Skip to content

refactor(build): adopt BUILD.bsmr manifests - #40

Merged
Windsor Nguyễn (windsornguyen) merged 6 commits into
mainfrom
codex/build-manifest-name
Aug 12, 2026
Merged

refactor(build): adopt BUILD.bsmr manifests#40
Windsor Nguyễn (windsornguyen) merged 6 commits into
mainfrom
codex/build-manifest-name

Conversation

@windsornguyen

@windsornguyen Windsor Nguyễn (windsornguyen) commented Aug 1, 2026

Copy link
Copy Markdown
Member

What does this change?

This PR makes BUILD.bsmr the default Bessemer package manifest.

  • The loader no longer searches the inherited BUCK.v2 and BUCK candidate names.
  • Bessemer rejects the legacy buildfile.name_v2 setting.
  • Repositories can use buildfile.name to select another explicit name, such as TARGETS.
  • The change renames 715 tracked package manifests and their fixture variants.
  • Owned references, bsmr init, and Reindeer now use BUILD.bsmr.
  • Repository policy rejects a new BUCK package manifest.
  • BUCK_TREE remains unchanged because it identifies a package modifier, not a package manifest.
  • The direct lru dependency uses version 0.18.2.

The loader and manifest tree change together. An intermediate revision with only one change cannot load the repository.

How was it tested?

  • pnpm run ci check.
  • cargo fmt --all -- --check.
  • cargo test -p bsmr_common test_buildfiles.
  • cargo build --locked --bin bsmr.
  • ./tools/bin/reindeer --third-party-dir tools/build/third-party/rust buckify.
  • target/debug/bsmr --isolation-dir=build-manifest-final targets 'bsmr_build//...'.
  • The Git index contains 715 BUILD.bsmr manifests.
  • The index contains no BUCK, BUCK.v2, BUCK.fixture, or TARGETS.test manifests.

A self-hosted //:bsmr build loads the migrated graph. It later fails in the generated ctor-1 rule because the Rust action lacks CARGO_PKG_VERSION_* variables. This PR does not change that Reindeer behavior.

  • CLA/Vouch check passes, or this PR only updates VOUCHED.td.

Base automatically changed from codex/source-license-headers to main August 11, 2026 02:25
Resolves RUSTSEC-2026-0253 (potential use-after-free due to lack of
panic safety in LruCache::pop) flagged by the OSV dependency audit.
The API surface we use (new, get, put, clear) is unchanged between
0.16.4 and 0.18.2.

Co-authored-by: Codesmith <codesmith-bot@users.noreply.github.com>
@socket-security

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedcargo/​lru@​0.16.4 ⏵ 0.18.210010093100100

View full report

Merged via the queue into main with commit 7a8b142 Aug 12, 2026
12 checks passed
@windsornguyen
Windsor Nguyễn (windsornguyen) deleted the codex/build-manifest-name branch August 12, 2026 20:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants