Teknium 3dadeb9246 fix(pm): cold updates on Python < 3.13 trust a stored intermediate CA ...

An install still on its legacy 3.11 venv runs its first `hermes update`
from that interpreter, which downloads uv and Python 3.14 with plain
urllib before PM's worker (and truststore) exists. Windows can cache Let's
Encrypt "Root YR" in its intermediate store without ISRG Root X1; GitHub's
asset CDN now chains through Root YR, so 3.11 rejected every download with
"unable to get issuer certificate" while PowerShell and 3.14 accepted it.

Python 3.13+ sets VERIFY_X509_PARTIAL_CHAIN by default. Set it on the PM
downloader's opener so the legacy interpreter applies the same rule;
hostname, expiry and pinned sha256 checks are unchanged.

Co-authored-by: Gille <4317663+helix4u@users.noreply.github.com>

2026-10-05 23:37:02 -07:00

..

__init__.py

fix: Hermes's own lint, activate, tui and MCP launchers use PM's node/npx/uv, never the user's

2026-09-27 22:30:55 -07:00

_marker_eval.py

…

_uv.py

…

AGENTS.md

docs: root AGENTS.md becomes a hub; area rules move where they load

2026-10-04 23:05:42 -07:00

artifact_mirror.py

fix(pm): download npm-hosted tools through the user's npm registry

2026-09-28 02:00:41 -07:00

artifact-mirror.json

…

build_env.py

…

build_operations.py

…

cli.py

fix(pm): record a partial pm update as failed in the pm receipt

2026-10-05 15:34:40 -07:00

client.py

fix(pm): install libatomic before the detached update child, not a sudo ticket

2026-10-04 19:19:41 +05:30

defaults.py

fix: install cua-driver and the Browser Use CLI by default again

2026-09-27 19:18:58 -07:00

download_state.py

…

downloader.py

fix(pm): cold updates on Python < 3.13 trust a stored intermediate CA

2026-10-05 23:37:02 -07:00

environment.py

fix(pm): preserve transport knobs under no_config isolation, strip only index redirects

2026-09-28 06:42:00 -07:00

environments_adopt.py

…

environments.py

fix(pm): name a shared checkout's owner by the interpreter its launcher execs

2026-10-03 22:46:14 -04:00

extras.py

build: drop the hermes-agent[supermemory] extra

2026-10-02 05:10:06 -07:00

features.py

…

filesystem.py

fix(pm): wait out Windows scanner holds in the archive hoist and entry swaps

2026-10-05 17:08:32 -05:00

index_config.py

fix(pm): preserve transport knobs under no_config isolation, strip only index redirects

2026-09-28 06:42:00 -07:00

install.py

fix(pm): wait out Windows scanner holds in the archive hoist and entry swaps

2026-10-05 17:08:32 -05:00

launch.py

…

libatomic.py

fix(update): keep the completion parent stdlib-only around the libatomic pre-install

2026-10-04 19:19:41 +05:30

lock.json

fix(stt): bundle whisper.cpp CPU for Windows ARM64

2026-10-05 12:37:46 -04:00

lock.py

…

native_build.py

…

network.py

…

operations.py

…

package.py

fix(pm): carry the libatomic remedy as InstallError's remedy

2026-10-04 19:19:41 +05:30

packages.py

fix(stt): bundle whisper.cpp CPU for Windows ARM64

2026-10-05 12:37:46 -04:00

paths.py

…

plugin_declarations.py

…

plugin_eviction.py

…

plugin_inputs.py

…

plugins_state.py

…

progress.py

…

publication.py

…

pyproject.toml

…

receipt.py

…

recovery.py

fix(pm): collect generations after maintenance syncs

2026-09-27 02:55:39 -07:00

registry.py

fix(pm): keep musl installs on compatible runtime artifacts

2026-09-27 03:24:39 -07:00

runtime_stage.py

…

runtime.py

fix(pm): canonicalize the store only in the PM runtime identity

2026-09-27 02:55:05 -07:00

security_packages.py

refactor(pm): expose MUSL_TARGETS publicly; drop the per-URL pin hash cache

2026-09-27 03:24:39 -07:00

shell.py

…

store.py

fix(pm): wait out Windows scanner holds in the archive hoist and entry swaps

2026-10-05 17:08:32 -05:00

termux_libs.py

…

termux_runtime_libs.json

…

testenv.py

…

update.py

fix(pm): download npm-hosted tools through the user's npm registry

2026-09-28 02:00:41 -07:00

uv_cache_prune.py

…

uv.lock

…

worker_operations.py

…

worker.py

…

workspace.py

fix(pm): keep bundled plugins' dashboard dist/ in the build snapshot

2026-09-27 02:54:35 -07:00