.github/main/profile/badges/license.svg)](https://github.com/wickra-lib/wickra#license)
 # Wickra — Node.js
-[![CI](https://github.com/wickra-lib/wickra/actions/workflows/ci.yml/badge.svg)](https://github.com/wickra-lib/wickra/actions/workflows/ci.yml)
+---
-[![codecov](https://codecov.io/gh/wickra-lib/wickra/branch/main/graph/badge.svg)](https://codecov.io/gh/wickra-lib/wickra)
+
-[![npm](https://img.shields.io/npm/v/wickra.svg?logo=npm&color=red)](https://www.npmjs.com/package/wickra)
+> **▶ Live demo:** all 514 indicators over real Binance market data, computed live in your browser — **[live.wickra.org](https://live.wickra.org)** · zero backend, powered by `wickra-wasm`.
 [![License: MIT OR Apache-2.0](https://img.shields.io/badge/license-MIT_OR_Apache--2.0-blue)](https://github.com/wickra-lib/wickra#license)
 **Streaming-first technical indicators for Node.js. `npm install wickra` —
 prebuilt native binary, no system dependencies.**
@@ -1,6 +1,6 @@
 {
  "name": "wickra-darwin-arm64",
-  "version": "0.9.7",
+  "version": "0.9.9",
  "description": "Native binding for wickra (macOS Apple Silicon). Installed automatically as an optional dependency of wickra on matching platforms.",
  "main": "wickra.darwin-arm64.node",
  "files": [
@@ -1,6 +1,6 @@
 {
  "name": "wickra-darwin-x64",
-  "version": "0.9.7",
+  "version": "0.9.9",
  "description": "Native binding for wickra (macOS Intel). Installed automatically as an optional dependency of wickra on matching platforms.",
  "main": "wickra.darwin-x64.node",
  "files": [
@@ -1,6 +1,6 @@
 {
  "name": "wickra-linux-arm64-gnu",
-  "version": "0.9.7",
+  "version": "0.9.9",
  "description": "Native binding for wickra (linux arm64 GNU). Installed automatically as an optional dependency of wickra on matching platforms.",
  "main": "wickra.linux-arm64-gnu.node",
  "files": [
@@ -1,6 +1,6 @@
 {
  "name": "wickra-linux-x64-gnu",
-  "version": "0.9.7",
+  "version": "0.9.9",
  "description": "Native binding for wickra (linux x64 GNU). Installed automatically as an optional dependency of wickra on matching platforms.",
  "main": "wickra.linux-x64-gnu.node",
  "files": [
@@ -1,6 +1,6 @@
 {
  "name": "wickra-win32-arm64-msvc",
-  "version": "0.9.7",
+  "version": "0.9.9",
  "description": "Native binding for wickra (Windows arm64 MSVC). Installed automatically as an optional dependency of wickra on matching platforms.",
  "main": "wickra.win32-arm64-msvc.node",
  "files": [
@@ -1,6 +1,6 @@
 {
  "name": "wickra-win32-x64-msvc",
-  "version": "0.9.7",
+  "version": "0.9.9",
  "description": "Native binding for wickra (Windows x64 MSVC). Installed automatically as an optional dependency of wickra on matching platforms.",
  "main": "wickra.win32-x64-msvc.node",
  "files": [
@@ -1,6 +1,6 @@
 {
  "name": "wickra",
-  "version": "0.9.7",
+  "version": "0.9.9",
