chore: commit devenv.lock #20

Merged
jalenluorion merged 1 commit from chore/pin-devenv into main 2026-10-03 02:44:24 +00:00
Member

CI has been failing on every PR since nixos-unstable moved to pyjwt 2.14: semgrep 1.172 (the security scan in the shared devenv module) requires pyjwt ~=2.13, so the devenv shell fails to build before any hook runs.

The repo had no devenv.lock, so CI floated on the newest nixpkgs. This commits one, with nixpkgs pinned to 6774f7bc (2026-09-22, the revision housing pins) and every other input at its current version. housing, courses, tartan-vote, quest and governance all commit theirs.

devenv info evaluates cleanly with the pinned lock.

CI has been failing on every PR since nixos-unstable moved to pyjwt 2.14: semgrep 1.172 (the security scan in the shared devenv module) requires pyjwt ~=2.13, so the devenv shell fails to build before any hook runs. The repo had no devenv.lock, so CI floated on the newest nixpkgs. This commits one, with nixpkgs pinned to 6774f7bc (2026-09-22, the revision housing pins) and every other input at its current version. housing, courses, tartan-vote, quest and governance all commit theirs. `devenv info` evaluates cleanly with the pinned lock.
chore: commit devenv.lock
All checks were successful
kennel/build build succeeded
CI / check-1 (pull_request) Successful in 3m4s
CI / build (pull_request) Successful in 6m55s
CI / check (pull_request) Successful in 0s
6c55a80376
Without a lock, CI resolves the newest nixos-unstable on every run. The
2026-10-01 revision ships pyjwt 2.14 while semgrep 1.172 requires ~=2.13, so
the devenv shell fails to build and every check job fails. Pin nixpkgs to
6774f7bc (2026-09-22, the revision housing pins, pyjwt 2.13); every other
input is locked at its current version.
jalenluorion deleted branch chore/pin-devenv 2026-10-03 02:44:24 +00:00
jalenluorion referenced this pull request from a commit 2026-10-03 02:44:25 +00:00
Sign in to join this conversation.
No reviewers
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
ScottyLabs/cal!20
No description provided.