commercialhaskell · mpilgrem · Jul 7, 2026 · Jul 5, 2026
diff --git a/ChangeLog.md b/ChangeLog.md
@@ -25,14 +25,16 @@ Other enhancements:
 
 Bug fixes:
 
-* `stack test --no-rerun-tests` correctly skips test suites that have 
-  previously been built and run successfully, including for non-Backpack 
+* `stack test --no-rerun-tests` correctly skips test suites that have
+  previously been built and run successfully, including for non-Backpack
   packages built by the per-component planner.
-* Stack's per-component build planner correctly handles the cross-package 
-  test/library cycle shape from issue #6905: project package A's library 
-  depending on project package B's library, with B's test suite depending on A, 
+* Stack's per-component build planner correctly handles the cross-package
+  test/library cycle shape from issue #6905: project package A's library
+  depending on project package B's library, with B's test suite depending on A,
   builds in the right order with the right configure flags.
-
+* If snapshot locations are cyclic, Stack reports an error rather than going
+  round in circles.
+
 ##  v3.11.1 - 2026-06-13
 
 **Changes since v3.9.3:**

diff --git a/cabal.config b/cabal.config
@@ -146,7 +146,7 @@ constraints:
   , optparse-applicative ==0.18.1.0
   , optparse-simple ==0.1.1.4
   , os-string ==2.0.7
-  , pantry ==0.11.3
+  , pantry ==0.11.4
   , parsec ==3.1.18.0
   , parser-combinators ==1.3.1
   , path ==0.9.6

diff --git a/doc/topics/custom_snapshot.md b/doc/topics/custom_snapshot.md
@@ -73,10 +73,10 @@ has changed by hashing the contents of the involved files, and using it to
 identify the snapshot internally. It is often reasonably efficient to modify a
 custom snapshot, due to Stack sharing snapshot packages whenever possible.
 
-!!! warning "Cyclic snapshot locations"
+!!! note "Cyclic snapshot locations"
 
-    If snapshot locations form a cycle, Stack will not detect this but will go
-    round in circles and appear to hang.
+    If Stack detects that snapshot locations form a cycle, it will report an
+    error.
 
 ### Overriding the compiler
 

diff --git a/doc/topics/snapshot_location.md b/doc/topics/snapshot_location.md
@@ -128,10 +128,10 @@ There are four ways to specify a snapshot location:
 
     This allows local file paths and covenience synonyms to be disambiguated.
 
-!!! warning "Cyclic snapshot locations"
+!!! note "Cyclic snapshot locations"
 
-    If snapshot locations form a cycle, Stack will not detect this but will go
-    round in circles and appear to hang.
+    If Stack detects that snapshot locations form a cycle, it will report an
+    error.
 
 ## At the command line
 

diff --git a/package.yaml b/package.yaml
@@ -105,7 +105,7 @@ dependencies:
 - neat-interpolation
 - open-browser
 - optparse-applicative >= 0.18.1.0
-- pantry >= 0.11.3
+- pantry >= 0.11.4
 - path >= 0.9.5
 - path-io
 # In order for Cabal (the tool) to build Stack, it needs to be told of the

diff --git a/stack-ghc-9.12.4.yaml b/stack-ghc-9.12.4.yaml
@@ -10,7 +10,7 @@ extra-deps:
 # nightly-2026-07-02 specifies http-download-0.2.1.0
 - http-download-0.2.2.0@sha256:cfe4722fcbad837db43b5758a49b6ea54b9fd475b1825b622e25f96a8406a4d0,1812
 # nightly-2026-07-02 excludes pantry
-- pantry-0.11.3@sha256:96fa2c7fa6cee9e470f984da567492f6bfaee058d14c1456f4f79b68a78d7be2,7668
+- pantry-0.11.4@sha256:9885d02c58e8725179146352b6d3f57395d3f1337c7713dc1409c61c9c21bb09,7668
 