  "description": "Streaming-first technical indicators: incremental, fast, install-free. Node bindings powered by Rust.",
  "author": "kingchenc <support@wickra.org>",
  "main": "index.js",
@@ -44,15 +44,15 @@
    }
  },
  "engines": {
-    "node": ">= 20"
+    "node": ">= 22"
  },
  "optionalDependencies": {
-    "wickra-linux-x64-gnu": "0.9.7",
+    "wickra-linux-x64-gnu": "0.9.9",
-    "wickra-linux-arm64-gnu": "0.9.7",
+    "wickra-linux-arm64-gnu": "0.9.9",
-    "wickra-darwin-x64": "0.9.7",
+    "wickra-darwin-x64": "0.9.9",
-    "wickra-darwin-arm64": "0.9.7",
+    "wickra-darwin-arm64": "0.9.9",
-    "wickra-win32-x64-msvc": "0.9.7",
+    "wickra-win32-x64-msvc": "0.9.9",
-    "wickra-win32-arm64-msvc": "0.9.7"
+    "wickra-win32-arm64-msvc": "0.9.9"
  },
  "scripts": {
    "build": "napi build --platform --release",
@@ -64,6 +64,6 @@
    "bench": "node benchmarks/throughput.js"
  },
  "devDependencies": {
-    "@napi-rs/cli": "^2.18.0"
+    "@napi-rs/cli": "^3.7.2"
  }
 }
@@ -1,9 +1,17 @@
 <p align="center">
  <a href="https://wickra.org"><img src="https://raw.githubusercontent.com/wickra-lib/.github/main/profile/wickra-banner.webp?v=514" alt="Wickra — streaming-first technical indicators" width="100%"></a>
 </p>
 [![CI](https://raw.githubusercontent.com/wickra-lib/.github/main/profile/badges/ci.svg)](https://github.com/wickra-lib/wickra/actions/workflows/ci.yml)
 [![codecov](https://raw.githubusercontent.com/wickra-lib/.github/main/profile/badges/codecov.svg)](https://codecov.io/gh/wickra-lib/wickra)
 [![PyPI](https://raw.githubusercontent.com/wickra-lib/.github/main/profile/badges/pypi.svg)](https://pypi.org/project/wickra/)
 [![License: MIT OR Apache-2.0](https://raw.githubusercontent.com/wickra-lib/.github/main/profile/badges/license.svg)](https://github.com/wickra-lib/wickra#license)
 # Wickra — Python
-[![CI](https://github.com/wickra-lib/wickra/actions/workflows/ci.yml/badge.svg)](https://github.com/wickra-lib/wickra/actions/workflows/ci.yml)
+---
-[![codecov](https://codecov.io/gh/wickra-lib/wickra/branch/main/graph/badge.svg)](https://codecov.io/gh/wickra-lib/wickra)
+
-[![PyPI](https://img.shields.io/pypi/v/wickra.svg?logo=pypi&color=blue)](https://pypi.org/project/wickra/)
+> **▶ Live demo:** all 514 indicators over real Binance market data, computed live in your browser — **[live.wickra.org](https://live.wickra.org)** · zero backend, powered by `wickra-wasm`.
 [![License: MIT OR Apache-2.0](https://img.shields.io/badge/license-MIT_OR_Apache--2.0-blue)](https://github.com/wickra-lib/wickra#license)
 **Streaming-first technical indicators for Python. `pip install wickra` — zero
 third-party dependencies (not even NumPy), no system dependencies, no C build tooling.**
@@ -4,7 +4,7 @@ build-backend = "maturin"
 [project]
 name = "wickra"
-version = "0.9.7"
+version = "0.9.9"
 description = "Streaming-first technical indicators: incremental, fast, install-free."
