build(deps): pin Linsang with Io.operateTimeout socket deadlines

- Bump Linsang to d2a076e: reads and small writes wait on the connection
  task instead of racing helper tasks, about 3x faster round trips
- Record the new pin and its test results in the ledger

Author: jinzhongjia

build.zig.zon

@@ -5,8 +5,8 @@
     .minimum_zig_version = "0.17.0",
     .dependencies = .{
         .linsang = .{
-            .hash = "Linsang-0.0.0-SZhixHv2BgB7_1UuS6SEKvRKgn9utUafV-as1ez8Y6hs",
-            .url = "https://github.com/jinzhongjia/Linsang/archive/f75ef283a7323665a4cd0a945d3e5fa36c838784.tar.gz",
+            .hash = "Linsang-0.0.0-SZhixP0MBwCW5esmCkRGAtRNDEn756CwEFGc-HtvTYNL",
+            .url = "https://github.com/jinzhongjia/Linsang/archive/d2a076e1ffc0bccb8a8c9ed87af313049567e597.tar.gz",
         },
     },
     .paths = .{

docs/PURE_ZIG_REFACTOR.md

@@ -83,7 +83,7 @@ macOS transparency/profile and Wayland absolute-coordinate limits are unchanged.
 | Upstream WebUI | Its core is the roughly 14,500-line `src/webui.c`, mixing protocol, server, browser, WebView, and process management |
 | Browser bridge | About 1,006 lines of TypeScript using the 8-byte WebUI binary header |
 | Linsang | Zig 0.17 with HTTP/1.1, WebSocket, static files, TLS, and connection lifecycle support |
-| Linsang validation | At `f75ef283a7323665a4cd0a945d3e5fa36c838784` (Zig 0.17.0, cancelation-independent stop), 95 tests pass on macOS and the 15 Linux-only tests skip; Linux CI runs all of them, plus fuzzing and TLS interop |
+| Linsang validation | At `d2a076e1ffc0bccb8a8c9ed87af313049567e597` (Zig 0.17.0, cancelation-independent stop, `Io.operateTimeout` socket deadlines), 96 tests pass on macOS and the 15 Linux-only tests skip (all 111 pass on macOS with the gates lifted); Linux CI runs all of them, plus fuzzing and TLS interop |
 
 [Linsang issue #1](https://github.com/jinzhongjia/Linsang/issues/1) added a
 reference-counted `WebSocketPeer`, immediate cross-task sends, safe send/close
@@ -668,8 +668,10 @@ This snapshot used Linsang `db11eb05e897e4dccdab701e110dc8a6948cb690`, from
 [PR #3](https://github.com/jinzhongjia/Linsang/pull/3) (authorization-context,
 deadline, canonical-path, immutable TLS-reader, and concurrency fixes). That PR
 has since been merged. Linsang is now pinned to
-`f75ef283a7323665a4cd0a945d3e5fa36c838784` on `main`: the Zig 0.17.0 port
-plus a stop that does not depend on cancelation.
+`d2a076e1ffc0bccb8a8c9ed87af313049567e597` on `main`: the Zig 0.17.0 port, a
+stop that does not depend on cancelation, and socket deadlines through
+`Io.operateTimeout`, which make keep-alive and WebSocket round trips about
+three times faster.
 
 The permanent exclusions remain unchanged: no C ABI compatibility layer, no
 old-Zig compatibility code, and no automatic self-signed certificate. Platform