Skip to content

[fix] require trusted scripts for SQLite callbacks (STAR-102) - #41

Closed
vt128 wants to merge 1 commit into
codex/ci-macos15-adoption-20261107from
codex/sqlite-udf-host-policy-20261107
Closed

vt128 wants to merge 1 commit into
codex/ci-macos15-adoption-20261107from
codex/sqlite-udf-host-policy-20261107

Conversation

@vt128

@vt128 vt128 commented Nov 7, 2026 •

Copy link
Copy Markdown
Member

SQLite callback registration requires explicitly trusted scripts. The fully capable CLI enables those callbacks only through its trusted-script path, and the regression tests cover the capability boundary and execution behavior.

This PR follows #40 for supported macOS runners and Go 1.27.4 production builds. The complete reviewed application, documentation, tests and module files retain their previous contents on that CI baseline. The normal Go 1.27.4 commit hook passed with formatting, vet and the full main-module test suite.

The parent’s x/net dependency findings still block packaging and the dependent installation checks. The PR remains a draft pending those gates.

Superseded by security PR #43, merged as fb9fdd8. That PR consolidates this reviewed change with the approved CLI/kit/examples Go 1.26 minimum and secure production dependencies; the separate docs follow-up #42 is also merged. This historical PR is closed without merging, and its original source/check evidence remains intact.

@codecov

codecov Bot commented Nov 7, 2026 •

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 88.01%. Comparing base (50258c2) to head (2733ab7).

Additional details and impacted files
@@                          Coverage Diff                           @@
##           codex/ci-macos15-adoption-20261107      #41      +/-   ##
======================================================================
+ Coverage                               87.99%   88.01%   +0.02%     
======================================================================
  Files                                      23       23              
  Lines                                    1166     1168       +2     
======================================================================
+ Hits                                     1026     1028       +2     
  Misses                                    108      108              
  Partials                                   32       32              

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@vt128
vt128 force-pushed the codex/sqlite-udf-host-policy-20261107 branch from 1ea179d to 2733ab7 Compare November 11, 2026 12:49
@vt128 vt128 closed this Nov 11, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant