chore(deps): vendor xlings 0.4.67 for the multi-index_repo install fix (#238)

xlings 0.4.67 carries openxlings/xlings#374 (fix(xim): surface multi-repo
install failures + best-effort catalog, cf9b60d5), so a workspace member
with >=2 inherited index_repos installs uncached packages instead of
failing silently at exit 1. Bump release/cross-build/e2e pins 0.4.62 ->
0.4.67.

Author: Sunrisepeak

.github/workflows/ci-linux-e2e.yml

@@ -158,7 +158,7 @@ jobs:
 
       - name: Bootstrap xlings + released mcpp
         run: |
-          curl -fsSL https://raw.githubusercontent.com/openxlings/xlings/main/tools/other/quick_install.sh | bash -s v0.4.62
+          curl -fsSL https://raw.githubusercontent.com/openxlings/xlings/main/tools/other/quick_install.sh | bash -s v0.4.67
           export PATH="$HOME/.xlings/subos/current/bin:$PATH"
           xlings update
           xlings install mcpp -y -g

.github/workflows/cross-build-test.yml

@@ -92,13 +92,17 @@ jobs:
       - name: Bootstrap mcpp via xlings
         env:
           XLINGS_NON_INTERACTIVE: '1'
-          # 0.4.62 (current) — kept in lock-step with the xlings the release
-          # is built/bundled against (release.yml). A past 0.4.61 "download 404
+          # 0.4.67 (current) — kept in lock-step with the xlings the release
+          # is built/bundled against (release.yml). Bumped 0.4.62 -> 0.4.67 for
+          # mcpp#238: xlings 0.4.67 carries the multi-index_repo install fix
+          # (openxlings/xlings#374, commit cf9b60d5) so a workspace member with
+          # >=2 inherited index_repos installs uncached packages instead of
+          # failing silently. A past 0.4.61 "download 404
           # for mcpp@<pin>" was NOT a version bug — the xlings-res/mcpp GitHub
           # release assets were uploaded in a broken state (records present,
           # blobs missing → 404 on GET); re-uploaded clean. The stale-INDEX
           # half is handled by the marker-clear below.
-          XLINGS_VERSION: '0.4.62'
+          XLINGS_VERSION: '0.4.67'
         run: |
           tarball="xlings-${XLINGS_VERSION}-linux-x86_64.tar.gz"
           curl -fsSL -o "/tmp/${tarball}" \
@@ -211,7 +215,7 @@ jobs:
       - name: Bootstrap mcpp via xlings
         env:
           XLINGS_NON_INTERACTIVE: '1'
-          XLINGS_VERSION: '0.4.62'
+          XLINGS_VERSION: '0.4.67'
         run: |
           tarball="xlings-${XLINGS_VERSION}-linux-x86_64.tar.gz"
           curl -fsSL -o "/tmp/${tarball}" \

.github/workflows/release.yml

@@ -96,7 +96,7 @@ jobs:
           # Pin xlings to a known-good version. The upstream install
           # script always grabs `latest` (no version override), so we
           # download + self-install manually to avoid broken releases.
-          XLINGS_VERSION: '0.4.62'
+          XLINGS_VERSION: '0.4.67'
         run: |
           if [ ! -x "$HOME/.xlings/subos/default/bin/xlings" ]; then
             tarball="xlings-${XLINGS_VERSION}-linux-x86_64.tar.gz"
@@ -278,10 +278,10 @@ jobs:
           echo "version=$VERSION" >> "$GITHUB_OUTPUT"
           echo "tag=v$VERSION"    >> "$GITHUB_OUTPUT"
 
-      - name: Bootstrap mcpp via xlings (latest 0.4.62)
+      - name: Bootstrap mcpp via xlings (latest 0.4.67)
         env:
           XLINGS_NON_INTERACTIVE: '1'
-          XLINGS_VERSION: '0.4.62'
+          XLINGS_VERSION: '0.4.67'
         run: |
           tarball="xlings-${XLINGS_VERSION}-linux-x86_64.tar.gz"
           curl -fsSL -o "/tmp/${tarball}" \
@@ -336,13 +336,13 @@ jobs:
           exec "$(dirname "$0")/bin/mcpp" "$@"
           LAUNCHER
           chmod +x "$STAGING/$WRAPPER/mcpp"
-          # Bundle the aarch64 xlings (0.4.62) so install.sh consumers on aarch64
+          # Bundle the aarch64 xlings (0.4.67) so install.sh consumers on aarch64
           # get an aarch64 xlings, not the x86_64 bootstrap one.
-          XLA="xlings-0.4.62-linux-aarch64.tar.gz"
+          XLA="xlings-0.4.67-linux-aarch64.tar.gz"
           if curl -fsSL -o "/tmp/$XLA" \
-               "https://github.com/openxlings/xlings/releases/download/v0.4.62/$XLA"; then
+               "https://github.com/openxlings/xlings/releases/download/v0.4.67/$XLA"; then
             tar -xzf "/tmp/$XLA" -C /tmp
-            XLBIN=$(find /tmp/xlings-0.4.62-linux-aarch64 -path '*/bin/xlings' -type f | head -1)
+            XLBIN=$(find /tmp/xlings-0.4.67-linux-aarch64 -path '*/bin/xlings' -type f | head -1)
             if [ -n "$XLBIN" ]; then
               mkdir -p "$STAGING/$WRAPPER/registry/bin"
               cp "$XLBIN" "$STAGING/$WRAPPER/registry/bin/xlings"
@@ -417,7 +417,7 @@ jobs:
       - name: Bootstrap mcpp via xlings
         env:
           XLINGS_NON_INTERACTIVE: '1'
-          XLINGS_VERSION: '0.4.62'
+          XLINGS_VERSION: '0.4.67'
         run: |
           if [ ! -x "$HOME/.xlings/subos/default/bin/xlings" ]; then
             WORK=$(mktemp -d)
@@ -599,7 +599,7 @@ jobs:
         shell: bash
         env:
           XLINGS_NON_INTERACTIVE: '1'
-          XLINGS_VERSION: '0.4.62'
+          XLINGS_VERSION: '0.4.67'
         run: |
           WORK=$(mktemp -d)
           zipfile="xlings-${XLINGS_VERSION}-windows-x86_64.zip"