chore: release alkhttp 0.8.1

- version bump 0.8.0 -> 0.8.1 (patch per the dep-wave convention:
  0.4.1 rode alkcall 0.7.1; alkcall 0.10.1 is a patch release with no
  API or wire-format change, see the preceding consume commit)
- changelog: cut [0.8.1] with the alkcall 0.10.1 consumption (the
  adopt-window ordering fix; no surface reached through the HTTP API)
- README dependency snippet 0.7.0 -> 0.8.1 (was left stale by the
  0.8.0 release)

Verification: cargo test (467), clippy --all-targets -D warnings,
fmt --check, cargo publish --dry-run clean

CHANGELOG.md

@@ -4,6 +4,28 @@ All notable changes to this crate are documented here. The format is
 based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and
 this crate adheres to [Semantic Versioning](https://semver.org/).
 
+## [0.8.1] — 2026-10-22
+
+### Changed
+
+- **`alkcall` dependency consumed at 0.10.1** (patch pickup; the
+  adoption-window ordering fix, alkcall review 013, routed from
+  alkgit's wave-2 gate). A chunk routed by the channels demux inside
+  the `adopt_channel` install→drain window was delivered **ahead of**
+  earlier-parked early arrivals, inverting the channel's byte-stream
+  order, and a related loss variant parked a chunk forever after the
+  drain had removed its queue. This crate reaches the fixed paths via
+  the shared `ChannelManager`; no alkcall API surface used here
+  changed — no code change in this crate. The dependency requirement
+  is tightened `0.10` → `0.10.1` so downstream projects composing
+  this crate with alkcall resolve the fixed version rather than an
+  older 0.10.x lockfile entry.
+
+Patch bump 0.8.0 → 0.8.1 per the dep-wave convention (0.4.1 rode
+alkcall 0.7.1): alkcall 0.10.1 is a patch release with no API or
+wire-format change (`EventEnvelope`, the channels 8-byte chunk
+header), so nothing semver-relevant moves on this crate's surface.
+
 ## [0.8.0] — 2026-10-17
 
 ### Added

Cargo.lock

@@ -27,9 +27,9 @@ dependencies = [
 
 [[package]]
 name = "alkcall"
-version = "0.10.0"
+version = "0.10.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "6b8ef0591beff0e3fe64b7277a67d8e7caeccf71c27538b4b7aced028d22ca44"
+checksum = "690d747f42baf385dc22cd120f79d43cf1ea239bc426675e0e1e225b57fc031a"
 dependencies = [
  "async-trait",
  "bytes",
@@ -48,7 +48,7 @@ dependencies = [
 
 [[package]]
 name = "alkhttp"
-version = "0.8.0"
+version = "0.8.1"
 dependencies = [
  "alkcall",
  "arc-swap",

Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "alkhttp"
-version = "0.8.0"
+version = "0.8.1"
 edition = "2021"
 rust-version = "1.88"
 license = "MIT OR Apache-2.0"
@@ -46,7 +46,7 @@ h2 = ["server", "dep:hyper", "hyper-util/http2", "hyper/http2"]
 http1 = ["server", "dep:hyper", "hyper-util/http1", "hyper/http1"]
 
 [dependencies]
-alkcall = { version = "0.10", features = ["gateway"] }
+alkcall = { version = "0.10.1", features = ["gateway"] }
 arc-swap = { version = "1", optional = true }
 axum = { version = "0.8", optional = true, features = ["ws"] }
 base64 = { version = "0.22", optional = true }

README.md

@@ -161,7 +161,7 @@ A lean single-side build takes `default-features = false` plus the side
 it needs:
 
 ```toml
-alkhttp = { version = "0.7.0", default-features = false, features = ["server"] }
+alkhttp = { version = "0.8.1", default-features = false, features = ["server"] }
 ```
 
 ## Security posture

fuzz/Cargo.lock

@@ -27,9 +27,9 @@ dependencies = [
 
 [[package]]
 name = "alkcall"
-version = "0.10.0"
+version = "0.10.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "6b8ef0591beff0e3fe64b7277a67d8e7caeccf71c27538b4b7aced028d22ca44"
+checksum = "690d747f42baf385dc22cd120f79d43cf1ea239bc426675e0e1e225b57fc031a"
 dependencies = [
  "async-trait",
  "bytes",
@@ -48,7 +48,7 @@ dependencies = [
 
 [[package]]
 name = "alkhttp"
-version = "0.8.0"
+version = "0.8.1"
 dependencies = [
  "alkcall",
  "arc-swap",