 readme = "README.md"
 license = "MIT OR Apache-2.0"
@@ -1,7 +1,7 @@
 Package: wickra
 Type: Package
 Title: Streaming-First Technical Indicators
-Version: 0.9.7
+Version: 0.9.9
 Authors@R: person("kingchenc", role = c("aut", "cre"), email = "support@wickra.org")
 Description: R bindings for the Wickra technical-analysis library over its C ABI
    hub. Exposes 514 indicators, each an O(1) streaming state machine shared with
@@ -1,8 +1,17 @@
 <p align="center">
  <a href="https://wickra.org"><img src="https://raw.githubusercontent.com/wickra-lib/.github/main/profile/wickra-banner.webp?v=514" alt="Wickra — streaming-first technical indicators" width="100%"></a>
 </p>
 [![CI](https://raw.githubusercontent.com/wickra-lib/.github/main/profile/badges/ci.svg)](https://github.com/wickra-lib/wickra/actions/workflows/ci.yml)
 [![codecov](https://raw.githubusercontent.com/wickra-lib/.github/main/profile/badges/codecov.svg)](https://codecov.io/gh/wickra-lib/wickra)
 [![r-universe](https://raw.githubusercontent.com/wickra-lib/.github/main/profile/badges/r-universe.svg)](https://wickra-lib.r-universe.dev)
 [![License: MIT OR Apache-2.0](https://raw.githubusercontent.com/wickra-lib/.github/main/profile/badges/license.svg)](https://github.com/wickra-lib/wickra#license)
 # Wickra — R <img src="man/figures/logo.png" align="right" height="120" alt="Wickra logo" />
-[![CI](https://github.com/wickra-lib/wickra/actions/workflows/ci.yml/badge.svg)](https://github.com/wickra-lib/wickra/actions/workflows/ci.yml)
+---
-[![codecov](https://codecov.io/gh/wickra-lib/wickra/branch/main/graph/badge.svg)](https://codecov.io/gh/wickra-lib/wickra)
+
-[![License: MIT OR Apache-2.0](https://img.shields.io/badge/license-MIT_OR_Apache--2.0-blue)](https://github.com/wickra-lib/wickra#license)
+> **▶ Live demo:** all 514 indicators over real Binance market data, computed live in your browser — **[live.wickra.org](https://live.wickra.org)** · zero backend, powered by `wickra-wasm`.
 **Streaming-first technical indicators for R, over the Wickra C ABI hub via `.Call`.**
@@ -1,9 +1,17 @@
 <p align="center">
  <a href="https://wickra.org"><img src="https://raw.githubusercontent.com/wickra-lib/.github/main/profile/wickra-banner.webp?v=514" alt="Wickra — streaming-first technical indicators" width="100%"></a>
 </p>
 [![CI](https://raw.githubusercontent.com/wickra-lib/.github/main/profile/badges/ci.svg)](https://github.com/wickra-lib/wickra/actions/workflows/ci.yml)
 [![codecov](https://raw.githubusercontent.com/wickra-lib/.github/main/profile/badges/codecov.svg)](https://codecov.io/gh/wickra-lib/wickra)
 [![npm](https://img.shields.io/npm/v/wickra-wasm.svg?logo=npm&color=red)](https://www.npmjs.com/package/wickra-wasm)
 [![License: MIT OR Apache-2.0](https://raw.githubusercontent.com/wickra-lib/.github/main/profile/badges/license.svg)](https://github.com/wickra-lib/wickra#license)
 # Wickra — WASM
-[![CI](https://github.com/wickra-lib/wickra/actions/workflows/ci.yml/badge.svg)](https://github.com/wickra-lib/wickra/actions/workflows/ci.yml)
+---
-[![codecov](https://codecov.io/gh/wickra-lib/wickra/branch/main/graph/badge.svg)](https://codecov.io/gh/wickra-lib/wickra)
+
-[![npm](https://img.shields.io/npm/v/wickra-wasm.svg?logo=npm&color=red)](https://www.npmjs.com/package/wickra-wasm)
+> **▶ Live demo:** all 514 indicators over real Binance market data, computed live in your browser — **[live.wickra.org](https://live.wickra.org)** · zero backend, powered by `wickra-wasm`.
 [![License: MIT OR Apache-2.0](https://img.shields.io/badge/license-MIT_OR_Apache--2.0-blue)](https://github.com/wickra-lib/wickra#license)
