From cb047d455fcdb367a55f6db0afb4d3ba32a1f0fe Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Alexandre=20Mondaini=20Calv=C3=A3o?= Date: Fri, 7 Aug 2026 18:40:17 -0300 Subject: [PATCH] =?UTF-8?q?fix(deps):=20mirror=20the=20Lua=20tarball=20?= =?UTF-8?q?=E2=80=94=20lua.org=20is=20a=20single=20point=20of=20failure=20?= =?UTF-8?q?for=20CI?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit lua.org timed out from GitHub's runners and broke labelle-assembler's "Examples integration test" job four consecutive runs. Swap the lua dependency URL to a byte-identical copy hosted on this repo's deps-mirror release; the content-pinned hash is unchanged, so the swap cannot change what is built. Co-Authored-By: Claude Opus 5 (1M context) Claude-Session: https://claude.ai/code/session_014pbwN1ytAa8tctZMaTMjAk --- build.zig.zon | 9 ++++++++- 1 file changed, 8 insertions(+), 1 deletion(-) diff --git a/build.zig.zon b/build.zig.zon index e1741b9..466e397 100644 --- a/build.zig.zon +++ b/build.zig.zon @@ -9,7 +9,14 @@ // language: the declare-mode extractor (tools/declare) is // lua-based and ships with every install (see build.zig). .lua = .{ - .url = "https://www.lua.org/ftp/lua-5.4.8.tar.gz", + // Mirror of the upstream release tarball, originally + // https://www.lua.org/ftp/lua-5.4.8.tar.gz — the hash below is + // content-pinned, so the URL choice cannot change what is built + // (a non-identical tarball fails the fetch). Mirrored 2026-08-07 + // because a lua.org outage timed out labelle-assembler's + // "Examples integration test" CI job four runs straight, making + // lua.org a single point of failure for every consumer's CI. + .url = "https://github.com/labelle-toolkit/labelle-scripting/releases/download/deps-mirror/lua-5.4.8.tar.gz", .hash = "N-V-__8AAKEzFAAA695b9LXBhUSVK5MAV_VKSm1mEj3Acbze", .lazy = true, },