8000 Update stacked: 5 packages by gominimal-pkgmgr-mgr[bot] · Pull Request #999 · gominimal/pkgs · GitHub
[go: up one dir, main page]
Skip to content

Update stacked: 5 packages - #999

Merged
bryan-minimal merged 7 commits into
mainfrom
update-stacked-2026-10-23-8f50c240
Oct 23, 2026
Merged

Update stacked: 5 packages#999
bryan-minimal merged 7 commits into
mainfrom
update-stacked-2026-10-23-8f50c240

Conversation

@gominimal-pkgmgr-mgr
@gominimal-pkgmgr-mgr gominimal-pkgmgr-mgr Bot commented Oct 23, 2026 •
edited by bryan-minimal
Loading
Copy link
Copy Markdown
Contributor

Revised: lean 4.34.1 → 4.35.0 was removed from this bundle and moved to #1000, together with aeneas-latest. lean 4.35 breaks aeneas-latest's pinned Mathlib (Lake PackageEntrySrc.path changed; Cache/Requests.lean:988 "Missing cases"), which failed this PR's run d4401ce3. The two have to land together. The remaining 5 (cadical, crane, dwarves, maki, opencode) built and were signed on both arches in that run.

Update base-soup (6 packages)

Note

These packages declare replace_on_cycle in their build.ncl, so
they participate in the toolchain rebuild graph and one hash change
cascades through the set. Bundling ensures the cascading rebuild
lands as a single unit, even when only one package is bumping —
avoids back-to-back full rebuilds from singleton PRs.

Warning

Pkgscan: 7 new signals introduced across bundle members.
Each member's diff was compared against its prior version. Review carefully — base-soup updates touch the toolchain core, so a malicious bump here has cascade-wide impact.

Package Severity File Line Capability (MBC) Pattern
lean MEDIUM tests/pkg/float/test-vectors/testfloat/f64_mulAdd.txt.gz 0 anti-static-analysis/embedded-blob gzip archive
lean MEDIUM tests/pkg/float/test-vectors/testfloat/f32_mulAdd.txt.gz 0 anti-static-analysis/embedded-blob gzip archive
cadical INFO cadical (upstream release) 0 metadata/recent-bump recency NOT evaluated — no release date from the version source
maki INFO maki-agent/src/permissions.rs 1127 persistence/filesystem ~/.bashrc
maki INFO maki-agent/src/permissions.rs 1127 persistence/filesystem /.bashrc
maki INFO maki-agent/src/permissions.rs 1128 persistence/filesystem ~/.bashrc
maki INFO maki-agent/src/permissions.rs 1128 persistence/filesystem /.bashrc

Note

Build risk — 3 dependents across the tree. Package(s) that
build- or runtime-depend on a member of this bundle may need a rebuild,
or could FTBFS on an API/ABI change. Informational (not blocking) — a
heads-up for the reviewer on what this bump can ripple into.

Bundle member Dependents
lean 1 — aeneas-latest
cadical 1 — aeneas-latest
dwarves 1 — virtio-linux-detonation

Summary

Package Old New Source
lean 4.34.1 4.35.0 github:leanprover/lean4:operator-pinned
cadical 2.1.2 2.1.3 github:arminbiere/cadical:operator-pinned
crane 0.21.9 0.22.1 github:google/go-containerregistry:operator-pinned
dwarves 1.31 1.32 github:acmel/dwarves:tag:operator-pinned
maki 0.5.5 0.6.4 github:tontinton/maki:operator-pinned
opencode 1.18.31 1.19.3 github:anomalyco/opencode:operator-pinned

