fix(conformance): rebind Cave macOS-only worker-thread authority - #151
Merged
Conversation
Bump the pinned Cave authority to bc310e97 (v0.3.12 conformance branch), which restricts the Turbopack worker-thread plugin runtime to Darwin conformance builds so Linux protected builds stop hitting the compile-plugin failure. Cave file contents referenced by the lock are unchanged; only the commit/tree identity and the derived frozen digests (assertion registry, evidence schema, release-workflow job graphs) are updated. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Contributor
There was a problem hiding this comment.
🟢 Approval recommended
The Cave commit/tree repin and all dependent contract/workflow digests are consistently updated across the lock, schema, assertions, tests, and CI/release workflows with no remaining references in changed files to the prior pin.
Pull request overview
This PR updates the pinned OpenCoven/coven-cave authority (commit/tree) used by the SDK’s frozen conformance contract and the GitHub Actions workflows that reproduce/verify that authority, aligning all derived digests and fixtures with the new pin intended to fix the Linux conformance packaging failure.
Changes:
- Re-pins the Cave authority commit/tree in the conformance lock, assertion registry provenance, and CI/release workflows.
- Updates the frozen conformance evidence schema and lock SHA256 fields that depend on the pinned bytes.
- Refreshes the release-readiness “frozen job graph” SHA256 digests to match the updated
release.ymljob content.
File summaries
| File | Description |
|---|---|
| tests/conformance-gaps.spec.ts | Updates expected Cave commit/tree and expected workflow ref: string to match the new authority pin. |
| scripts/release-readiness.mjs | Updates frozen workflow job digests corresponding to the modified release workflow jobs. |
| conformance/client-v1-cross-repository-lock.json | Rebinds Cave commit/tree and refreshes frozen schema/assertion SHA256 values derived from the new binding. |
| conformance/client-v1-cross-repository-evidence.schema.json | Updates embedded assertion registry SHA256 to match the refreshed frozen assertion registry. |
| conformance/client-v1-cross-repository-assertions.json | Updates provenance commit/tree for the Cave assertion registry to match the new authority pin. |
| .github/workflows/release.yml | Updates all Cave checkout ref: pins to the new authority commit. |
| .github/workflows/ci.yml | Updates the Cave checkout ref: pin used by CI’s frozen conformance regression job. |
Review details
- Files reviewed: 7/7 changed files
- Comments generated: 0
- Review effort level: Lite
💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.
BunsDev
added a commit
to OpenCoven/chat
that referenced
this pull request
Sep 7, 2026
SDK rebound its conformance/client-v1-cross-repository-lock.json sources.cave pin to the new Cave v0.3.12 conformance commit in OpenCoven/sdk#151 (merged as 2d1cb15fcb47ff6577ccae1186c74ded69b82fc8). This updates Chat's vendored, provenance-verified fixture of that real SDK file (renamed sdk-933a9523/ -> sdk-2d1cb15f/) to mirror the new committed bytes, and corrects the associated test expectations: - fixture root path and phase1CompatibilityValidator commit/tree - frozenLock provenance (commit/tree/blob/size/sha256) - frozenLock.evidenceProducer, which had a stale literal unrelated to the cave change but was already drifted from Chat's real current producer pin (ada542f...) recorded in the SDK file. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Rebind the Cave authority pinned across the SDK conformance lock, assertion registry, evidence schema, and release-workflow job-graph digests to bc310e9753783678014086ed6f7ef7d3fb797967 (OpenCoven/coven-cave, v0.3.12 conformance branch, merge of coven-cave#5322).
That Cave commit restricts the Turbopack worker-thread plugin runtime to Darwin conformance builds, fixing the Linux protected-matrix
phase1.packaging.cave-build.phase.next-build.compile.pluginfailure. Referenced Cave file bytes (contract fixture, HPKE vectors, conformance engine script) are unchanged; only the commit/tree identity and derived frozen digests move.Validation:
pnpm test(1501 passed),pnpm typecheck,pnpm verify:contracts,pnpm verify:packageall pass locally.Follows OpenCoven/chat#146 (Chat-side repin) in the Cave -> Chat -> SDK -> matrix rerun sequence for #38.