nvidia-holoscan / holoscan-cli

80%

main: 80%

LAST BUILD ON BRANCH pull-request/234

branch: pull-request/234

CHANGE BRANCH

x

Reset

• pull-request/234
• ag/cgroup-cpu-limits
• ag/remove-redundant-sipl-test
• ag/sipl-host-assets
• agent/document-ga-release-changelog
• agent/fix-source-project-portability
• chore/remove-unused-blossom-ci
• chore/verify-downloaded-binary-checksums
• codex-tool-runner-alias
• dependabot/github_actions/actions/cache-5
• dependabot/github_actions/actions/checkout-4
• dependabot/github_actions/actions/checkout-5
• dependabot/github_actions/actions/checkout-6
• dependabot/github_actions/actions/checkout-7
• dependabot/github_actions/actions/checkout-7.0.1
• dependabot/github_actions/actions/dependency-review-action-5
• dependabot/github_actions/actions/dependency-review-action-5.0.0
• dependabot/github_actions/actions/download-artifact-4.1.9
• dependabot/github_actions/actions/download-artifact-4.2.0
• dependabot/github_actions/actions/download-artifact-4.2.1
• dependabot/github_actions/actions/download-artifact-5.0.0
• dependabot/github_actions/actions/download-artifact-6.0.0
• dependabot/github_actions/actions/download-artifact-7.0.0
• dependabot/github_actions/actions/download-artifact-8.0.0
• dependabot/github_actions/actions/download-artifact-8.0.1
• dependabot/github_actions/actions/github-script-8.0.0
• dependabot/github_actions/actions/github-script-9.0.0
• dependabot/github_actions/actions/setup-python-6
• dependabot/github_actions/actions/setup-python-6.3.0
• dependabot/github_actions/actions/setup-python-7.0.0
• dependabot/github_actions/actions/upload-artifact-4.5.0
• dependabot/github_actions/actions/upload-artifact-5
• dependabot/github_actions/actions/upload-artifact-6
• dependabot/github_actions/actions/upload-artifact-7
• dependabot/github_actions/actions/upload-artifact-7.0.1
• dependabot/github_actions/coverallsapp/github-action-2.3.6
• dependabot/github_actions/coverallsapp/github-action-2.3.7
• dependabot/github_actions/coverallsapp/github-action-2.3.8
• dependabot/github_actions/github/codeql-action-4
• dependabot/github_actions/pypa/gh-action-pypi-publish-1.14.2
• dependabot/github_actions/test-summary/action-2.6
• dependabot/pip/cookiecutter-gte-2.7.1
• dependabot/pip/coverage-7.10.0
• dependabot/pip/coverage-7.10.1
• dependabot/pip/coverage-7.10.2
• dependabot/pip/coverage-7.10.3
• dependabot/pip/coverage-7.10.4
• dependabot/pip/coverage-7.10.5
• dependabot/pip/coverage-7.10.6
• dependabot/pip/coverage-7.10.7
• dependabot/pip/coverage-7.11.0
• dependabot/pip/coverage-7.11.1
• dependabot/pip/coverage-7.11.3
• dependabot/pip/coverage-7.12.0
• dependabot/pip/coverage-7.13.0
• dependabot/pip/coverage-7.13.1
• dependabot/pip/coverage-7.13.2
• dependabot/pip/coverage-7.13.3
• dependabot/pip/coverage-7.13.4
• dependabot/pip/coverage-7.13.5
• dependabot/pip/coverage-7.14.0
• dependabot/pip/coverage-7.9.0
• dependabot/pip/coverage-7.9.1
• dependabot/pip/coverage-7.9.2
• dependabot/pip/coverage-tw-7.14.1
• dependabot/pip/coverage-tw-7.14.3
• dependabot/pip/coverage-tw-7.15.2
• dependabot/pip/coverage-tw-7.16.0
• dependabot/pip/coveralls-4.0.2
• dependabot/pip/coveralls-4.1.0
• dependabot/pip/jsonschema-gte-4.26.0-and-lt-5.0
