Skip to content

Vendor hex_core v0.21.1 - #1285

Merged
ericmj merged 1 commit into
mainfrom
ericmj/vendor-hex-core-v0.21.1
Oct 22, 2026
Merged

ericmj merged 1 commit into
mainfrom
ericmj/vendor-hex-core-v0.21.1

Conversation

@ericmj

@ericmj ericmj commented Oct 22, 2026

Copy link
Copy Markdown
Member

Vendors hex_core v0.21.1 with scripts/vendor_hex_core.sh.

hex_core v0.21.1 skips a package file whose name resolves to the root of the tarball when it's a directory, instead of crashing with FunctionClauseError in :lists.seq/2 (hexpm/hex_core#252). Since hex_core v0.20.0 was vendored, mix hex.build crashed this way when the package files included the project directory, such as files: ["."], because expand_paths lists the directory itself as ".". A new test builds a package with files: ["."].

There's no changelog entry because no released Hex has the crash. The mix_hex_tarball.erl in v2.5.4 doesn't have the code from hex_core v0.20.0 that crashes.

hex_core v0.21.1 skips a package file whose name resolves to the root of
the tarball when it's a directory, instead of crashing with
FunctionClauseError in :lists.seq/2
(hexpm/hex_core#252). Since hex_core v0.20.0 was
vendored, mix hex.build crashed this way when the package files included
the project directory, such as files: ["."], because expand_paths lists
the directory itself as ".". Add a test that builds a package with
files: ["."].
@ericmj
ericmj merged commit 0e7311c into main Oct 22, 2026
15 checks passed
@ericmj
ericmj deleted the ericmj/vendor-hex-core-v0.21.1 branch October 22, 2026 10:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant