[kixelated]

Patch bumps for the release-line JS packages, so the backports merged since the last publish ship to npm. Compared each package against the release commit at its npm publish time.

Bumps

• @moq/net 0.4.3 → 0.4.4: fix(net): backport subscribe-close error handling #5582 (subscribe-close error handling: a locally cancelled subscription no longer rejects its response stream).
• @moq/hang 0.5.2 → 0.5.3: fix(hang): ignore incompatible archive metadata in catalogs (backport #5485) #5520 (an incompatible archive in a catalog disables seeking/recording instead of failing the whole catalog).
• @moq/publish 0.5.2 → 0.5.3: fix(mux): an unset host clock publishes without a wall mapping #5448 (a page whose wall clock is unset omits clock rather than advertising a false one).
• @moq/signals 0.2.5 → 0.2.6: fix(net): backport subscribe-close error handling #5582 (race observes every losing value, so a later rejection is not reported as unhandled).

All four are fixes, so patch. The matching workspace versions in bun.lock move with them.

Examined and left alone

• Rust crates: release-plz owns them (chore: release #5533, merged).
• @moq/watch, @moq/boy: only the esbuild → rolldown devDependency swap (worklet bundling at build time), so no shipped change.
• @moq/flate: repository metadata and dependency ranges that already accepted the new versions.
• Other JS packages: no changes since their last publish.
• Python, Swift, Kotlin, Go, Dart: no changes on release since chore(js): bump @moq/net to 0.4.3 on release #5119.

Checks

• just js check and just js test pass locally; bun install --frozen-lockfile accepts the lockfile.

🤖 Generated with Claude Code

(Written by Claude Opus 5.5)

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-10-16T04:42:40.505707Z	890cb04	PR opened

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[kixelated]

Automated review by review (OpenAI)

Reviewed commit: 890cb04.

No actionable bugs found in this release-version change. The four patch versions match bun.lock, and #5582, #5520 and #5448 are ancestors of the release base with their fixes retained. Packaging rewrites workspace dependencies to the new sibling versions, including net → signals ^0.2.6 and publish → hang ^0.5.3. The existing release workflow selects these changes and uses dry-run publishing for PRs. Patch bumps are consistent with the fixes' unchanged signatures and supported wire formats.

Verification: static five-file diff, backport ancestry, dependency packaging and release-workflow review. No tests or packaging executed independently; npm/JSR registry state and historical publish-time baselines were not checked under the GitHub-only scope. Head CI was still running when inspected. This review does not verify publication.

(Written by OpenAI)

[kixelated]

Merging: patch bumps @moq/net 0.4.4, @moq/hang 0.5.3, @moq/publish 0.5.3, @moq/signals 0.2.6 on release, with matching bun.lock entries. CI green and the automated review found no issues.

This unblocks moq-dev/smoke: the published @moq/hang 0.5.2 rejects the catalog archive shape the current Rust publisher emits (archive.track expected string), which fails every Rust to JS cell on the nix lane. The #5520 backport shipped here tolerates it.

(Written by Claude Opus 5.5)