mirror of
https://github.com/gastownhall/beads.git
synced 2026-09-14 20:17:24 +08:00
Vishnu J
851aa2f20a
* fix(deps): bump dolt/go past upstream manifest-missing-chunk defense (#4070) Pin github.com/dolthub/dolt/go to 796d074977417da931df65202a79e0a7f532a3db. That hop includes: - 23ccbf9442275166f168939277a5b4a348a63c9d — reject a file manifest update that references a missing table file (the defense itself) - 796d074977417da931df65202a79e0a7f532a3db — doc/test follow-up to the defense commit (no production-semantics change) A non-atomic backup sync can leave the backup manifest ahead of chunk files; subsequent syncs then fail with "table file not found" and stay broken. The upstream defense turns that silent corruption into a loud failed sync. Beads' previous pin (a6690826d767, 2026-07-15) predates both commits. Minimal-churn pin: do not bump to today's dolt tip. go mod tidy did not force a later version. This is a mitigation, not a root-cause fix: backup file+manifest publish remains non-atomic, and backups already in the manifest-ahead state are not repaired by this change. Mitigates #4070 * fix(nix): update vendorHash for the dolt/go bump The go.mod/go.sum bump in this PR invalidates the pinned vendorHash, so `nix build .#default` fails with a fixed-output hash mismatch. Update it to the value CI computed: specified: sha256-D+KDoLFJHpt9D9rCrtE3NMfL4fgK7UxpdKlCxp5yz5Y= got: sha256-wDU1tw/4t2CetwQl4+zUhlDI70dSasLLI2Gy66ZyhQQ= The repo documents this coupling in .github/dependabot.yml; the existing "Update vendorHash for dependabot Go bumps" workflow only fires for dependabot PRs, so a manual bump is needed here.
45 lines
1.0 KiB
Nix
45 lines
1.0 KiB
Nix
{
|
|
lib,
|
|
self,
|
|
buildGoModule,
|
|
git,
|
|
...
|
|
}:
|
|
buildGoModule {
|
|
pname = "beads";
|
|
version = "1.2.2";
|
|
|
|
src = self;
|
|
|
|
# Point to the main Go package
|
|
subPackages = [ "cmd/bd" ];
|
|
tags = [ "gms_pure_go" ];
|
|
doCheck = false;
|
|
|
|
# proxyVendor avoids vendor/modules.txt consistency checks when the vendored
|
|
# tree lags go.mod/go.sum.
|
|
proxyVendor = true;
|
|
vendorHash = "sha256-wDU1tw/4t2CetwQl4+zUhlDI70dSasLLI2Gy66ZyhQQ=";
|
|
|
|
# Match go.mod to the selected Nix Go toolchain. buildGoModule also builds
|
|
# vendored dependencies in the Nix sandbox, where toolchain downloads are not
|
|
# available.
|
|
postPatch = ''
|
|
goVer="$(go env GOVERSION | sed 's/^go//')"
|
|
go mod edit -go="$goVer"
|
|
'';
|
|
|
|
env.GOTOOLCHAIN = "local";
|
|
|
|
# Git is required for tests
|
|
nativeBuildInputs = [ git ];
|
|
|
|
meta = with lib; {
|
|
description = "beads (bd) - An issue tracker designed for AI-supervised coding workflows";
|
|
homepage = "https://github.com/gastownhall/beads";
|
|
license = licenses.mit;
|
|
mainProgram = "bd";
|
|
maintainers = [ ];
|
|
};
|
|
}
|