 **Streaming-first technical indicators in the browser. `npm install
 wickra-wasm` — pure WebAssembly, runs anywhere a modern JS engine does.**
@@ -27,7 +27,7 @@ workspace = true
 # (rayon) feature on — the WASM binding needs a rayon-free build and the data
 # layer never uses the parallel batch path. Native bindings re-enable `parallel`
 # through their own wickra-core dependency (cargo unifies the features).
-wickra-core = { path = "../wickra-core", version = "0.9.2", default-features = false }
+wickra-core = { path = "../wickra-core", version = "0.9.9", default-features = false }
 thiserror = { workspace = true }
 csv = "1.3"
 serde = { version = "1", features = ["derive"] }
@@ -6,7 +6,7 @@
  <groupId>org.wickra.examples</groupId>
  <artifactId>wickra-examples</artifactId>
-  <version>0.9.7</version>
+  <version>0.9.9</version>
  <packaging>jar</packaging>
  <name>Wickra Java examples</name>
@@ -21,7 +21,7 @@
    <dependency>
      <groupId>org.wickra</groupId>
      <artifactId>wickra</artifactId>
-      <version>0.9.7</version>
+      <version>0.9.9</version>
    </dependency>
  </dependencies>
@@ -14,7 +14,7 @@
    },
    "../../bindings/node": {
      "name": "wickra",
-      "version": "0.9.7",
+      "version": "0.9.9",
      "license": "MIT OR Apache-2.0",
      "devDependencies": {
        "@napi-rs/cli": "^2.18.0"
@@ -23,12 +23,12 @@
        "node": ">= 20"
      },
      "optionalDependencies": {
-        "wickra-darwin-arm64": "0.9.7",
+        "wickra-darwin-arm64": "0.9.9",
-        "wickra-darwin-x64": "0.9.7",
+        "wickra-darwin-x64": "0.9.9",
-        "wickra-linux-arm64-gnu": "0.9.7",
+        "wickra-linux-arm64-gnu": "0.9.9",
-        "wickra-linux-x64-gnu": "0.9.7",
+        "wickra-linux-x64-gnu": "0.9.9",
-        "wickra-win32-arm64-msvc": "0.9.7",
+        "wickra-win32-arm64-msvc": "0.9.9",
-        "wickra-win32-x64-msvc": "0.9.7"
+        "wickra-win32-x64-msvc": "0.9.9"
      }
    },
    "node_modules/wickra": {
@@ -0,0 +1,33 @@
 # lychee external-link checker config (see .github/workflows/links.yml).
 # Only http(s) URLs are checked; relative/internal links are skipped via the
 # scheme filter and --root-dir resolution. Loopback and private addresses are
 # skipped too.
 max_retries = 3
 retry_wait_time = 2
 timeout = 20
 # Treat these as success: OK, partial content, and rate-limited (transient).
 accept = [200, 206, 429]
 scheme = ["https", "http"]