• dependabot/pip/mypy-1.16.0
• dependabot/pip/mypy-1.16.1
• dependabot/pip/mypy-1.17.0
• dependabot/pip/mypy-1.17.1
• dependabot/pip/mypy-1.18.1
• dependabot/pip/mypy-1.18.2
• dependabot/pip/mypy-1.19.0
• dependabot/pip/mypy-1.19.1
• dependabot/pip/mypy-1.20.0
• dependabot/pip/mypy-1.20.1
• dependabot/pip/mypy-1.20.2
• dependabot/pip/mypy-2.0.0
• dependabot/pip/mypy-2.1.0
• dependabot/pip/mypy-tw-2.3.0
• dependabot/pip/mypy-tw-2.3.1
• dependabot/pip/packaging-24.2
• dependabot/pip/packaging-25.0
• dependabot/pip/pip-25.3
• dependabot/pip/pip-26.0.1
• dependabot/pip/pip-512858e340
• dependabot/pip/pip-81c3d069c8
• dependabot/pip/pip-99a64d02cb
• dependabot/pip/pip-9aca4bcaf5
• dependabot/pip/pip-a0bd3f3b45
• dependabot/pip/pip-a6aa50acab
• dependabot/pip/pip-aa7cb66ac2
• dependabot/pip/pre-commit-4.2.0
• dependabot/pip/pre-commit-4.3.0
• dependabot/pip/pre-commit-4.4.0
• dependabot/pip/pre-commit-4.5.0
• dependabot/pip/pre-commit-4.5.1
• dependabot/pip/pre-commit-4.6.0
• dependabot/pip/pre-commit-tw-4.6.1
• dependabot/pip/pre-commit-tw-4.6.2
• dependabot/pip/psutil-7.0.0
• dependabot/pip/psutil-7.1.3
• dependabot/pip/psutil-7.2.0
• dependabot/pip/psutil-7.2.1
• dependabot/pip/psutil-7.2.2
• dependabot/pip/pytest-8.4.1
• dependabot/pip/pytest-8.4.2
• dependabot/pip/pytest-9.0.0
• dependabot/pip/pytest-9.0.1
• dependabot/pip/pytest-9.0.2
• dependabot/pip/pytest-9.0.3
• dependabot/pip/pytest-cov-6.2.1
• dependabot/pip/pytest-cov-6.3.0
• dependabot/pip/pytest-cov-7.0.0
• dependabot/pip/pytest-cov-7.1.0
• dependabot/pip/pytest-mock-3.14.1
• dependabot/pip/pytest-mock-3.15.0
• dependabot/pip/pytest-mock-3.15.1
• dependabot/pip/pytest-tw-9.1.1
• dependabot/pip/python-on-whales-0.74.0
• dependabot/pip/python-on-whales-0.77.0
• dependabot/pip/python-on-whales-0.79.0
• dependabot/pip/python-on-whales-0.80.0
• dependabot/pip/python-on-whales-0.81.0
• dependabot/pip/pyyaml-6.0.3
• dependabot/pip/referencing-gte-0.37.0
• dependabot/pip/requests-2.32.5
• dependabot/pip/requests-2.33.0
• dependabot/pip/requests-2.33.1
• dependabot/pip/requests-2.34.0
• dependabot/pip/requests-2.34.1
• dependabot/pip/requests-2.34.2
• dependabot/pip/tomli-tw-2.4
• docs/release-tagging-workflow
• feat/bundle-holohub-module-template
• feat/container-signal-handling
• feat/create-standalone-modules
• feat/install-prefix
• feat/json-read-verbs
• feat/standalone-module-configuration
• feat/standalone-module-create
• feat/standalone-module-project-configuration
• feat/version-flag
• feature/dryrun-json-command-plan
• fix-build-metadata
• fix-pypi-readme-links
• fix/build-local-truthiness
• fix/clear-cache-safety-boundary
• fix/configurable-container-toolkit
• fix/ctest-script-env-first
• fix/dry-run-read-only-replayable
• fix/metadata-run-command-trust-model
• fix/package-explicit-project-and-artifact-check
• fix/port-holohub-cli-1601
• fix/prevent-cmake-manifest-injection
• fix/privileged-setup-one-env
• fix/rc3-setup-script-fallback
• fix/reject-mutable-external-refs
• fix/release-4.6-sdk-cmake-prefix
• fix/release-4.6-test-runtime
• fix/restore-4.2.0-release-manifests
• fix/update-v1-comments-to-version
• fix/verbose-local-build
• fix/verify-kitware-key-fingerprint
• main
