Block a user
ff42f21839
Merge pull request 'Refuse a build whose module directory, archive or bundle output leads out of the module through a link, so a repository cannot make build-agent pack files from the build node (issue 1609)' (#415) from fix/1609-archive-symlink into main
0caa8c6844
Refuse a bundle whose output directory leads out of the module through a link, so a repository cannot make the build write into or pack files it does not hold (issue 1609)
fcca6ba9e0
Refuse an archive or a module directory that leads out of the repository through a link in the tree, so a repository cannot make the build pack files it does not hold (issue 1609)
Refuse a build whose module directory, archive or bundle output leads out of the module through a link, so a repository cannot make build-agent pack files from the build node (issue 1609)
Merge check at 0caa8c68
Judged: head 0caa8c6844d9 merged into trunk 0205b8f7080a; read beside it: mesh-catalog 0f2cee1bea4e, mesh-controller-main 0205b8f7080a, mesh-host `c5c4caa2a4ab…
Pack archive artifacts in mesh-build-go, a module's directory or a pinned file, and refuse any path that leads out of the module through a link (issue 1589, ADR 0478 §1)
Merge check at e023f699
Judged: head e023f69989ab merged into trunk 0f2cee1bea4e; read beside it: mesh-controller 0205b8f7080a, mesh-controller-main 0205b8f7080a, mesh-host…
Let the build modules answer their own step results and toolchains, so a fetch's workspace and a build's digest can be read (issue 1562, build-module half)
Delivery novox/mesh-catalog@c33b83dce7d5 — proposed since 2026-10-21T10:10:02Z
Transitions
- 2026-10-21 10:10 (new) → proposed (announced): novox/mesh-c…
Let the build modules answer their own step results and toolchains, so a fetch's workspace and a build's digest can be read (issue 1562, build-module half)
ff849d9f62
Add netcheck_request: one HTTP request and its whole answer, so a service's live answers can be captured (issue 1643)
f0c8958dd2
Merge pull request 'Apply a patch in the forge tool itself when the forge's diffpatch answers 500, so a patch whose context holds a non-ASCII character is taken (issue 1604)' (#407) from fix/1604-patch-applied into main
324e331184
Anchor patch hunks as git apply does, refuse patches touching non-100644 files by their real mode, survive bare-CR context lines (issue 1604 review)
e5cfcb316a
Fall back to the tool's own patch applier when the forge answers 500, with tests (issue 1604)
e6053262e4
Apply a unified diff in the forge tool itself, for the patches the forge's diffpatch refuses (issue 1604)
Apply a patch in the forge tool itself when the forge's diffpatch answers 500, so a patch whose context holds a non-ASCII character is taken (issue 1604)
Make dev-tools, lab and the build modules need the go and nodejs modules instead of declaring the toolchain packages, step B of issue 1573 (ADR 0477 §4)
Delivery novox/mesh-catalog@36259f3406f7 — proposed since 2026-10-21T10:08:38Z
Transitions
- 2026-10-21 10:08 (new) → proposed (announced): novox/mesh-c…
Make dev-tools, lab and the build modules need the go and nodejs modules instead of declaring the toolchain packages, step B of issue 1573 (ADR 0477 §4)
Apply a patch in the forge tool itself when the forge's diffpatch answers 500, so a patch whose context holds a non-ASCII character is taken (issue 1604)
Merge check at 324e3311
Judged: head 324e331184da merged into trunk 0f2cee1bea4e; read beside it: mesh-controller 0205b8f7080a, mesh-controller-main 0205b8f7080a, mesh-host…
Take the mesh-sdk that knows shares on an s3-bucket requirement, and prove the controller composes and checks it (issue 1593)
Delivery novox/mesh-controller@64c1996a5e9d — proposed since 2026-10-21T10:05:47Z
Transitions
- 2026-10-21 10:05 (new) → proposed (announced):…
Take the mesh-sdk that knows shares on an s3-bucket requirement, and prove the controller composes and checks it (issue 1593)
mesh-tools
deleted branch fix/1615-module-toolchains-root from novox/mesh-sdk
2026-10-21 10:02:12 +00:00
cb54756c38
Merge pull request 'Give delivery.Module the toolchains its fingerprint was computed with, and '.' as a root module's path, so the builder builds a key only with its own toolchain (issue 1615)' (#55) from fix/1615-module-toolchains-root into main
89dd57bed0
Give delivery.Module the toolchains its fingerprint was computed with, and '.' as a root module's path, so the builder builds a key only with its own toolchain (issue 1615)
Give delivery.Module the toolchains its fingerprint was computed with, and '.' as a root module's path, so the builder builds a key only with its own toolchain (issue 1615)
Give delivery.Module the toolchains its fingerprint was computed with, and '.' as a root module's path, so the builder builds a key only with its own toolchain (issue 1615)
Merge check at 89dd57be
Judged: head 89dd57bed05d merged into trunk 465beb4ea5e3; read beside it: mesh-catalog 0f2cee1bea4e, mesh-controller 0205b8f7080a, mesh-controller-main…
Pack archive artifacts in mesh-build-go, a module's directory or a pinned file, and refuse any path that leads out of the module through a link (issue 1589, ADR 0478 §1)
Delivery novox/mesh-catalog@e023f69989ab — proposed since 2026-10-21T09:58:42Z
Transitions
- 2026-10-21 09:58 (new) → proposed (announced): novox/mesh-c…