 exclude_all_private = true
 # Known false positives (the URLs are valid; lychee just can't verify them at
 # check time):
 # - crates.io and npmjs.com return 403/404 to non-browser requests
 #   (anti-scraping); the package pages are live in a browser.
 # - GitHub serves 404 for /stargazers and /network/members to anonymous clients
 #   (anti-scraping). The README social-footer badges link there; the pages are
 #   live in a browser.
 # - the CHANGELOG version-compare links point at the release tag that is created
 #   *after* the bump is merged. ci.yml runs on push/PR (never on the tag), so the
 #   tag never exists when lychee runs and the compare URL 404s. One pattern
 #   covers every future version — no per-release exclude needed.
 exclude = [
  'crates\.io/crates/',
  'www\.npmjs\.com/package/',
  'github\.com/wickra-lib/wickra/compare/',
  'github\.com/wickra-lib/wickra/stargazers',
  'github\.com/wickra-lib/wickra/network/members',
 ]
Author	SHA1	Message	Date
kingchenc	4d04ab8227	ci(links): exclude GitHub stargazers/network-members from link check (#358 ) GitHub returns 404 for /stargazers and /network/members to anonymous clients (anti-scraping); the README social-footer badges link there, so the lychee link check (the non-blocking ci.yml job and the standalone links.yml, both using this config) flagged them as dead. The pages are live in a browser. Exclude them.	2026-07-08 18:29:05 +02:00
kingchenc	7d4ca8c572	fix(deps): bump crossbeam-epoch to 0.9.20 (RUSTSEC-2026-0204) (#359 ) RustSec published RUSTSEC-2026-0204: an invalid pointer dereference in the fmt::Pointer impl for crossbeam-epoch's Atomic and Shared when the underlying pointer is invalid. It reaches us transitively via crossbeam-deque. The fix is a lock-only patch bump to the already-compatible 0.9.20 (no Cargo.toml or code change). cargo-deny's advisories check now passes.	2026-07-08 18:08:37 +02:00
kingchenc	d31e127ae2	ci(zizmor): suppress impostor-commit on the dtolnay/rust-toolchain pin (#357 ) dtolnay/rust-toolchain moved from rolling stable/nightly branches to version tags, so the pinned (still valid, still immutable) SHA is no longer reachable from a branch and zizmor flags it as an impostor-commit. Add the same `# zizmor: ignore[impostor-commit]` marker the shazam/copilot repos already use. Comment-only; the action SHA is unchanged.	2026-07-06 12:19:51 +02:00
kingchenc	ffc80754d8	docs(readme): bust Camo cache on the star-history image (#356 ) The star-history snapshot in the .github repo was briefly overwritten with a data-less chart; GitHub's Camo image proxy cached that blank SVG. Append a ?v cache-buster to the <img> URL so Camo refetches the restored snapshot (same technique as the self-updating banner) and the star curve renders again.	2026-07-05 23:40:03 +02:00
kingchenc	f2b92f89ee	docs: add an Ecosystem section to the README (#355 ) * docs: add an Ecosystem section to the README Link the products built on the Wickra core — wickra-exchange, wickra-backtest, wickra-terminal, wickra-screener and wickra-xray — plus wickra-radar / wickra-copilot / wickra-shazam as coming soon, and the docs and marketing sites. * docs(readme): surface the ecosystem teaser at the top, under the live demo * docs: list all eight ecosystem products as shipped wickra-radar, wickra-copilot and wickra-shazam are now live, so drop the 'coming soon'/'on the way' wording and link them like the rest.	2026-07-04 17:24:16 +02:00
dependabot[bot]	350230cd07	deps(actions): bump the github-actions group with 9 updates (#354 ) Bumps the github-actions group with 9 updates: \| Package \| From \| To \| \| --- \| --- \| --- \| \| [actions/setup-python](https://github.com/actions/setup-python) \| `6.2.0` \| `6.3.0` \| \| [taiki-e/install-action](https://github.com/taiki-e/install-action) \| `2.82.1` \| `2.82.5` \| \| [actions/cache](https://github.com/actions/cache) \| `5.0.5` \| `6.1.0` \| \| [actions/setup-go](https://github.com/actions/setup-go) \| `6.4.0` \| `6.5.0` \| \| [r-lib/actions/setup-r](https://github.com/r-lib/actions) \| `2.12.0` \| `2.12.1` \| \| [r-lib/actions/setup-r-dependencies](https://github.com/r-lib/actions) \| `2.12.0` \| `2.12.1` \| \| [actions/setup-java](https://github.com/actions/setup-java) \| `5.3.0` \| `5.4.0` \| \| [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance) \| `4.1.0` \| `4.1.1` \| \| [zizmorcore/zizmor-action](https://github.com/zizmorcore/zizmor-action) \| `0.5.6` \| `0.5.7` \| Updates `actions/setup-python` from 6.2.0 to 6.3.0 - [Release notes](https://github.com/actions/setup-python/releases) - [Commits](https://github.com/actions/setup-python/compare/a309ff8b426b58ec0e2a45f0f869d46889d02405...ece7cb06caefa5fff74198d8649806c4678c61a1) Updates `taiki-e/install-action` from 2.82.1 to 2.82.5 - [Release notes](https://github.com/taiki-e/install-action/releases) - [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/taiki-e/install-action/compare/8b3c737da4b541bf0fb5a3e0488ff20535badac9...bffeee26d4db9be238a4ea78d8826604ebcb594d) Updates `actions/cache` from 5.0.5 to 6.1.0 - [Release notes](https://github.com/actions/cache/releases) - [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md) - [Commits](https://github.com/actions/cache/compare/27d5ce7f107fe9357f9df03efb73ab90386fccae...55cc8345863c7cc4c66a329aec7e433d2d1c52a9) Updates `actions/setup-go` from 6.4.0 to 6.5.0 - [Release notes](https://github.com/actions/setup-go/releases) - [Commits](https://github.com/actions/setup-go/compare/4a3601121dd01d1626a1e23e37211e3254c1c06c...924ae3a1cded613372ab5595356fb5720e22ba16) Updates `r-lib/actions/setup-r` from 2.12.0 to 2.12.1 - [Release notes](https://github.com/r-lib/actions/releases) - [Changelog](https://github.com/r-lib/actions/blob/v2-branch/NEWS.md) - [Commits](https://github.com/r-lib/actions/compare/a51a8012b0aab7c32ef9d19bf54da93f3254335e...d3c5be51b12e724e68f33216ca3c148b66d5f0b6) Updates `r-lib/actions/setup-r-dependencies` from 2.12.0 to 2.12.1 - [Release notes](https://github.com/r-lib/actions/releases) - [Changelog](https://github.com/r-lib/actions/blob/v2-branch/NEWS.md) - [Commits](https://github.com/r-lib/actions/compare/a51a8012b0aab7c32ef9d19bf54da93f3254335e...d3c5be51b12e724e68f33216ca3c148b66d5f0b6) Updates `actions/setup-java` from 5.3.0 to 5.4.0 - [Release notes](https://github.com/actions/setup-java/releases) - [Commits](https://github.com/actions/setup-java/compare/ad2b38190b15e4d6bdf0c97fb4fca8412226d287...1bcf9fb12cf4aa7d266a90ae39939e61372fe520) Updates `actions/attest-build-provenance` from 4.1.0 to 4.1.1 - [Release notes](https://github.com/actions/attest-build-provenance/releases) - [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md) - [Commits](https://github.com/actions/attest-build-provenance/compare/a2bbfa25375fe432b6a289bc6b6cd05ecd0c4c32...0f67c3f4856b2e3261c31976d6725780e5e4c373) Updates `zizmorcore/zizmor-action` from 0.5.6 to 0.5.7 - [Release notes](https://github.com/zizmorcore/zizmor-action/releases) - [Commits](https://github.com/zizmorcore/zizmor-action/compare/5f14fd08f7cf1cb1609c1e344975f152c7ee938d...192e21d79ab29983730a13d1382995c2307fbcaa) --- updated-dependencies: - dependency-name: actions/setup-python dependency-version: 6.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: taiki-e/install-action dependency-version: 2.82.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: actions/cache dependency-version: 6.1.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/setup-go dependency-version: 6.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: r-lib/actions/setup-r dependency-version: 2.12.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: r-lib/actions/setup-r-dependencies dependency-version: 2.12.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: actions/setup-java dependency-version: 5.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: actions/attest-build-provenance dependency-version: 4.1.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: zizmorcore/zizmor-action dependency-version: 0.5.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-07-03 18:44:18 +02:00
dependabot[bot]	71df1798b8	deps(nuget): Bump the nuget group with 1 update (#353 ) Bumps Microsoft.NET.Test.Sdk from 18.6.0 to 18.7.0 --- updated-dependencies: - dependency-name: Microsoft.NET.Test.Sdk dependency-version: 18.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: nuget ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-07-03 18:33:43 +02:00
dependabot[bot]	6a86660e30	deps(maven): bump org.wickra:wickra (#352 ) Bumps the maven group with 1 update in the /bindings/java/benchmarks directory: [org.wickra:wickra](https://github.com/wickra-lib/wickra). Updates `org.wickra:wickra` from 0.9.6 to 0.9.7 - [Release notes](https://github.com/wickra-lib/wickra/releases) - [Changelog](https://github.com/wickra-lib/wickra/blob/main/CHANGELOG.md) - [Commits](https://github.com/wickra-lib/wickra/compare/v0.9.6...v0.9.7) --- updated-dependencies: - dependency-name: org.wickra:wickra dependency-version: 0.9.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: maven ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-07-03 18:31:34 +02:00
kingchenc	45c11da4fc	release: bump 0.9.8 -> 0.9.9 (#351 ) * release: bump 0.9.8 -> 0.9.9 * ci(lychee): exclude the CHANGELOG version-compare links The CHANGELOG compare URLs point at the release tag created after the bump is merged; ci.yml runs on push/PR (never on the tag), so the tag never exists when lychee runs and 'compare/vX...vY' / 'compare/vY...HEAD' 404. Excluded by the same pattern mechanism already used for the crates.io / npm package URLs — one pattern covers every future version, no per-release change needed.	2026-06-29 23:54:48 +02:00
kingchenc	2ae8976292	fix(release): napi-rs CLI 3 renamed 'napi artifacts --dir' to '--output-dir' The napi-3 migration bumped @napi-rs/cli to 3, but release.yml still used the CLI-2 flag 'napi artifacts --dir'. CLI 3 rejects it ('Unsupported option name'), failing the npm publish job (and skipping the GitHub Release). This path only runs on a v* tag, so it was not exercised by the migration PR's CI.	2026-06-28 02:44:50 +02:00
kingchenc	06b05e6c3e	release: bump 0.9.7 -> 0.9.8 (#350 )	2026-06-28 01:56:57 +02:00
dependabot[bot]	4ec10826be	deps(actions): bump taiki-e/install-action in the github-actions group (#349 ) Bumps the github-actions group with 1 update: [taiki-e/install-action](https://github.com/taiki-e/install-action). Updates `taiki-e/install-action` from 2.82.0 to 2.82.1 - [Release notes](https://github.com/taiki-e/install-action/releases) - [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/taiki-e/install-action/compare/b8cecb83565409bcc297b2df6e77f030b2a468d5...8b3c737da4b541bf0fb5a3e0488ff20535badac9) --- updated-dependencies: - dependency-name: taiki-e/install-action dependency-version: 2.82.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-06-28 01:27:15 +02:00
kingchenc	13b2ee5231	ci(dependabot): split the cargo group — isolate napi, pin ureq to 2.x (#348 ) The cargo group bundled every crate bump into one PR, which forced the napi-rs 3 migration (a coordinated CLI + crate major) together with an unrelated ureq bump. Give napi/napi-derive/napi-build their own group so the napi-3 work lands as a self-contained PR, and ignore ureq major updates: ureq 3 unconditionally pulls webpki-root-certs (CDLA-Permissive-2.0), which the native-tls / OS-trust-store setup in wickra-data deliberately avoids.	2026-06-28 00:53:10 +02:00
kingchenc	025d453293	deps(node): migrate the Node binding to napi-rs 3 (#347 ) Bumps napi 2.16 -> 3.9 and napi-derive 2.16 -> 3.5 (cargo) and @napi-rs/cli 2.18 -> 3.7 (npm). napi 3's derive macros emit #[allow(unsafe_code)], which the workspace-wide forbid(unsafe_code) cannot permit, so the Node crate gets its own [lints] block mirroring the workspace with unsafe_code relaxed to deny — forbid stays in force for every other crate. The CLI-3-regenerated index.d.ts / index.js keep the identical 626-symbol public API (only the codegen format changed). MSRV stays 1.88 (napi 3.9 requires exactly that); ureq is intentionally left at 2.x. Verified locally: cargo clippy clean, 1108/1108 Node tests pass. Supersedes the napi half of the cargo group bump and the @napi-rs/cli npm bump.	2026-06-28 00:45:38 +02:00
dependabot[bot]	c6972dd476	deps(actions): bump the github-actions group with 4 updates (#346 ) Bumps the github-actions group with 4 updates: [actions/checkout](https://github.com/actions/checkout), [taiki-e/install-action](https://github.com/taiki-e/install-action), [actions/setup-java](https://github.com/actions/setup-java) and [softprops/action-gh-release](https://github.com/softprops/action-gh-release). Updates `actions/checkout` from 6.0.2 to 7.0.0 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/v6.0.2...9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0) Updates `taiki-e/install-action` from 2.81.10 to 2.82.0 - [Release notes](https://github.com/taiki-e/install-action/releases) - [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/taiki-e/install-action/compare/7a79fe8c3a13344501c80d99cae481c1c9085912...b8cecb83565409bcc297b2df6e77f030b2a468d5) Updates `actions/setup-java` from 5.2.0 to 5.3.0 - [Release notes](https://github.com/actions/setup-java/releases) - [Commits](https://github.com/actions/setup-java/compare/be666c2fcd27ec809703dec50e508c2fdc7f6654...ad2b38190b15e4d6bdf0c97fb4fca8412226d287) Updates `softprops/action-gh-release` from 3.0.0 to 3.0.1 - [Release notes](https://github.com/softprops/action-gh-release/releases) - [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md) - [Commits](https://github.com/softprops/action-gh-release/compare/b4309332981a82ec1c5618f44dd2e27cc8bfbfda...718ea10b132b3b2eba29c1007bb80653f286566b) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 7.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: taiki-e/install-action dependency-version: 2.82.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: actions/setup-java dependency-version: 5.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: softprops/action-gh-release dependency-version: 3.0.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-06-28 00:25:33 +02:00
dependabot[bot]	04b10cf915	deps(maven): bump the maven group across 2 directories with 2 updates (#343 ) Bumps the maven group with 1 update in the /bindings/java directory: [org.sonatype.central:central-publishing-maven-plugin](https://github.com/sonatype/central-publishing-maven-plugin). Bumps the maven group with 1 update in the /bindings/java/benchmarks directory: [org.wickra:wickra](https://github.com/wickra-lib/wickra). Updates `org.sonatype.central:central-publishing-maven-plugin` from 0.10.0 to 0.11.0 - [Commits](https://github.com/sonatype/central-publishing-maven-plugin/commits) Updates `org.wickra:wickra` from 0.8.8 to 0.9.6 - [Release notes](https://github.com/wickra-lib/wickra/releases) - [Changelog](https://github.com/wickra-lib/wickra/blob/main/CHANGELOG.md) - [Commits](https://github.com/wickra-lib/wickra/compare/v0.8.8...v0.9.6) --- updated-dependencies: - dependency-name: org.sonatype.central:central-publishing-maven-plugin dependency-version: 0.11.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: maven - dependency-name: org.wickra:wickra dependency-version: 0.9.6 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: maven ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-06-28 00:25:30 +02:00
kingchenc	9368c6655a	docs: add banner + self-made badges to binding READMEs, move title under badges, add a rule (#342 ) Each binding README now opens with the shared Wickra banner, a row of self-made SVG badges (CI, codecov, the language registry, License), then the language title and a horizontal rule separating the header from the body. The main README gets the same rule under its badge row (no title).	2026-06-24 05:14:17 +02:00
kingchenc	063a1b5192	docs: move the Live demo badge one position forward in the README badge row (#341 )	2026-06-24 03:33:19 +02:00
kingchenc	fdb4c1e86b	docs: link the live in-browser demo (live.wickra.org) (#340 ) * docs: link the live in-browser demo (live.wickra.org) Adds a Live-demo badge + callout to the main README and a callout to all eight binding READMEs, pointing at the wickra-live in-browser demo of all 514 indicators. DRAFT until live.wickra.org is deployed. * ci: exclude live.wickra.org from lychee until the wickra-live site is deployed * Revert "ci: exclude live.wickra.org from lychee until the wickra-live site is deployed" This reverts commit `3809d4a3b3`.	2026-06-24 03:27:01 +02:00
kingchenc	57e52c67b9	ci: add external link check (lychee, hybrid non-blocking) (#339 ) * ci: add external link check (lychee, scheduled + on-demand) Adds a non-blocking external-link checker mirroring wickra-docs: an authoritative weekly + on-demand lychee run (this workflow), kept off the PR/release path so a flaky third-party site can never block a merge or an irreversible publish. Fixes the one redirecting link it would flag (docs.rs/wickra -> docs.rs/wickra/latest/wickra/ in SUPPORT.md). * ci: run lychee as a non-blocking PR job (continue-on-error) Hybrid link-check: the authoritative run is the scheduled links.yml; this adds an early heads-up on PRs that never gates the merge. release.yml stays ungated so a flaky third-party site can never block an irreversible publish.	2026-06-22 15:59:14 +02:00