{"repo":"NousResearch/hermes-agent","public_id":"71250","display_label":"SQLite vulnerability repair retry logic for managed runtimes","summary":"These issues and PRs concern a bug where managed Python runtime repair for SQLite vulnerabilities resolves to an older or still-vulnerable version, and the associated fixes to retry with explicit or newer patch versions. The WAL-reset issue describes a related macOS case where a newer CPython patch is available but not selected during repair.","subsystem":null,"counts":{"members":3,"open_issues":0,"open_issues_distinct":0,"open_prs":0,"closed_issues":1,"merged_prs":1,"attempt_prs":1},"landed_fix":{"status":"merged_to_main","basis":"structural","pr":71631,"merged_at":"2026-07-25T23:42:49+00:00"},"resolution":{"state":"unresolved","by":null},"freshness":{"state":"verified","last_verified_at":"2026-07-25T23:42:49+00:00","is_stale":false},"grouping":{"backbone":"STRUCTURAL_SPANNING","link_density":0.6666666666666666},"fix_edges":[{"issue_number":71250,"pr_number":71631,"tier":"verified","basis":"superseded_ref","confidence":0.9,"recoverable_from_timeline":false,"pr_merged_at":"2026-07-25T23:42:49+00:00"}],"members":[{"kind":"issue","number":71250,"title":"WAL-reset bug: hermes update cannot repair macOS managed runtime (cpython-3.11.14 selected despite newer available)","url":null,"state":"closed"},{"kind":"pr","number":71318,"title":"fix(managed-uv): retry with explicit patch when bare-minor SQLite repair still resolves vulnerable","url":null,"state":"closed","close_reason":{"refs":[{"kind":"commit","value":"866cdce209","number":0},{"kind":"commit","value":"1161cc0b53","number":0},{"kind":"pr","value":"#71631","number":71631},{"kind":"pr","value":"#71250","number":71250},{"kind":"pr","value":"#70200","number":70200}],"category":"merged_via","implication":"superseded"},"merged":false},{"kind":"pr","number":71631,"title":"fix(managed-uv): retry newer patches when bare-minor SQLite repair resolves vulnerable (#71318)","url":null,"state":"merged","close_reason":{"category":"merged"},"merged":true,"is_fix_pr":true,"fix_tier":"verified","files_changed":["hermes_cli/managed_uv.py","tests/hermes_cli/test_managed_uv.py"]}],"trust":{"default_tier":"verified","includes_suggested":false}}