[DamianReeves]

Prepares v0.4.0-beta.12. It carries:

• Breaking: the built-in Gleam provider and the morphir gleam commands are gone (feat(cli)!: remove the built-in Gleam provider and the gleam subcommand #1123).
• Breaking: the MoonBit MEP guest kit moves to moonbit-model-stable-v1 (fix(mck): move the MoonBit MEP kit case to moonbit-model-stable-v1 #1127).
• The generic MEP guest kit profile generic-json-library-v1 (feat(mck): add a generic JSON Library profile to the MEP guest kit #1129).
• The MEP 0.2 extension pins: Avro 0.4.0, OpenAPI 0.5.0, Python 0.6.0, Rust 0.4.0, Scala Elm M13 (chore(extensions): pin the MEP 0.2 extension releases #1130).
• MoonBit 0.10.18 (build: upgrade MoonBit to 0.10.18 #1125).

The version bump covers Cargo.toml, Cargo.lock, the release workflow example, the install and packaging docs, the generated CLI docs and completions, and tests/ci/test_release_workflow.py.

Verification on macOS arm64

• mise run check: passed.
• cargo test --locked --package morphir: passed.
• python3 -B -m unittest discover -s tests/ci: 56 tests, OK.
• mise run ci:validate-tool-release-metadata: passed.
• morphir --version from the release binary: 0.4.0-beta.12.
• WASM extension tests with the release build and the pinned bundles: 10 of 10 passed.
• Repository publish, install and generate --target avro with the published Avro bundle in a clean home: every step exited 0 and the generate step wrote artifacts.
• Native Elm provider: compile --ir-version 3 and 4 wrote the matching formatVersion.

CI on this PR runs the host compatibility suite and the Elm and Scala CLI tests.

Left out on purpose

• chore(deps): update rust crate zip to v9 [security] #1111, zip v9 security update (GHSA-m665-v7pm-7grj): its Lint check fails. It goes into a later release. Correction: an earlier version of this note said that the CLI uses ZipWriter only. That is wrong. morphir-common and morphir-distribution in ecosystem/morphir-rust read archives with ZipArchive on zip 8.6.0, which is in the affected range. The published attack needs ZipStreamReader, and those crates do not use it. chore(deps): update rust crate zip to v9 [security] #1111 alone does not remove 8.6.0 from Cargo.lock.

[netlify]

✅ Deploy Preview for angry-raman-7c44f6 ready!

Name	Link
🔨 Latest commit	9abbe9f
🔍 Latest deploy log	https://app.netlify.com/projects/angry-raman-7c44f6/deploys/6ae74c78702d3710dfae044b
😎 Deploy Preview	https://deploy-preview-1131--angry-raman-7c44f6.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

---

To edit notification comments on pull requests, go to your Netlify project configuration.

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-11-01T14:28:49.615140Z	9abbe9f	PR opened

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.