 docker:
   enable: false

diff --git a/stack-ghc-9.12.4.yaml.lock b/stack-ghc-9.12.4.yaml.lock
@@ -26,12 +26,12 @@ packages:
   original:
     hackage: http-download-0.2.2.0@sha256:cfe4722fcbad837db43b5758a49b6ea54b9fd475b1825b622e25f96a8406a4d0,1812
 - completed:
-    hackage: pantry-0.11.3@sha256:96fa2c7fa6cee9e470f984da567492f6bfaee058d14c1456f4f79b68a78d7be2,7668
+    hackage: pantry-0.11.4@sha256:9885d02c58e8725179146352b6d3f57395d3f1337c7713dc1409c61c9c21bb09,7668
     pantry-tree:
-      sha256: bedd749e9cfdb8adb1a253b34a3350aa89f5ca903aa341579351ce0a937af1f5
+      sha256: cafafe0eb53f80194e20b7332db8e306c9eb949193f17cd48a71a79c8a3c30d2
       size: 2722
   original:
-    hackage: pantry-0.11.3@sha256:96fa2c7fa6cee9e470f984da567492f6bfaee058d14c1456f4f79b68a78d7be2,7668
+    hackage: pantry-0.11.4@sha256:9885d02c58e8725179146352b6d3f57395d3f1337c7713dc1409c61c9c21bb09,7668
 snapshots:
 - completed:
     sha256: 7aed37f3f67db7b404c9b477077c0c9bc5fbefa709c5e0a231131869e631de56

diff --git a/stack-ghc-9.12.5.yaml b/stack-ghc-9.12.5.yaml
@@ -11,7 +11,7 @@ extra-deps:
 # nightly-2026-07-02 specifies http-download-0.2.1.0
 - http-download-0.2.2.0@sha256:cfe4722fcbad837db43b5758a49b6ea54b9fd475b1825b622e25f96a8406a4d0,1812
 # nightly-2026-07-02 excludes pantry
-- pantry-0.11.3@sha256:96fa2c7fa6cee9e470f984da567492f6bfaee058d14c1456f4f79b68a78d7be2,7668
+- pantry-0.11.4@sha256:9885d02c58e8725179146352b6d3f57395d3f1337c7713dc1409c61c9c21bb09,7668
 # ghc-9.12.4.20260614 specifies semaphore-compat-2.0.0
 - semaphore-compat-1.0.0@sha256:2dff81c2c0ec9bac9f8bae364db497188654d2e1e4330f4a0e2f12310149f3e9,1176
 

diff --git a/stack-ghc-9.12.5.yaml.lock b/stack-ghc-9.12.5.yaml.lock
@@ -26,12 +26,12 @@ packages:
   original:
     hackage: http-download-0.2.2.0@sha256:cfe4722fcbad837db43b5758a49b6ea54b9fd475b1825b622e25f96a8406a4d0,1812
 - completed:
-    hackage: pantry-0.11.3@sha256:96fa2c7fa6cee9e470f984da567492f6bfaee058d14c1456f4f79b68a78d7be2,7668
+    hackage: pantry-0.11.4@sha256:9885d02c58e8725179146352b6d3f57395d3f1337c7713dc1409c61c9c21bb09,7668
     pantry-tree:
-      sha256: bedd749e9cfdb8adb1a253b34a3350aa89f5ca903aa341579351ce0a937af1f5
+      sha256: cafafe0eb53f80194e20b7332db8e306c9eb949193f17cd48a71a79c8a3c30d2
       size: 2722
   original:
-    hackage: pantry-0.11.3@sha256:96fa2c7fa6cee9e470f984da567492f6bfaee058d14c1456f4f79b68a78d7be2,7668
+    hackage: pantry-0.11.4@sha256:9885d02c58e8725179146352b6d3f57395d3f1337c7713dc1409c61c9c21bb09,7668
 - completed:
     hackage: semaphore-compat-1.0.0@sha256:2dff81c2c0ec9bac9f8bae364db497188654d2e1e4330f4a0e2f12310149f3e9,1176
     pantry-tree:

diff --git a/stack-ghc-9.14.1.yaml b/stack-ghc-9.14.1.yaml
@@ -10,7 +10,7 @@ extra-deps:
 # nightly-2026-07-02 specifies http-download-0.2.1.0
 - http-download-0.2.2.0@sha256:cfe4722fcbad837db43b5758a49b6ea54b9fd475b1825b622e25f96a8406a4d0,1812
 # nightly-2026-07-02 excludes pantry
-- pantry-0.11.3@sha256:96fa2c7fa6cee9e470f984da567492f6bfaee058d14c1456f4f79b68a78d7be2,7668
+- pantry-0.11.4@sha256:9885d02c58e8725179146352b6d3f57395d3f1337c7713dc1409c61c9c21bb09,7668
 
