Skip to content

fix(release): use pipe delimiter in vendorHash sed commands#657

Merged
wesm merged 1 commit intomainfrom
fix/release-sed-delimiter
Apr 19, 2026
Merged

fix(release): use pipe delimiter in vendorHash sed commands#657
wesm merged 1 commit intomainfrom
fix/release-sed-delimiter

Conversation

@wesm
Copy link
Copy Markdown
Collaborator

@wesm wesm commented Apr 19, 2026

Summary

  • The three vendorHash substitutions in scripts/release.sh used / as the sed delimiter, which clashes with the / characters in base64 sha256 hashes. BSD sed (macOS) aborts with bad flag in substitute command: 'F', leaving flake.nix with an empty vendorHash and a stray flake.nix.bak.
  • Switch those three substitutions to | as the delimiter so slashes in the hash pass through unchanged.

🤖 Generated with Claude Code

The vendorHash sed substitutions used `/` as the delimiter, which
collided with the `/` characters in base64 sha256 hashes (e.g.
`sha256-...u/FnyRh6/...`). On BSD sed this aborts with
"bad flag in substitute command: 'F'", leaving flake.nix with an
empty vendorHash and a stray flake.nix.bak.

Switch to `|` as the delimiter for the three vendorHash substitutions.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
@roborev-ci
Copy link
Copy Markdown

roborev-ci Bot commented Apr 19, 2026

roborev: Combined Review (081514d)

Verdict: No medium-or-higher findings; the change looks clean.

All three reviews agree the update is correct and low risk. It safely changes the sed substitution delimiter in scripts/release.sh so vendorHash values containing / no longer break the replacement step, and no correctness or security issues were identified.


Synthesized from 3 reviews (agents: codex, gemini | types: default, security)

@wesm wesm merged commit 0af2944 into main Apr 19, 2026
8 checks passed
@wesm wesm deleted the fix/release-sed-delimiter branch April 19, 2026 12:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant