Pin monorepo packages with >= instead of caret

Message

Monorepo packages advance in lockstep with the toolchain and are not independently versioned, so a caret range -- which carries an upper bound and excludes the next minor -- is the wrong shape for them. A minimum with no ceiling is satisfied by every later runtime.

One pattern across the ecosystem, per David's ruling 2026-09-03. Floors are preserved exactly; only the ceiling is removed. Pins whose url is an extracted repo are untouched -- those packages ARE independently versioned and caret is correct there.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01P6mPymR1ZBRV1nuyDpBxDF

Changed

 package.sgl | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

Diff

package.sglmodified

@@ -28,7 +28,7 @@

;; identical pin was measured the same way with the same result. See

;; topics/sigil-crypto-017-pin-does-not-protect-native-codegen.

(from-git url: "codeberg:sigil/sigil"

−31

package: "sigil-lib" version: "^0.21")

+31

package: "sigil-lib" version: ">=0.21")

(from-git url: "codeberg:sigil/sigil-crypto" version: "^0.16"))

;; These must track the host runtime. At ^0.17 they resolved to

@@ -36,8 +36,8 @@

;; host emits v11: `sigil test` died with "unsupported bytecode version 11

;; (expected 10)" before running anything. At ^0.19: 19/19 pass.

dev-dependencies: (list

−39

(from-git url: "codeberg:sigil/sigil" package: "sigil-test" version: "^0.21")

−40

(from-git url: "codeberg:sigil/sigil" package: "sigil-test-runner" version: "^0.21"))

+39

(from-git url: "codeberg:sigil/sigil" package: "sigil-test" version: ">=0.21")

+40

(from-git url: "codeberg:sigil/sigil" package: "sigil-test-runner" version: ">=0.21"))

;; Native library definition

;; Note: mbedTLS headers/libs come from sigil-crypto dependency — the