Skip to content

Reject dependency aliases that share build artifact paths - #29643

Closed
mohammadfawaz wants to merge 2 commits into
masterfrom
codex/fix-veria-39-dependency-alias
Closed

mohammadfawaz wants to merge 2 commits into
masterfrom
codex/fix-veria-39-dependency-alias

Conversation

@mohammadfawaz

@mohammadfawaz mohammadfawaz commented Sep 25, 2026 •

Copy link
Copy Markdown
Collaborator

Superseded by #29639. The implementation and regression coverage are included in that combined PR. Review the changes there.

Dependency names such as victim and victim.aleo were distinct graph nodes but used the same build directory and bytecode path. A transitive dependency could occupy the primary program's output path before the primary program was written.

Reject distinct dependency names that have the same name after removal of the .aleo suffix. The check runs during graph construction, before build artifacts are written. Repeated dependencies with the same name retain their existing compatibility checks.

Addresses VERIA-39.

Original finding: https://veria.dev/dashboard/findings/YjsTrJIAH6lHK6d-3nvI7

@mohammadfawaz mohammadfawaz added 🐛 bug Something isn't working 🧱 Core Compiler Anything related to the core compiler including parsing, analysis, transforms, codegen, etc. labels Sep 28, 2026
@mohammadfawaz mohammadfawaz self-assigned this Sep 28, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

🐛 bug Something isn't working 🧱 Core Compiler Anything related to the core compiler including parsing, analysis, transforms, codegen, etc.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant