Ttimmahlax · Oct 31, 2026 · Oct 30, 2026 · Oct 30, 2026 · Oct 30, 2026 · Oct 30, 2026
diff --git a/.cargo/audit.toml b/.cargo/audit.toml
@@ -0,0 +1,12 @@
+# cargo-audit's ignores. deny.toml carries the same advisories with the full
+# justification; keep the two lists in step (CI runs both).
+[advisories]
+ignore = [
+    # zip 8.6.0 extraction advisories, fixed only in zip 9, which candle-core
+    # 0.11 cannot take (it pins ^8.6). All three are in ZipArchive::extract /
+    # ZipStreamReader::extract; candle reads entries by name and never extracts.
+    # Added 2026-10-31. Review 2026-11-15, or when candle moves to zip 9.
+    "RUSTSEC-2026-0367",
+    "RUSTSEC-2026-0368",
+    "RUSTSEC-2026-0369",
+]
diff --git a/Cargo.lock b/Cargo.lock
diff --git a/Cargo.toml b/Cargo.toml
@@ -7,7 +7,7 @@ members = ["crates/*"]
 exclude = ["demo-ui"]
 
 [workspace.package]
-version = "0.8.0"
+version = "0.9.0"
 edition = "2024"
 rust-version = "1.95"
 license = "MIT OR Apache-2.0"
@@ -16,14 +16,14 @@ authors = ["Remade With Rust"]
 
 [workspace.dependencies]
 # ---- internal crates ----
-ffai-core = { path = "crates/ffai-core", version = "0.8.0" }
-ffai-media = { path = "crates/ffai-media", version = "0.6.8" }
-ffai-models = { path = "crates/ffai-models", version = "0.6.6" }
-ffai-mercury = { path = "crates/ffai-mercury", version = "1.0.5" }
-ffai-carmenta = { path = "crates/ffai-carmenta", version = "0.12.0" }
-ffai-diana = { path = "crates/ffai-diana", version = "0.8.0" }
-ffai-argus = { path = "crates/ffai-argus", version = "0.8.0" }
-ffai-bench = { path = "crates/ffai-bench", version = "0.7.7" }
+ffai-core = { path = "crates/ffai-core", version = "0.9.0" }
+ffai-media = { path = "crates/ffai-media", version = "0.7.0" }
+ffai-models = { path = "crates/ffai-models", version = "0.7.0" }
+ffai-mercury = { path = "crates/ffai-mercury", version = "1.1.0" }
+ffai-carmenta = { path = "crates/ffai-carmenta", version = "0.13.0" }
+ffai-diana = { path = "crates/ffai-diana", version = "0.9.0" }
+ffai-argus = { path = "crates/ffai-argus", version = "0.9.0" }
+ffai-bench = { path = "crates/ffai-bench", version = "0.8.0" }
 
 # ---- tensor spine ----
 # Candle is FFai's PyTorch: every engine shares its Tensor/Device types so
@@ -46,7 +46,6 @@ toml = "0.8"
 anyhow = "1"
 clap = { version = "4", features = ["derive"] }
 hound = "3"
-dirs = "6"
 sha2 = "0.10"
 serde_json = "1"
 regex = "1"

diff --git a/crates/ffai-argus-wasm/CHANGELOG.md b/crates/ffai-argus-wasm/CHANGELOG.md
@@ -7,6 +7,12 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.3.0](https://github.com/Remade-With-Rust/FFAI/compare/ffai-argus-wasm-v0.2.0...ffai-argus-wasm-v0.3.0) - 2026-10-31
+
+### Changed
+
+- Requires `ffai-core` 0.9: `OcrOptions` gained `deskew` and `OcrOutput` gained `skew_degrees` and `turns`, so the core types this crate exposes changed.
+
 ## [0.2.0](https://github.com/Remade-With-Rust/FFAI/compare/ffai-argus-wasm-v0.1.3...ffai-argus-wasm-v0.2.0) - 2026-10-08
 
