[martinezooo]

Scope

Prepare 0.10.0-beta.1 for macOS, Linux x86_64 and Windows x86_64 while preserving the existing macOS behavior.

Included

• Propagate format, build, lint and test failures through diagnostic pipelines on all three runners.
• Validate Voyager normal-mode and bootloader identities, reject ambiguous/wrong-device flashes, and reject mismatched MCU images.
• Reject executable or unknown Oryx rules.mk directives during local builds.
• Update vulnerable dependencies.
• Clear transient input/effect state on disconnect and surface worker shutdown panics.
• Document the stock Oryx readback limitation and Keyjitsu firmware-state marker.
• Set package and changelog metadata to 0.10.0-beta.1.

Verified locally

• cargo fmt --check
• cargo test --all-targets — 159 passed, 1 ignored live-network test
• cargo clippy --all-targets -- -D warnings
• cargo audit — no blocking vulnerabilities; 7 acknowledged transitive warnings
• GitHub Actions workflow YAML parses successfully

Release gate

The PR can leave draft after the new macOS, Linux, Windows and dependency-audit jobs pass. No firmware was built or flashed during this cleanup.

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-10-17T23:49:34.870783Z	f80742a	Draft marked ready

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.