 docker:
   enable: false

diff --git a/stack-ghc-9.14.1.yaml.lock b/stack-ghc-9.14.1.yaml.lock
@@ -26,12 +26,12 @@ packages:
   original:
     hackage: http-download-0.2.2.0@sha256:cfe4722fcbad837db43b5758a49b6ea54b9fd475b1825b622e25f96a8406a4d0,1812
 - completed:
-    hackage: pantry-0.11.3@sha256:96fa2c7fa6cee9e470f984da567492f6bfaee058d14c1456f4f79b68a78d7be2,7668
+    hackage: pantry-0.11.4@sha256:9885d02c58e8725179146352b6d3f57395d3f1337c7713dc1409c61c9c21bb09,7668
     pantry-tree:
-      sha256: bedd749e9cfdb8adb1a253b34a3350aa89f5ca903aa341579351ce0a937af1f5
+      sha256: cafafe0eb53f80194e20b7332db8e306c9eb949193f17cd48a71a79c8a3c30d2
       size: 2722
   original:
-    hackage: pantry-0.11.3@sha256:96fa2c7fa6cee9e470f984da567492f6bfaee058d14c1456f4f79b68a78d7be2,7668
+    hackage: pantry-0.11.4@sha256:9885d02c58e8725179146352b6d3f57395d3f1337c7713dc1409c61c9c21bb09,7668
 snapshots:
 - completed:
     sha256: 7aed37f3f67db7b404c9b477077c0c9bc5fbefa709c5e0a231131869e631de56

diff --git a/stack.cabal b/stack.cabal
diff --git a/stack.yaml b/stack.yaml
@@ -39,7 +39,7 @@ extra-deps:
 # lts-24.43 specifies open-browser-0.4.0.0
 - open-browser-0.5.1.0@sha256:0dc8dc33b9bba0e025e444355f6c2d806f62a4656446961c3647165f80f0d278,1959
 # lts-24.43 specifies pantry-0.10.1
-- pantry-0.11.3@sha256:96fa2c7fa6cee9e470f984da567492f6bfaee058d14c1456f4f79b68a78d7be2,7668
+- pantry-0.11.4@sha256:9885d02c58e8725179146352b6d3f57395d3f1337c7713dc1409c61c9c21bb09,7668
 # lts-24.43 specifies persistent-2.17.1.0
 - persistent-2.18.1.0@sha256:6a111b26c3e710f1e080a7543cf93766c4cc53ac560dbaa0d4b7ddc98a2f7b1d,7096
 # lts-24.43 excludes ram

diff --git a/stack.yaml.lock b/stack.yaml.lock
@@ -138,12 +138,12 @@ packages:
   original:
     hackage: open-browser-0.5.1.0@sha256:0dc8dc33b9bba0e025e444355f6c2d806f62a4656446961c3647165f80f0d278,1959
 - completed:
-    hackage: pantry-0.11.3@sha256:96fa2c7fa6cee9e470f984da567492f6bfaee058d14c1456f4f79b68a78d7be2,7668
+    hackage: pantry-0.11.4@sha256:9885d02c58e8725179146352b6d3f57395d3f1337c7713dc1409c61c9c21bb09,7668
     pantry-tree:
-      sha256: bedd749e9cfdb8adb1a253b34a3350aa89f5ca903aa341579351ce0a937af1f5
+      sha256: cafafe0eb53f80194e20b7332db8e306c9eb949193f17cd48a71a79c8a3c30d2
       size: 2722
   original:
-    hackage: pantry-0.11.3@sha256:96fa2c7fa6cee9e470f984da567492f6bfaee058d14c1456f4f79b68a78d7be2,7668
+    hackage: pantry-0.11.4@sha256:9885d02c58e8725179146352b6d3f57395d3f1337c7713dc1409c61c9c21bb09,7668
 - completed:
     hackage: persistent-2.18.1.0@sha256:6a111b26c3e710f1e080a7543cf93766c4cc53ac560dbaa0d4b7ddc98a2f7b1d,7096
     pantry-tree:

