{"repo":"NousResearch/hermes-agent","public_id":"130836","display_label":"Exact pins need exclude-newer exemption in packaging","summary":"These issues and PRs concern a bug where exact dependency pins lack an exemption from the exclude-newer constraint, which can break updates after a release. The work involves identifying affected pins, applying exemptions, and adding tests to enforce the invariant.","subsystem":"hermes_cli","counts":{"members":5,"open_issues":0,"open_issues_distinct":0,"open_prs":0,"closed_issues":1,"merged_prs":2,"attempt_prs":2},"landed_fix":{"status":"merged_to_main","basis":"structural","pr":137110},"resolution":{"state":"resolved","by":"pr-137110"},"freshness":{"state":"verified","last_verified_at":"2026-10-12T20:11:35+00:00","is_stale":false},"grouping":{"backbone":"STRUCTURAL_SPANNING","link_density":0.4},"fix_edges":[{"issue_number":119704,"pr_number":137110,"tier":"verified","basis":"superseded_ref","confidence":0.9,"recoverable_from_timeline":false},{"issue_number":119704,"pr_number":137159,"tier":"verified","basis":"superseded_ref","confidence":0.9,"recoverable_from_timeline":false},{"issue_number":126194,"pr_number":137110,"tier":"verified","basis":"closing_ref","confidence":0.95,"recoverable_from_timeline":true},{"issue_number":128937,"pr_number":137110,"tier":"verified","basis":"closing_ref","confidence":0.95,"recoverable_from_timeline":true},{"issue_number":128937,"pr_number":137159,"tier":"verified","basis":"superseded_ref","confidence":0.9,"recoverable_from_timeline":false},{"issue_number":130836,"pr_number":137110,"tier":"verified","basis":"closing_ref","confidence":0.95,"recoverable_from_timeline":true},{"issue_number":130836,"pr_number":137159,"tier":"verified","basis":"superseded_ref","confidence":0.9,"recoverable_from_timeline":false},{"issue_number":131681,"pr_number":137110,"tier":"verified","basis":"closing_ref","confidence":0.95,"recoverable_from_timeline":true},{"issue_number":132558,"pr_number":137110,"tier":"verified","basis":"closing_ref","confidence":0.95,"recoverable_from_timeline":true},{"issue_number":133876,"pr_number":137110,"tier":"verified","basis":"closing_ref","confidence":0.95,"recoverable_from_timeline":true},{"issue_number":135483,"pr_number":137110,"tier":"verified","basis":"closing_ref","confidence":0.95,"recoverable_from_timeline":true},{"issue_number":135589,"pr_number":137110,"tier":"verified","basis":"closing_ref","confidence":0.95,"recoverable_from_timeline":true},{"issue_number":136868,"pr_number":137110,"tier":"verified","basis":"closing_ref","confidence":0.95,"recoverable_from_timeline":true}],"members":[{"kind":"issue","number":130836,"title":"[Bug]: Exact pins without an exclude-newer exemption can brick hermes update after a release","url":null,"state":"closed"},{"kind":"pr","number":130838,"title":"fix(deps): exempt every exact pin from exclude-newer and guard the invariant","url":null,"state":"closed","close_reason":{"refs":[{"kind":"commit","value":"37725f24f9","number":0},{"kind":"pr","value":"#137110","number":137110}],"category":"implemented_elsewhere","implication":"superseded"},"merged":false},{"kind":"pr","number":132300,"title":"fix(packaging): exempt 7 exact pins from exclude-newer and enforce with tests (fixes #130836)","url":null,"state":"closed","close_reason":{"refs":[{"kind":"commit","value":"37725f24f9","number":0},{"kind":"commit","value":"9f63a6fe5c","number":0},{"kind":"pr","value":"#137110","number":137110},{"kind":"pr","value":"#137159","number":137159}],"category":"superseded_by_pr","implication":"superseded"},"merged":false},{"kind":"pr","number":137110,"title":"Plugin installs work on any package mirror: release age is checked when Hermes locks (3 days), not on users' machines (#135589)","url":null,"state":"merged","close_reason":{"category":"merged","implication":"superseded"},"merged":true,"is_fix_pr":true,"fix_tier":"verified","files_changed":["plugin-catalog/README.md","pm/AGENTS.md","pm/environment.py","pm/workspace.py","pyproject.toml","tests/pm/test_workspace.py","tests/pm/test_workspace_build_inputs.py","tests/test_packaging_metadata.py","website/docs/developer-guide/plugins/catalog-submission.md","website/docs/developer-guide/plugins/index.md","website/docs/reference/package-management.md"]},{"kind":"pr","number":137159,"title":"Core-only installs and hermes update work again on mirrors without upload times (regression from #137110)","url":null,"state":"merged","close_reason":{"category":"merged","implication":"superseded"},"merged":true,"is_fix_pr":true,"fix_tier":"verified","files_changed":["pm/workspace.py","tests/pm/test_workspace.py"]}],"trust":{"default_tier":"verified","includes_suggested":false}}