chore(deps): bump pulseengine/rivet from 0.22.1 to 0.24.0

[dependabot]

Bumps pulseengine/rivet from 0.22.1 to 0.24.0.

Release notes

Sourced from pulseengine/rivet's releases.

Rivet v0.24.0

What's Changed

• feat(serve): surface per-artifact lifecycle gaps in the artifacts API (REQ-244 pt1, #622) by @​avrabe in pulseengine/rivet#647
• feat(serve): overview flags per-artifact lifecycle gaps with a badge (REQ-244 pt2, #622) by @​avrabe in pulseengine/rivet#651
• fix(check): skip bidirectional oracle when inverse is not authorable (#648) by @​avrabe in pulseengine/rivet#650
• feat(serve): artifact view source link opens the /source viewer at the artifact line (REQ-243, #623) by @​avrabe in pulseengine/rivet#653
• feat(serve): artifact detail renders a Test Result Trace panel (REQ-238, #547) by @​avrabe in pulseengine/rivet#654
• chore(release): v0.24.0 — serve traceability UX (REQ-238, REQ-243, REQ-244) by @​avrabe in pulseengine/rivet#655

Full Changelog: pulseengine/rivet@v0.23.0...v0.24.0

Rivet v0.23.0

What's Changed

• plan(roadmap): map open issues into v0.23/v0.24/v0.25 (REQ-241..251) by @​avrabe in pulseengine/rivet#637
• fix(validate): validate and validate --direct produce identical output (REQ-241, #620) by @​avrabe in pulseengine/rivet#638
• fix(verify): default marker scan reaches member crates in a workspace (REQ-242, #603) by @​avrabe in pulseengine/rivet#639
• fix(validate): sync artifact-id shape with the commit-trailer parser (REQ-239, #577) by @​avrabe in pulseengine/rivet#640
• feat(release): configurable release-status readiness — ready-when + coverage (REQ-240, #612) by @​avrabe in pulseengine/rivet#641
• feat(validate): lifecycle gap names the ASPICE verification chain (REQ-237, #350) by @​avrabe in pulseengine/rivet#642
• feat(check): rivet check verification-evidence — named-test-exists oracle (REQ-236, #556) by @​avrabe in pulseengine/rivet#643
• feat(trace): rivet trace-results — forward req→test-result trace (REQ-238 pt1, #547) by @​avrabe in pulseengine/rivet#645
• chore(release): v0.23.0 — Traceability evidence (REQ-236..242) by @​avrabe in pulseengine/rivet#646

Full Changelog: pulseengine/rivet@v0.22.2...v0.23.0

Rivet v0.22.2

What's Changed

• plan(v0.23): REQ-240 — coverage-based release cuttability (#612) by @​avrabe in pulseengine/rivet#616
• fix(modify): --add-tag/--remove-tag no longer corrupt a block-style tags list (#625) by @​avrabe in pulseengine/rivet#626
• fix: three correctness bugs from a dogfooding bug-hunt (validate self-link, empty release, add routing) by @​avrabe in pulseengine/rivet#630
• build(deps): bump wasmtime 44.0.3 → 45.0.3 for RUSTSEC-2026-0188 (#632) by @​avrabe in pulseengine/rivet#633
• chore(release): v0.22.2 — dogfooding data-loss/correctness fixes + wasmtime security by @​avrabe in pulseengine/rivet#635

Full Changelog: pulseengine/rivet@v0.22.1...v0.22.2

Changelog

Sourced from pulseengine/rivet's changelog.

[0.24.0] - 2026-07-02

Added

• Graphical req → test-result trace on the dashboard (REQ-238, #547) — the artifact detail view renders a "Test Result Trace" panel: it walks forward to the verifications/tests that trace back to the artifact, rolls their recorded results into a verdict badge (passing / failing / no test evidence), and lists each reached node with its hop distance, link type, and latest result. The dashboard counterpart of rivet trace-results (which shipped in 0.23.0).
• Per-artifact lifecycle-gap badge in the serve overview (REQ-244, #622) — the artifacts overview flags what each artifact is still missing to complete its downstream trace (⚠ N gap(s)), matching the per-artifact validation view. The artifacts API exposes the same per-artifact missing field for bulk queries.

Changed / Fixed

• Artifact-view source link opens the built-in /source viewer at the artifact's definition line (REQ-243, #623) — previously a dead href="#" that did nothing in a plain browser and only worked via the VSIX editor shim. The dashboard now deep-links into the source viewer (scrolling to the line) while keeping the data-source-* attributes so the VSIX webview still opens the file in the editor.
• rivet check bidirectional no longer demands non-authorable inverses (#648). When a schema declares link-types.X.inverse: Y but does not declare Y as its own link-types: entry, authoring a Y link would make rivet validate FAIL with unknown-link-type. The oracle now treats such forward links as bidirectionally-implicit — the schema is unidirectionally declared and demanding a materialized inverse would make the oracle unsatisfiable in tandem with validate. Fixes the aspice-schema case (satisfies, verifies, derives-from) where one oracle's green was another's red. Adds Schema::is_authorable_link_type.

[0.23.0] - 2026-07-01

Theme: Traceability evidence — make the requirement → verification → test chain mechanically drift-proof, and make the validator's own signals trustworthy and consistent. Six requirements, each shipped with a regression test proven to fail without the fix. Planned, executed, and gated entirely with rivet's own release: tooling.

Added

• rivet check verification-evidence (REQ-236, #556) — a named-test-exists oracle. A verification step commonly ties a requirement to a test via fields.steps[].run: "cargo test -p X some_test", but cargo test typo exits 0 with "0 passed", silently keeping the requirement verified. This asserts every named cargo-test filter matches a real test in the scanned Rust sources; a missing test fails the check.
• rivet trace-results <id> (REQ-238, #547) — the forward req → test-result trace: from a requirement, walk backlinks (through the ASPICE V) to the tests that cover it and their latest pass/fail, with a roll-up verdict. Text or

... (truncated)

Commits

• a23af22 Merge pull request #655 from pulseengine/release/v0.24.0
• 3f548ae chore(release): v0.24.0 — serve traceability UX (REQ-238, REQ-243, REQ-244)
• 84ff120 Merge pull request #654 from pulseengine/feat/req-238-trace-results-view
• a780189 feat(serve): artifact detail renders a Test Result Trace panel (REQ-238, #547)
• ce754d3 Merge pull request #653 from pulseengine/feat/req-243-source-open
• 3ecc188 feat(serve): artifact view source link opens the /source viewer at the artifa...
• cdeb7f8 Merge pull request #650 from pulseengine/fix/issue-648-bidirectional-unauthor...
• f2329f0 Merge pull request #651 from pulseengine/feat/req-244-overview-badge
• 837aaf6 feat(serve): overview flags per-artifact lifecycle gaps with a badge (REQ-244...
• 35bd2ad fix(check): skip bidirectional oracle when inverse is not authorable
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)