diff --git a/tests/integration/tests/6927-cyclic-snapshots/Main.hs b/tests/integration/tests/6927-cyclic-snapshots/Main.hs
@@ -0,0 +1,32 @@
+-- | Stack detects when snapshot locations form a cycle and reports an error.
+--
+-- See: https://github.com/commercialhaskell/stack/issues/6927
+
+import           Control.Monad ( unless )
+import           Data.List ( isInfixOf )
+import           StackTest
+
+main :: IO ()
+main = do
+  -- `stack build` makes use of pantry's loadAndCompleteSnapshotRaw':
+  stackErrStderr
+    ["--stack-yaml", "stack1.yaml", "build"]
+    (expectMessage cycleDetected)
+  stackErrStderr
+    ["--stack-yaml", "stack2.yaml", "build"]
+    (expectMessage cycleDetected)
+  -- `stack --snapshot <snapshot> list` makes use of pantry's loadSnapshot:
+  stackErrStderr
+    ["--snapshot", "my-snapshot.yaml", "list", "base"]
+    (expectMessage cycleDetected)
+  stackErrStderr
+    ["--snapshot", "my-snapshot1.yaml", "list", "base"]
+    (expectMessage cycleDetected)
+
+cycleDetected :: String
+cycleDetected = "Cycle detected while reading snapshot."
+
+expectMessage :: String -> String -> IO ()
+expectMessage msg stderr =
+ unless (words msg `isInfixOf` words stderr) $
+   error $ "Expected:\n\n" <> msg <> "\n\nin stderr, got:\n\n" <> stderr
diff --git a/tests/integration/tests/6927-cyclic-snapshots/files/.gitignore b/tests/integration/tests/6927-cyclic-snapshots/files/.gitignore
@@ -0,0 +1 @@
+myPackage.cabal
diff --git a/tests/integration/tests/6927-cyclic-snapshots/files/my-snapshot.yaml b/tests/integration/tests/6927-cyclic-snapshots/files/my-snapshot.yaml
@@ -0,0 +1,4 @@
+name: my-snapshot
+
+# In error, refers to itself:
+snapshot: my-snapshot.yaml
diff --git a/tests/integration/tests/6927-cyclic-snapshots/files/my-snapshot1.yaml b/tests/integration/tests/6927-cyclic-snapshots/files/my-snapshot1.yaml
@@ -0,0 +1,3 @@
+name: my-snapshot1
+
+snapshot: my-snapshot2.yaml
diff --git a/tests/integration/tests/6927-cyclic-snapshots/files/my-snapshot2.yaml b/tests/integration/tests/6927-cyclic-snapshots/files/my-snapshot2.yaml
@@ -0,0 +1,3 @@
+name: my-snapshot2
+
+snapshot: my-snapshot3.yaml
diff --git a/tests/integration/tests/6927-cyclic-snapshots/files/my-snapshot3.yaml b/tests/integration/tests/6927-cyclic-snapshots/files/my-snapshot3.yaml
@@ -0,0 +1,4 @@
+name: my-snapshot3
+
+# In error, refers to my-snapshot1, creating a cycle:
+snapshot: my-snapshot4.yaml
diff --git a/tests/integration/tests/6927-cyclic-snapshots/files/my-snapshot4.yaml b/tests/integration/tests/6927-cyclic-snapshots/files/my-snapshot4.yaml
@@ -0,0 +1,4 @@
+name: my-snapshot4
+
+# In error, refers to my-snapshot2, creating a cycle:
+snapshot: my-snapshot2.yaml
diff --git a/tests/integration/tests/6927-cyclic-snapshots/files/package.yaml b/tests/integration/tests/6927-cyclic-snapshots/files/package.yaml
@@ -0,0 +1,9 @@
+spec-version: 0.36.0
+
+name: myPackage
+
+dependencies:
+- base
+
+library:
+  source-dirs: src
diff --git a/tests/integration/tests/6927-cyclic-snapshots/files/src/Lib.hs b/tests/integration/tests/6927-cyclic-snapshots/files/src/Lib.hs
@@ -0,0 +1 @@
+module Lib where
diff --git a/tests/integration/tests/6927-cyclic-snapshots/files/stack1.yaml b/tests/integration/tests/6927-cyclic-snapshots/files/stack1.yaml
@@ -0,0 +1 @@
+snapshot: my-snapshot.yaml
diff --git a/tests/integration/tests/6927-cyclic-snapshots/files/stack2.yaml b/tests/integration/tests/6927-cyclic-snapshots/files/stack2.yaml
@@ -0,0 +1 @@
+snapshot: my-snapshot1.yaml
Original file line number	Diff line number	Diff line change
		@@ -0,0 +1,3 @@
		name: my-snapshot1

		snapshot: my-snapshot2.yaml
Original file line number	Diff line number	Diff line change
		@@ -0,0 +1,3 @@
		name: my-snapshot2

		snapshot: my-snapshot3.yaml