chore(1.x): release 1.19.0

[github-actions]

🤖 I have created a release beep boop

1.19.0 (2026-10-12)

Features

• archive: extract .tgz and .tar assets (9cc255c), closes #152
• repository: support self-hosted servers via repository URLs (d78400a)
• software: address the entry of a package as <package>#<id> and report shadowed entries (03878e9)
• software: read software definitions from Composer packages (#169) (03878e9)
• version: match constraints with DLoad's own version ordering (#155) (fbdca9d)
• version: support hyphen ranges, !=/<>, a v prefix and constraints with five or more number parts (fbdca9d), closes #153 #154

Bug Fixes

• downloader: fall back to the next repository when one has an invalid URI (405f712)
• downloader: fall back to the next repository when one has an unknown type (dfba2be)
• downloader: log repository errors whose messages contain a percent sign (405f712)
• downloader: name the skipped OS packages in the failure report and warn when an older release is taken instead (2ead813)
• downloader: rank universal macOS builds and x86-64 microarchitecture levels (#167) (ac6d681)
• downloader: remove the partial file of a failed download (#166) (9251857)
• downloader: skip archives DLoad cannot unpack when a binary is expected (#164) (9cc255c)
• downloader: skip OS packages when a binary is expected (#149) (2ead813)
• registry: continue the tail from the last stored release (#160) (b345838)
• repository: keep API tokens on their server across redirects (fdb1aeb)
• repository: send the GitLab token only to the GitLab server (d78400a), closes #143
• repository: sort pre-releases by stability weight and number (0331f5d)
• version: accept build metadata like +build.5 in constraints again, as 1.18.0 did, and after a pre-release (0bb33e1)
• version: ignore SemVer build metadata and compare long numbers (#158) (0bb33e1)
• version: match a constraint with a numbered pre-release (0331f5d)
• version: read a pre-release before a feature as a range bound (#162) (3faa49a)

Documentation

• note that OS packages are not selected for a binary and how deep the fallback goes (2ead813)

Code Refactoring

• installer: install downloads through a pipeline (4df3181)
• installer: make the installation steps readonly classes (f259dc6)
• installer: prepare the destination around the steps, not in one (5174300)
• software: collect the software registry through a pipeline (51a3d7e)
• velox: build the config through the common pipeline (6e7998e)
• velox: drop the unused config pipeline metadata (#146) (c61c8f0)

---

This PR was generated with Release Please. See documentation.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[github-actions]

🤖 Created releases:

• 1.19.0

🌻