wip

docs/CHANGELOG.md

@@ -2,6 +2,41 @@
 
 ---
 
+## V36 2026-03-20 22:00:00
+
+**Fix Phase 0 download script — 10+ version/filename mismatches with build scripts**
+
+### Changes:
+- Rewrote `toolchain/scripts/000a-download-sources.sh`:
+  - Fixed binutils URL (was 2.46.0, build expects 2.46)
+  - Fixed m4 version (was 1.4.21 on mirror but build expected 1.4.20 — updated build to 1.4.21)
+  - Fixed ncurses URL (was generic `ncurses.tar.gz`, now versioned `ncurses-6.5.tar.gz`)
+  - Fixed coreutils URL (was 9.10, build expects 9.6)
+  - Fixed diffutils URL (was 3.12, build expects 3.10)
+  - Fixed grep URL (was 3.12, build expects 3.14)
+  - Fixed make URL (was 4.4, build expects 4.4.1)
+  - Fixed tar URL (was `tar-latest.tar.xz`, now `tar-1.35.tar.xz`)
+  - Fixed gettext URL (was 1.0, build expects 0.23.1)
+  - Fixed zlib URL (was generic `zlib.tar.gz`, now `zlib-1.3.1.tar.xz`)
+  - Fixed util-linux URL (was GitHub archive v2.41.3, now kernel.org v2.40.4)
+  - Replaced all Danish mirror URLs (ftp.klid.dk) with canonical ftp.gnu.org URLs
+  - Fixed glibc FHS patch URL to match LFS 13.0 naming convention
+  - Added second argument to download() for renaming files on download
+  - Every download URL now exactly matches the tarball name expected by its build script
+- Updated `toolchain/scripts/006-m4.sh`: VERSION 1.4.20 → 1.4.21 (latest stable)
+- Updated `toolchain/VERSION_MANIFEST.md`: synced all versions and tarball names
+
+### Plan deviation/changes:
+- None — this is a bugfix. Without these fixes, Phase 0 would fail immediately
+  on the first `tar -xf` command because the downloaded filenames wouldn't match.
+
+### What is missing/needs polish:
+- Download URLs not verified to be reachable (some GNU mirrors may be down)
+- Some packages may have newer versions available (per CLAUDE.md Rule 3) but we're
+  matching LFS 13.0 versions for proven compatibility during initial bootstrap
+
+---
+
 ## V35 2026-03-20 21:00:00
 
 **Harden dpack repo loading and fix search command failure**