Refresh locked Jerboa dependency and self-contained security runner #6

Merged

ober merged 8 commits from fix/jsqlite-lock-20260925 into main 2026-09-25 05:12:43 -04:00

Conversation 0 Commits 8 Files changed 8 +145 -79

ober commented 2026-09-25 04:27:33 -04:00

Owner

Copy link

Summary

• Refresh the secmon release version to 0.1.4.
• Replace the unavailable locked Jerboa source with a fetchable locked commit and update the vendored patch index.
• Remove the mutable default dependency clone fallback.
• Make the native-loader security check use the installed self-contained Jerboa runner when no Chez executable is available.

Verification

• support/fetch-locked-deps.sh all
• make ensure-jsqlite
• scripts/native-loader-security-test.sh
• make security

The qualification-only test script remains untracked and is not part of this PR.

## Summary - Refresh the secmon release version to `0.1.4`. - Replace the unavailable locked Jerboa source with a fetchable locked commit and update the vendored patch index. - Remove the mutable default dependency clone fallback. - Make the native-loader security check use the installed self-contained Jerboa runner when no Chez executable is available. ## Verification - `support/fetch-locked-deps.sh all` - `make ensure-jsqlite` - `scripts/native-loader-security-test.sh` - `make security` The qualification-only test script remains untracked and is not part of this PR.

ober added 3 commits 2026-09-25 04:27:33 -04:00

Refresh unavailable jsqlite dependency pin 77bec717e4

Refresh secmon dependency release version 3211c0b67c

Use locked Jerboa source and self-contained security runner 2407cbe4e7

ober added 1 commit 2026-09-25 04:33:43 -04:00

Make locked security checks portable across runners 815fdb6269

ober added 1 commit 2026-09-25 04:51:09 -04:00

Keep locked dependency checks on Git builtin diff 1737f74d9d

ober added 1 commit 2026-09-25 04:52:32 -04:00

Avoid redundant CI worktree diff scan 8c2fadfc0c

ober added 1 commit 2026-09-25 05:00:53 -04:00

Run secmon typed checks with self-contained Jerboa 09a38d1984

ober added 1 commit 2026-09-25 05:05:40 -04:00

Refresh stale Jerboa checkout safely 075e92ad60

ober merged commit f84c5e37b5 into main 2026-09-25 05:12:43 -04:00

ober referenced this pull request from a commit 2026-09-25 05:12:45 -04:00

Merge pull request #6

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels

No items

No labels

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference

ober/jerboa-secmon!6

No description provided.