Artifact [1e27b38841]

Artifact 1e27b3884162529428678867d3736e026c2b9361bc71a78430090c94e4713638:

• File db/driver/ncruces/go.mod — part of check-in [9d35407ecb] at 2026-07-27 19:57:22 on branch trunk — fix: pin submodules to v0.7.0 instead of an orphaned pseudo-version (#190) (#195)

  All three submodules required the root module at v0.6.4-0.20260724230440-48111c1c984d. That pseudo-version names a commit pushed on the #118 PR branch, which was squash-merged — rewriting the work as a new commit and orphaning 48111c1. `git branch -r --contains` finds it on no branch; it survives only in proxy.golang.org's cache.

  CI never noticed because it resolves through the proxy. Direct-from-git resolution fails outright:

  $ GOMODCACHE=$(mktemp -d) GOWORK=off go mod download github.com/danmestas/go-libfossil go: github.com/danmestas/[email protected]: invalid version: unknown revision 48111c1c984d

  v0.7.0 is tagged and reachable, so the bootstrap constraint that forced a pseudo-version is gone. Repoint all three at the tag and tidy. The root go.mod hash is unchanged between the orphaned commit and v0.7.0, so this is a pure provenance fix with no dependency movement.

  Add a release guard alongside the existing `replace` guard: any in-repo module required at a pseudo-version now fails the release before the tag ships. The pattern anchors on the 14-digit timestamp and 12-hex hash, and accepts either separator before the timestamp so the vX.Y.Z-0.<ts>-<hash> form is caught as well as v0.0.0-<ts>-<hash>. Third-party pseudo-versions such as ncruces/go-sqlite3-wasm are deliberately untouched. (user: [email protected], size: 433) [annotate] [blame] [check-ins using]

module github.com/danmestas/go-libfossil/db/driver/ncruces

go 1.26.0

require (
	github.com/danmestas/go-libfossil v0.7.0
	github.com/danmestas/go-sqlite3-opfs v0.2.0
	github.com/ncruces/go-sqlite3 v0.33.0
)

require (
	github.com/ncruces/go-sqlite3-wasm v1.0.1-0.20260321101821-261d0f98d39c // indirect
	github.com/ncruces/julianday v1.0.0 // indirect
	golang.org/x/sys v0.45.0 // indirect
	golang.org/x/text v0.37.0 // indirect
)