# Bootrecov v0.4.18

Delivery moves to native Entire source, repository-owned Dagu workflows and
protected native downloads/AUR publication. Linux amd64 and arm64 remain the
release targets. Product boot behavior and risk acknowledgement are unchanged.

Bubble Tea updates to v2.1.1 with terminal-dimension and total-cell allocation
checks for [GHSA-qc58-pfg9-7pph](https://github.com/charmbracelet/bubbletea/security/advisories/GHSA-qc58-pfg9-7pph).
The upstream advisory describes denial of service from untrusted terminal input
in shared services and states that ordinary local single-user TUIs are unaffected.

Every native release runs the existing Arch cleanup/BusyBox restore gate and
Ubuntu/Debian/Fedora recovery boot matrix in serial disposable QEMU containers
before publication. The equivalent default Ubuntu gate runs once.
Arch source packages preserve and verify the removal hook alongside their
recipe and source checksum. Additional platform/support gates still apply.