NotAlexNoyleandClaude Fable 5.1
62af6e82c7
The owner's choice of 2026-11-02 after T-551's check found the tag: the update now, patch 0060 (the roots, byte-identical upstream) dropped, special attention to the certificate and HTTPS changes. - update-engine.sh RB_20261027 / --finish: the 72 patches on the tag (0060 fell away as already applied), jihad/uxp-RB_20261027 at 52ad9ab66e in third_party/uxp, the queue rewritten and renumbered from 0060, the pins (engine-version.env, the OE recipe, .gitmodules, the UA and the three start pages: UXP/6b18be9), JIHAD_APP_BUILD_ID 20261103000000; patch-queue.sh --check, check-engine-pins.sh and check-engine-api.py (baseline rewritten, unchanged) agree. - docs/ENGINE-SOURCE.md: the base, the dropped 0060, the renumbering, and the range's 12 commits each with its disposition — the two NSS certificate commits (emSign removed after the eMudhra compromise; certdata to Sept 2026) were on the device since the roots of 2026-10-25 and are the base's now; no PSM, TLS protocol, HSTS or certificate-UI change in the range; the memory-safety fixes (the JS OOB array copy, the jar: flag, feTile, the layout frame table, the mutation observer's strong ref, SQLite 3.54.1) taken with the base. - audit-roots.py against the fetched release certdata and the CCADB report: identical set and trust, none removed, RESULT OK (docs/rounds/certs-2026-11-03). - Desktop: the full build clean; 14 of 18 tests pass, the four left are the desktop GTK path's known read-back limit. ARM: libxul, the daemon, the bundle, the three packages; full pushes to all three variants; default-check x3 faults 0; the daemon's start line 28 of 29 optional exports as before. The areas the commits touch, on the device (tools/device/engine-checks.sh, new): about:settings, about:personas and about:addons through jar: under the flag change, cookies through the new SQLite, an SVG filter page with feTile and its overflow case (render/goanna/test/jihad-svg-filter.html, new), a long press's selection; faults 0. The certificate kit's checks (tools/device/cert-checks.sh): the TLS 1.0 refusal, the clean loads, expired / wrong.host / self-signed / untrusted-root with the SSL confirm's right flags, OCSP revocation enforced on grc.com, ssl.com and DigiCert's demos, revoked.badssl.com's CRL-only case invisible as before: nothing changed with the base. Records: docs/rounds/engine-rb27-2026-11-03/notes.txt. - tools/device/cert-checks.sh and t502/enyo-restore-job.sh (new): the certificate kit's device checks under a hand-started daemon, and the Enyo job put back after any spike round. Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
59 lines
3.0 KiB
Plaintext
59 lines
3.0 KiB
Plaintext
[submodule "third_party/uxp"]
|
||
path = third_party/uxp
|
||
url = https://github.com/NotAlexNoyle/UXP-Jihad.git
|
||
branch = jihad/uxp-RB_20261027
|
||
# The engine: upstream UXP at a release tag (build/engine/engine-version.env, UXP_TAG) plus Jihad's
|
||
# commits on this fork's branch jihad/uxp-<tag>; the parent gitlink pins the exact commit, so a fresh
|
||
# clone + `git submodule update --init` gets the source the builds compile once that branch is pushed
|
||
# to the fork. build/engine/update-engine.sh --finish rewrites `branch` with the other pins, and
|
||
# check-engine-pins.sh checks it. build/desktop/patches/ is the same commits as git mails
|
||
# (docs/ENGINE.md §1–2). `ignore = dirty`: only the recorded COMMIT matters, and it is what the OE
|
||
# SRCREV (build/webos-oe/recipes-jihad/goanna/goanna_1.0.bb) and this gitlink both pin.
|
||
ignore = dirty
|
||
[submodule "third_party/mochi"]
|
||
path = third_party/mochi
|
||
url = https://github.com/webOSArchive/mochi
|
||
[submodule "third_party/mochi-sampler"]
|
||
path = third_party/mochi-sampler
|
||
url = https://github.com/webOSArchive/mochi-sampler
|
||
[submodule "third_party/enyo-layout"]
|
||
path = third_party/enyo-layout
|
||
url = https://github.com/enyojs/layout
|
||
[submodule "third_party/libpbnjson"]
|
||
# The adapter's pbnjson headers, at submissions/10 (the device era: build-adapter-pdk.sh).
|
||
path = third_party/libpbnjson
|
||
url = https://github.com/openwebos/libpbnjson
|
||
[submodule "third_party/yajl"]
|
||
# yajl 1.0.12's API headers for the alternate gcc-9 adapter (build-adapter-arm.sh).
|
||
path = third_party/yajl
|
||
url = https://github.com/lloyd/yajl
|
||
[submodule "third_party/npapi-headers"]
|
||
# isis NPAPI headers 0.4; build/webos-oe/adapter-include/npapi/ links three of them and
|
||
# carries Jihad's own npapi.h (the device's touch event) and the nppalmdefs.h shim.
|
||
path = third_party/npapi-headers
|
||
url = https://github.com/isis-project/npapi-headers
|
||
[submodule "third_party/crosstool-ng"]
|
||
# crosstool-NG 1.25.0, built inside the toolchain container (build/webos-oe/toolchain/build.sh).
|
||
path = third_party/crosstool-ng
|
||
url = https://github.com/crosstool-ng/crosstool-ng
|
||
[submodule "third_party/webos-sdk-redux"]
|
||
# webOS Archive's modern webOS SDK: palm-package & co (Java) and the novacom/novacomd
|
||
# sources (tools/host/build-novacom.sh). build/webos-oe/host-path.sh puts its bin/ on PATH.
|
||
path = third_party/webos-sdk-redux
|
||
url = https://github.com/webOSArchive/webos-sdk-redux
|
||
shallow = true
|
||
[submodule "build/webos-oe/build-webos"]
|
||
# openwebos build-webos for the optional OpenEmbedded route (oe-env.sh checks it out on
|
||
# first use). Not checked out by a plain `git submodule update --init`; its build output
|
||
# stays inside it, so git does not look at its state.
|
||
path = build/webos-oe/build-webos
|
||
url = https://github.com/openwebos/build-webos
|
||
update = none
|
||
ignore = all
|
||
[submodule "third_party/pulseaudio"]
|
||
# PulseAudio 0.9.22 (the TouchPad's): its src/pulse/*.h go into the ARM sysroot
|
||
# (build/webos-oe/arm-sysroot.recipe) for cubeb_pulse.
|
||
path = third_party/pulseaudio
|
||
url = https://gitlab.freedesktop.org/pulseaudio/pulseaudio.git
|
||
shallow = true
|