 ### Changed

diff --git a/crates/ffai-argus-wasm/Cargo.toml b/crates/ffai-argus-wasm/Cargo.toml
@@ -1,7 +1,7 @@
 [package]
 name = "ffai-argus-wasm"
 description = "Argus in the browser — pure-Rust SmolVLM image captioning compiled to WebAssembly, no ONNX runtime, no Python"
-version = "0.2.0"
+version = "0.3.0"
 edition.workspace = true
 rust-version.workspace = true
 license.workspace = true
@@ -25,7 +25,7 @@ ffai-core = { workspace = true }
 # **0.7.2, not 0.7.1** — see the note in `ffai-mercury-wasm`. `SmolVlm::from_bytes`
 # and `ArgusBytes` first exist in 0.7.2, and a tarball verification resolves
 # this from crates.io rather than from the path.
-ffai-argus = { path = "../ffai-argus", version = "0.8.0", default-features = false }
+ffai-argus = { path = "../ffai-argus", version = "0.9.0", default-features = false }
 wasm-bindgen = "=0.2.121"   # pinned to the installed wasm-bindgen-cli; the two must match exactly
 
 # The binary is the only thing entitled to choose an allocator, and a cdylib IS

diff --git a/crates/ffai-argus/CHANGELOG.md b/crates/ffai-argus/CHANGELOG.md
@@ -7,6 +7,12 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.9.0](https://github.com/Remade-With-Rust/FFAI/compare/ffai-argus-v0.8.0...ffai-argus-v0.9.0) - 2026-10-31
+
+### Changed
+
+- Requires `ffai-core` 0.9: `OcrOptions` gained `deskew` and `OcrOutput` gained `skew_degrees` and `turns`, so the core types this crate exposes changed.
+
 ## [0.8.0](https://github.com/Remade-With-Rust/FFAI/compare/ffai-argus-v0.7.5...ffai-argus-v0.8.0) - 2026-10-08
 
 ### Changed

diff --git a/crates/ffai-argus/Cargo.toml b/crates/ffai-argus/Cargo.toml
@@ -19,7 +19,7 @@ ffai-core = { workspace = true }
 # their own weights; they must not inherit fetch just because Argus is linked.
 # Not `workspace = true`: cargo forbids overriding default-features on an
 # inherited dep.
-ffai-models = { path = "../ffai-models", version = "0.6.6", default-features = false }
+ffai-models = { path = "../ffai-models", version = "0.7.0", default-features = false }
 # The tokenizer is the ENGINE's business now, not just the step-4 test's: the
 # assembled prompt has to become ids and the generated ids have to become text.
 tokenizers = { workspace = true }

diff --git a/crates/ffai-argus/README.md b/crates/ffai-argus/README.md
@@ -407,9 +407,9 @@ or in `Cargo.toml`:
 
 ```toml
 [dependencies]
-ffai-argus = "0.6"    # the engine
+ffai-argus = "0.9"    # the engine
 ffai-core  = "0.7"    # the VlmEngine trait, the registry, the cost counters
-ffai-media = "0.6"    # decoding an image/video file is the CALLER's job
+ffai-media = "0.7"    # decoding an image/video file is the CALLER's job
 ```
 
 `ffai-media` is separate on purpose: the engine takes an already-decoded

diff --git a/crates/ffai-bench/CHANGELOG.md b/crates/ffai-bench/CHANGELOG.md
@@ -7,6 +7,12 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.8.0](https://github.com/Remade-With-Rust/FFAI/compare/ffai-bench-v0.7.7...ffai-bench-v0.8.0) - 2026-10-31
+
+### Changed
+
+- Requires `ffai-core` 0.9: `OcrOptions` gained `deskew` and `OcrOutput` gained `skew_degrees` and `turns`, so the core types this crate exposes changed.
+
 ## [0.7.7](https://github.com/Remade-With-Rust/FFAI/compare/ffai-bench-v0.7.6...ffai-bench-v0.7.7) - 2026-09-25
 
 ### Added

diff --git a/crates/ffai-bench/Cargo.toml b/crates/ffai-bench/Cargo.toml
@@ -4,7 +4,7 @@ description = "FFai's analyzer — one call to compare any engine against world
 # the runner records a clip failure and continues instead of aborting the
 # whole corpus, and decode is wrapped so a panicking dependency costs one
 # page rather than the run.
-version = "0.7.7"
+version = "0.8.0"
 edition.workspace = true
 rust-version.workspace = true
 license.workspace = true