Skip to content

Refresh deno.lock for the webcrypto-deltic republish - #50

Closed
lann wants to merge 1 commit into
mainfrom
deltic-lock-refresh
Closed

Refresh deno.lock for the webcrypto-deltic republish#50
lann wants to merge 1 commit into
mainfrom
deltic-lock-refresh

Conversation

@lann

@lann lann commented Aug 11, 2026

Copy link
Copy Markdown
Collaborator

@polymorph/webcrypto-deltic@0.0.0 was republished (sibling motion today) with its deltic runtime imported from raw.githubusercontent.com at pre-58b2404 instead of depending on jsr:@deltic/runtime@0.1.0-pre.ga67ee83. deno install --frozen — the deltic-setup gate — fails loudly against the stale lockfile, which breaks exam-deltic (and therefore CI) on every branch, independent of any change in this repository.

This refreshes the lockfile to the sibling's new module graph. The endpoint exam passes against it (5/5 scenarios).

What the republish opens — a second deltic runtime copy riding inside the sibling's closure, which the jsr:@deltic/* pin-drift gate in exam-deltic cannot see — is a real convergence question, but not one this lockfile refresh decides. Filed as a follow-up issue.

The webcrypto sibling republished @polymorph/webcrypto-deltic@0.0.0
with its deltic runtime imported from raw.githubusercontent.com at
pre-58b2404 instead of depending on jsr:@deltic/runtime. deno install
--frozen — the deltic-setup gate — fails loudly against the stale
lockfile, breaking exam-deltic (and CI) on every branch.

This refresh records the sibling's new module graph and unbreaks the
exam; the endpoint exam passes against it (5/5). The convergence
question the republish opens — a second deltic runtime copy riding
inside the sibling's closure, invisible to the jsr:@deltic/* pin-drift
gate — is filed separately.
@lann

lann commented Aug 11, 2026

Copy link
Copy Markdown
Collaborator Author

Retracting: the diagnosis was wrong, and this lockfile 'refresh' would have actively broken main. There was no sibling republish — @polymorph/webcrypto-deltic is consumed from the local .deps checkout (it is not on JSR at all). The raw-URL imports came from MY worktree's stale .deps/webcrypto checkout: it was cloned before #46 bumped WEBCRYPTO_PIN to the JSR-consuming sibling revision (a0c924d), and never refreshed after switching to a post-#46 branch. Re-running scripts/setup.sh converges the checkout, and main's committed deno.lock matches it exactly — the frozen-install gate and the identity gate both did their jobs correctly at every step. The lock in this PR recorded the stale checkout's graph and must not land.

@lann lann closed this Aug 11, 2026
@lann
lann deleted the deltic-lock-refresh branch August 11, 2026 18:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant