The build modules pin mesh-sdk's list-form level digest, so a check of a repository with a package named token ends (issue 1930, with mesh-sdk and mesh-delivery)
#467
Merged
jschoubbenmerged 1 commits from fix/1930-digest-shape into main2026-10-23 22:08:24 +00:00
Fixes issue 1930 with mesh-sdk and mesh-delivery on fix/1930-digest-shape (one delivery group).
mesh-build-go, mesh-build-node and mesh-build-image pin mesh-sdk 403a5d72 (the group's mesh-sdk head), whose stored level digest is a list and whose finish says a refused end.
mesh-build-go asks_test.go reads Digest.Map().
Tests: unit suites green; integration green locally for mesh-build-go (117 s) and mesh-build-node (28 s). mesh-build-image's two real-build tests fail the same on unchanged main on the desktop (rootless buildah not available there), not by this change. The try before the pull request was refused by the pin rule (the try has no group view), so the group's check is the first full run.
Reviewed-by: review-1930@shanks at 30b22c198e
Pushed-by: fix-1930@shanks
Fixes issue 1930 with mesh-sdk and mesh-delivery on fix/1930-digest-shape (one delivery group).
- mesh-build-go, mesh-build-node and mesh-build-image pin mesh-sdk 403a5d72 (the group's mesh-sdk head), whose stored level digest is a list and whose finish says a refused end.
- mesh-build-go asks_test.go reads `Digest.Map()`.
Tests: unit suites green; integration green locally for mesh-build-go (117 s) and mesh-build-node (28 s). mesh-build-image's two real-build tests fail the same on unchanged main on the desktop (rootless buildah not available there), not by this change. The try before the pull request was refused by the pin rule (the try has no group view), so the group's check is the first full run.
Moves mesh-build-go, mesh-build-node, mesh-build-image.
Reviewed-by: review-1930@shanks at 30b22c198e6a4feefc4a7c06d77a7e85958501cc
Pushed-by: fix-1930@shanks
grants step: if this changes what the bus's user list says (a new tool, subject or user), novox is sent that list alone, every build there kept, before mesh-build-go, mesh-build-image, mesh-build-node is judged on its first machine
composed together: pass — the checker's verdict at the members' heads (7cabd2c25e99)
Transitions
2026-10-23 21:54 (new) → proposed (announced): novox/mesh-catalog#467's head announced
2026-10-23 22:08 proposed → held (merged-unchecked): merged without a passing check — a verdict known with it is taken first: only a person decides that it goes on
2026-10-23 22:10 held → delivering (release): the operator's word 2026-10-24 00:11 in the lead's session: release; the group fix/1930-digest-shape passed its check at 00:07 (key 7cabd2c25e99), result never reached the forge because of issue 1726; merged by the operator by hand
2026-10-23 22:10 delivering → failed (failed): its walk failed, carrying its own commit: a gate on a first machine (what it carried put back), a build, a machine
The commit's note under refs/notes/mesh-plan keeps every transition: git log --notes=mesh-plan.
<!-- mesh-delivery:view -->
**Delivery** `novox/mesh-catalog@30b22c198e6a` — **failed** since 2026-10-23T22:10:49Z
**Delivery plan** — builds mesh-build-go, mesh-build-image, mesh-build-node → g14, novox, shanks; no bus step
- tier 0: mesh-build-go, mesh-build-image, mesh-build-node
- g14: receives mesh-build-go, mesh-build-node
- novox: receives mesh-build-go, mesh-build-node
- shanks: receives mesh-build-go, mesh-build-image, mesh-build-node
- grants step: if this changes what the bus's user list says (a new tool, subject or user), novox is sent that list alone, every build there kept, before mesh-build-go, mesh-build-image, mesh-build-node is judged on its first machine
**Group** `fix/1930-digest-shape`: novox/mesh-catalog@30b22c198e6a, novox/mesh-delivery@9261347a8f91, novox/mesh-sdk@403a5d72ab93
- composed together: pass — the checker's verdict at the members' heads (7cabd2c25e99)
**Transitions**
- 2026-10-23 21:54 (new) → proposed (announced): novox/mesh-catalog#467's head announced
- 2026-10-23 22:08 proposed → held (merged-unchecked): merged without a passing check — a verdict known with it is taken first: only a person decides that it goes on
- 2026-10-23 22:10 held → delivering (release): the operator's word 2026-10-24 00:11 in the lead's session: release; the group fix/1930-digest-shape passed its check at 00:07 (key 7cabd2c25e99), result never reached the forge because of issue 1726; merged by the operator by hand
- 2026-10-23 22:10 delivering → failed (failed): its walk failed, carrying its own commit: a gate on a first machine (what it carried put back), a build, a machine
The commit's note under `refs/notes/mesh-plan` keeps every transition: `git log --notes=mesh-plan`.
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Fixes issue 1930 with mesh-sdk and mesh-delivery on fix/1930-digest-shape (one delivery group).
Digest.Map().Tests: unit suites green; integration green locally for mesh-build-go (117 s) and mesh-build-node (28 s). mesh-build-image's two real-build tests fail the same on unchanged main on the desktop (rootless buildah not available there), not by this change. The try before the pull request was refused by the pin rule (the try has no group view), so the group's check is the first full run.
Moves mesh-build-go, mesh-build-node, mesh-build-image.
Reviewed-by: review-1930@shanks at
30b22c198ePushed-by: fix-1930@shanks
Delivery
novox/mesh-catalog@30b22c198e6a— failed since 2026-10-23T22:10:49ZDelivery plan — builds mesh-build-go, mesh-build-image, mesh-build-node → g14, novox, shanks; no bus step
Group
fix/1930-digest-shape: novox/mesh-catalog@30b22c198e, novox/mesh-delivery@9261347a8f, novox/mesh-sdk@403a5d72abTransitions
The commit's note under
refs/notes/mesh-plankeeps every transition:git log --notes=mesh-plan.