-
-
Notifications
You must be signed in to change notification settings - Fork 155
fix(compile): survive binary/workspace skew; zstd, DOMException-subclass and panic-dedup gaps hit compiling a real npm CLI #7021
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Merged
proggeramlug
merged 34 commits into
PerryTS:main
from
jdalton:fix/auto-optimize-feature-skew
Jul 30, 2026
Merged
Changes from all commits
Commits
Show all changes
34 commits
Select commit
Hold shift + click to select a range
93c2b36
build: 7-day supply-chain soak + pinned security tooling
jdalton 8efeaff
docs: changelog fragment for #6912
jdalton 3b73baf
ci(zizmor): run the SRI-pinned binary instead of the marketplace action
jdalton 239e573
deps(sfw): bump firewall pins to 1.14.0 via dated soakBypass
jdalton c9dc5f5
deps(tools): bump zizmor 1.28.0, pnpm 11.15.1, npm 12.0.1 — newest so…
jdalton 71b13f6
docs: fragment says rack-pinned zizmor, not marketplace action
jdalton fc7e3f1
feat(soak): auto-prune expired bypass annotations — fixer + scheduled…
jdalton 6cc276e
ci(soak-autofix): bind the artipacked ignore to the checkout line
jdalton 4fe87ad
ci: pin actions/* to latest release-tag SHAs in the new security work…
jdalton 07ca0a9
fix(soak): expired annotations warn instead of failing — stale is not…
jdalton e3dda61
fix(soak): address review-bot findings across the port
jdalton d882d5a
fix(sfw): export SFW_UNKNOWN_HOST_ACTION=ignore in the shims
jdalton aa3e2f2
fix(soak): take review fixes surfaced on the aube twin
jdalton 3255e41
docs(soak): align prose with warn-not-fail; source-cite the unknown-h…
jdalton 3a8f00b
fix(soak): never prune a wrong-arithmetic annotation as "cleared"
jdalton 20a26b0
fix(soak): downloads fall back to unauthenticated and retry once on 5xx
jdalton c1eed51
fix(soak): stop the fixers reformatting files they do not own
jdalton 88169c6
fix(soak): stop the fixers reformatting files they do not own
jdalton ce95e57
feat(soak): gate npm's min-release-age-exclude entries too
jdalton b67907d
fix(soak): fail loudly when cargo silently ignores min-publish-age
jdalton c3d27e0
feat(soak): explain a window-blocked cargo re-resolution, refuse the …
jdalton 369dadf
fix(soak): take the adversarial-review findings
jdalton c1ff686
fix(soak): take the review findings — one is a regression I introduced
jdalton f8c6baf
fix(compile): survive binary/workspace skew and complete the surfaces…
jdalton e8e529d
docs: changelog fragment for #7021
jdalton 24fd015
fix(runtime): make the rebound RegExp global constructible via its ca…
jdalton 8417353
docs: extend #7021 changelog fragment with the RegExp call-form fix
jdalton 781282f
fix: address stacked stdlib review
d1fa9fa
fix: address compile stack review
c611737
Merge main into fix/auto-optimize-feature-skew
79fa0b7
Merge remote-tracking branch 'origin/main' into maint/pr-7021
e6892fc
Merge remote-tracking branch 'origin/main' into maint/pr-7021
a5b6261
Merge remote-tracking branch 'origin/main' into maint/pr-7021
0cc026e
docs: correct compile-gap blocker count
File filter
Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
There are no files selected for viewing
Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.
Oops, something went wrong.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,7 @@ | ||
| **Compile fixes from taking a real npm CLI (Socket Firewall) to a native binary** — five independent blockers, each fixed at its own layer: | ||
|
|
||
| - **Auto-optimize feature skew**: cross-features the on-disk checkout's `perry-runtime`/`perry-stdlib` don't declare are now dropped (with a warning) instead of failing the whole cargo resolve and silently falling back to a link that's missing the routed ext entrypoints. The cargo-failure fallback message now explains the consequence and remedy. | ||
| - **`perry-ext-zlib` zstd surface**: `zlib.createZstdCompress`/`createZstdDecompress`, the zstd one-shots, and the streaming write-codec are now implemented in the ext wrapper, so routing `node:zlib` no longer strips the only zstd implementation out of the link (undici's web-fetch content decoding references it unconditionally). | ||
| - **`class X extends DOMException`**: new `js_dom_exception_subclass_init` wired through both the explicit `super()` lowering and the implicit-ctor chain walk — undici's module-init inheritability probe no longer aborts startup with `DOMException is not a function`. | ||
| - **panic-runtime dedup**: prebuilt (panic=unwind) wrapper staticlibs co-linked with a panic=abort auto-optimized stdlib no longer die on `__rust_drop_panic` — the `panic_unwind` member is nominated for the nosharedeps fixed-point (kept only when the stdlib can't cover it), and panic symbols referenced by a sibling member are no longer localized. Allocator shims remain always-localized (a global wrapper malloc shim would break runtime pointer classification). | ||
| - **`RegExp` call form via a rebound global**: `var R = globalThis.RegExp; R(src)` now constructs (with the spec's `RegExp(re)` identity shortcut) instead of returning `undefined` from the noop thunk — lodash's `runInContext` module init relied on exactly this. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.
Oops, something went wrong.
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Uh oh!
There was an error while loading. Please reload this page.