{"repo":"NousResearch/hermes-agent","public_id":"124654","display_label":"SSL_CERT_FILE not passed to Git during updates","summary":"These members address a bug where the SSL_CERT_FILE environment variable is not forwarded to Git subprocesses during updates, causing failures in corporate environments with custom certificate authorities. Fixes involve mapping SSL_CERT_FILE to GIT_SSL_CAINFO for Git children.","subsystem":null,"counts":{"members":4,"open_issues":0,"open_issues_distinct":0,"open_prs":0,"closed_issues":1,"merged_prs":1,"attempt_prs":2},"landed_fix":{"status":"merged_to_main","basis":"structural","pr":126113,"merged_at":"2026-09-28T09:00:43+00:00"},"resolution":{"state":"resolved","by":"pr-126113"},"freshness":{"state":"verified","last_verified_at":"2026-09-28T09:00:43+00:00","is_stale":false},"grouping":{"backbone":"STRUCTURAL_SPANNING","link_density":0.5},"fix_edges":[{"issue_number":119928,"pr_number":126113,"tier":"verified","basis":"closing_ref","confidence":0.95,"recoverable_from_timeline":true,"pr_merged_at":"2026-09-28T09:00:43+00:00"},{"issue_number":123132,"pr_number":126113,"tier":"verified","basis":"closing_ref","confidence":0.95,"recoverable_from_timeline":true,"pr_merged_at":"2026-09-28T09:00:43+00:00"},{"issue_number":124654,"pr_number":126113,"tier":"verified","basis":"closing_ref","confidence":0.95,"recoverable_from_timeline":true,"pr_merged_at":"2026-09-28T09:00:43+00:00"}],"members":[{"kind":"issue","number":124654,"title":"hermes update: git fetch ignores SSL_CERT_FILE, so a corporate root supplied that way passes the channel read and fails at 'Fetching updates'","url":null,"state":"closed"},{"kind":"pr","number":124675,"title":"fix(update): bridge SSL_CERT_FILE into Git trust","url":null,"state":"closed","close_reason":{"refs":[{"kind":"pr","value":"#126113","number":126113},{"kind":"pr","value":"#124678","number":124678}],"category":"implemented_elsewhere","implication":"superseded"},"merged":false},{"kind":"pr","number":124678,"title":"fix(update): map SSL_CERT_FILE into GIT_SSL_CAINFO for git children","url":null,"state":"closed","close_reason":{"refs":[{"kind":"pr","value":"#126113","number":126113}],"category":"uncategorized","implication":"needs_llm"},"merged":false},{"kind":"pr","number":126113,"title":"Updates work behind corporate CA/npm mirrors, and refused .env writes stop reporting success (#124654, #123132, #119928)","url":null,"state":"merged","close_reason":{"category":"merged"},"merged":true,"is_fix_pr":true,"fix_tier":"verified","files_changed":["hermes_cli/callbacks.py","hermes_cli/config.py","hermes_cli/config_env_routing.py","hermes_cli/credential_lifecycle.py","hermes_cli/update_cmd.py","hermes_cli/web_routers/config_env.py","pm/artifact_mirror.py","pm/index_config.py","pm/store.py","pm/update.py","tests/e2e/core/upgrade/git/test_foreign_state.py","tests/e2e/core/upgrade/hosts/test_path_shapes.py","tests/e2e/core/upgrade/network/test_mirrors.py","tests/e2e/core/upgrade/network/test_proxy_only_egress.py","tests/e2e/core/upgrade/test_config_roundtrip_properties.py","tests/hermes_cli/test_managed_scope_writeguard.py","tests/hermes_cli/test_update_ssl_cert_file.py","tests/pm/test_artifact_mirror.py","tui_gateway/methods_complete.py"]}],"trust":{"default_tier":"verified","includes_suggested":false}}