• package-tgz
• pull-request/106
• pull-request/124
• pull-request/125
• pull-request/130
• pull-request/136
• pull-request/143
• pull-request/155
• pull-request/174
• pull-request/175
• pull-request/176
• pull-request/177
• pull-request/178
• pull-request/180
• pull-request/181
• pull-request/183
• pull-request/185
• pull-request/186
• pull-request/187
• pull-request/189
• pull-request/190
• pull-request/191
• pull-request/193
• pull-request/198
• pull-request/199
• pull-request/200
• pull-request/202
• pull-request/203
• pull-request/204
• pull-request/205
• pull-request/206
• pull-request/207
• pull-request/209
• pull-request/217
• pull-request/218
• pull-request/219
• pull-request/221
• pull-request/222
• pull-request/224
• pull-request/225
• pull-request/226
• pull-request/229
• pull-request/230
• pull-request/233
• pull-request/235
• pull-request/239
• pull-request/240
• pull-request/34
• pull-request/35
• pull-request/36
• pull-request/37
• pull-request/38
• pull-request/40
• pull-request/55
• pull-request/56
• pull-request/58
• pull-request/60
• pull-request/61
• pull-request/64
• pull-request/65
• pull-request/74
• pull-request/80
• pull-request/84
• pull-request/86
• pull-request/92
• releae/3.5.0
• release/2.9.0
• release/3.0.0
• release/3.1.0
• release/3.10.0
• release/3.11.0
• release/3.2.0
• release/3.3.0
• release/3.4.0
• release/3.4.1
• release/3.5.0
• release/3.6.0
• release/3.7.0
• release/3.8.0
• release/3.9.0
• release/4.0.0
• release/4.1.0
• release/4.2.0
• release/4.3.0
• release/4.4.0
• release/4.5.0
• release/4.6.0
• update-precommit-fix
• update-release-3.6.0
• v4.3.0rc5
• v4.3.0rc6
• v4.5.0rc1
• v4.5.0rc2
• v4.5.0rc3
• v4.7.0a0
• v5.0.0a0
• vchang/3.3-software-stack
• vchang/app-test
• vchang/app-testing
• vchang/configure_release_2.9
• vchang/consolidate-platform
• vchang/copy-pr-bot
• vchang/cwes
• vchang/drop-python-3.9
• vchang/e2e-workflow-
• vchang/gh-8
• vchang/holohub
• vchang/jinja2-cve-2025-27516
• vchang/nv-runner
• vchang/package-filename
• vchang/poetry-setup
• vchang/release-action
• vchang/remove-no-commit-to-branch
• vchang/test-actions
• vchang/test-pypi
• vchang/tools-validation
• vchang/unit-tests
• wenqil/build-configure-only
• wenqil/ctest-script-env-override
• wenqil/dev-release
• wenqil/document-release-process
• wenqil/holohub-cli
• wenqil/pr177-review-followups
• wenqil/setup-add-build-essential
• wenqil/sync-operator-names
• wenqil/test-help-surface-probe
• wenqil/track-a-coverage
• wenqil/versioning-base-image-default
• whom/add-blossom-action
• whom/fix-blossom-action

Build # 33419263788

Build Type

Pull #234

github

Committed by wyli

Commit Message

fix(deps): reject mutable external module refs

Require remote module sources to use full commit SHAs before CMake FetchContent can consume them. Preserve local development through existing path overrides and omit remote coordinates when an override is active.

Co-authored-by: Codex <noreply@openai.com>
Signed-off-by: Wenqi Li <wenqil@nvidia.com>

Pull Request Pull Request #234: fix(deps): reject mutable external module refs

Coverage Stats

13 of 13 new or added lines in 2 files covered. (100.0%)

4299 of 5367 relevant lines covered (80.1%)

0.8 hits per line