Per-package details

cadical 2.1.2 → 2.1.3
  • SHA256: 292c2bb8d712d6d0... → abfe890aa4ccda7b...
  • Size: 732 KB
  • Source: https://github.com/arminbiere/cadical/archive/refs/tags/rel-2.1.2.tar.gz → https://github.com/arminbiere/cadical/archive/refs/tags/rel-2.1.3.tar.gz
  • Released: unknown (non-GitHub source or tag-only fallback)
  • License: MIT (source: GitHub + tarball)
  • 🔒 TLS: github.com — Sectigo Public Server Authentication CA DV E36 → Sectigo Public Server Authentication Root E46 (root c90f26f0fb1b4018…) ⇒ codeload.github.com — Sectigo Public Server Authentication CA DV E36 → Sectigo Public Server Authentication Root E46 (root c90f26f0fb1b4018…)
crane 0.21.9 → 0.22.1
  • SHA256: 6d8bce869afcc485... → a52cc7d61f8b2f04...
  • Size: 4.7 MB
  • Source: https://github.com/google/go-containerregistry/archive/refs/tags/v0.21.9.tar.gz → https://github.com/google/go-containerregistry/archive/refs/tags/v0.22.1.tar.gz
  • Released: 48 days ago (2026-09-04)
  • License: Apache-2.0 (source: GitHub + tarball)
  • 🔒 TLS: github.com — Sectigo Public Server Authentication CA DV E36 → Sectigo Public Server Authentication Root E46 (root c90f26f0fb1b4018…) ⇒ codeload.github.com — Sectigo Public Server Authentication CA DV E36 → Sectigo Public Server Authentication Root E46 (root c90f26f0fb1b4018…)
dwarves 1.31 → 1.32
  • SHA256: 2b6511691bda2b3a... → 34314c33a3c86524...
  • Size: 444 KB
  • Source: https://github.com/acmel/dwarves/archive/refs/tags/v1.31.tar.gz → https://github.com/acmel/dwarves/archive/refs/tags/v1.32.tar.gz
  • Released: 39 days ago (2026-09-13)
  • License: GPL-2.0-only (source: GitHub + tarball)
  • 🔒 TLS: github.com — Sectigo Public Server Authentication CA DV E36 → Sectigo Public Server Authentication Root E46 (root c90f26f0fb1b4018…) ⇒ codeload.github.com — Sectigo Public Server Authentication CA DV E36 → Sectigo Public Server Authentication Root E46 (root c90f26f0fb1b4018…)
maki 0.5.5 → 0.6.4
  • SHA256: 29f63c6cc9e5a327... → 6c4161c5e6e72668...
  • Size: 13.0 MB
  • Source: https://github.com/tontinton/maki/archive/refs/tags/v0.5.5.tar.gz → https://github.com/tontinton/maki/archive/refs/tags/v0.6.4.tar.gz
  • Released: 5 days ago (2026-10-17)
  • License: MIT (source: GitHub + tarball)
  • 🔒 TLS: github.com — Sectigo Public Server Authentication CA DV E36 → Sectigo Public Server Authentication Root E46 (root c90f26f0fb1b4018…) ⇒ codeload.github.com — Sectigo Public Server Authentication CA DV E36 → Sectigo Public Server Authentication Root E46 (root c90f26f0fb1b4018…)
opencode 1.18.31 → 1.19.3
  • SHA256: 76f69fe27ec2b44e... → 8395f12e26df2d16...
  • Size: 74.7 MB
  • Source: https://github.com/anomalyco/opencode/archive/refs/tags/v1.18.31.tar.gz → https://github.com/anomalyco/opencode/archive/refs/tags/v1.19.3.tar.gz
  • Released: 6 days ago (2026-10-16)
  • License: MIT (source: GitHub + tarball)
  • 🔒 TLS: github.com — Sectigo Public Server Authentication CA DV E36 → Sectigo Public Server Authentication Root E46 (root c90f26f0fb1b4018…) ⇒ codeload.github.com — Sectigo Public Server Authentication CA DV E36 → Sectigo Public Server Authentication Root E46 (root c90f26f0fb1b4018…)

Created by pkgmgr

@gominimal-pkgmgr-mgr
gominimal-pkgmgr-mgr Bot requested a review from a team as a code owner October 23, 2026 00:08
@coderabbitai
coderabbitai Bot commented Oct 23, 2026 •
edited
Loading
Copy link
Copy Markdown
Contributor

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Comment @coderabbitai help to get the list of available commands.

@bryan-minimal @claude
lean: back to main (4.34.1); 4.35.0 moves to its own PR with aeneas-l…
52b6d0c 
…atest

aeneas-latest's pinned mathlib does not build against Lean 4.35 (Lake's
PackageEntrySrc.path gained a field: Cache/Requests.lean:988 'Missing
cases'), which failed run d4401ce3. lean 4.35 has to land together with an
aeneas-latest that targets it.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@bryan-minimal bryan-minimal mentioned this pull request Oct 23, 2026
Merged
@bryan-minimal bryan-minimal changed the title Update stacked: 6 packages Update stacked: 5 packages Oct 23, 2026
@bryan-minimal
bryan-minimal commented Oct 23, 2026
Copy link
Copy Markdown
Member

minimal build failed because of aeneas-latest, not any member of this bundle.

  • Run: d4401ce3-3110-42c2-9501-3694d7af9897 (build-bot, head 567d4cd8). run.failed, error_kind=build_execute.
  • res-server logs: amd64 failed at 02:29:51Z and arm64 at 02:31:22Z, with the same error on both:
✖ [16/41] Building Cache.Requests
error: Cache/Requests.lean:988:2: Missing cases:
(Lake.PackageEntrySrc.path _ true)
Some required targets logged failures:
- Cache.Requests
error: build failed
  • Cause: this bundle bumped lean 4.34.1 → 4.35.0. aeneas-latest compiles its pinned Mathlib (d13f23b7, built for Lean 4.34) against our lean, and Lean 4.35's Lake changed PackageEntrySrc.path.
  • What built: the other members (cadical, crane, dwarves, maki, opencode) and lean itself built and were signed on both arches in that run.
  • Fix: commit 52b6d0c5 reverts packages/lean to main here. lean 4.35.0 moves to lean 4.35.0 + aeneas-latest → upstream Lean-4.35 (aeneas fdebf20d) #1000 with aeneas-latest re-pinned to upstream aeneas fdebf20d (Lean v4.35.0 / Mathlib v4.35.0). This branch's diff against main is now just the 5 packages.

🤖 Generated with Claude Code

@bryan-minimal
bryan-minimal added this pull request to the merge queue Oct 23, 2026
Merged via the queue into main with commit ccfc2f6 Oct 23, 2026
11 checks passed
@bryan-minimal
bryan-minimal deleted the update-stacked-2026-10-23-8f50c240 branch October 23, 2026 17:41
@bryan-minimal bryan-minimal mentioned this pull request Oct 23, 2026
Merged
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@bryan-minimal bryan-minimal bryan-minimal approved these changes

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@bryan-minimal
0