rbs 4.0.3 → 4.1.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 77f310d0293781c4da3d3835ee34be5b310dc4aace7b75db580060432f5dd10c
-  data.tar.gz: 8d982db360beced794afa05c156c40db8b368f7b2d0b0180ad61434d3c1eb0a9
+  metadata.gz: a0ae1797f25f4639914ed5244dd903aa9bf0cb28d8f7ad46917ea78a5a390c8b
+  data.tar.gz: 78456ce40939bc2911cf4b70a8053449f34a457fadc35eda478d6e7bec7cc527
 SHA512:
-  metadata.gz: 87d0a52295c6167fb791c2ff843dee5a9b7c1d4cc9d13fe5ccf8c12abcc7ed507497021e691dd0cd1a134ff886c9ba29461f03f2a26fc3402af1c78bc36ec62f
-  data.tar.gz: 40381f1988f06a3262de9367042ad0e04864f7c9f0a1556f30dc01003874db8018a77b10c613e090993738d3787861ccb84417631a4cc57c3998ca99c831eb8b
+  metadata.gz: b27b18e6a70bf268ecb3db9de38954a733352d643504d1842f9c2dbc9aa4c3af7abf5b9816838a795082061ed3519384e764c31acbce208338cae636481b495a
+  data.tar.gz: fc7f3b804b4f93e18f71032ff34b19962100c5ca835628cf9d8e44467c96c683c699fb6fe8e0ec895a70c448bf1b21e9f840efd523e295378da9a6a5a42e340f

data/.dockerignore

@@ -0,0 +1,37 @@
+# Keep the build context small. .git is intentionally NOT ignored: rbs.gemspec
+# builds its file list with `git ls-files`.
+#
+# Safe to ignore here: untracked/generated paths, and tracked paths the gemspec
+# already rejects (so `gem build` does not expect them on disk). Do NOT ignore a
+# tracked path the gemspec ships — `gem build` would fail with "... are not
+# files". .vscode/ and benchmark/ are tracked but rejected by the gemspec.
+.vscode/
+benchmark/
+
+# Editor / tooling / worktree copies (untracked; each is a full repo clone)
+.claude/
+trees/
+.devcontainer/
+.idea/
+.ruby-lsp/
+.yardoc/
+doc/
+datasets/
+tmp/
+
+# Build artifact — rebuilt inside the image by `rake wasm:jruby_setup`
+lib/rbs/wasm/*.wasm
+*.gem
+ext/**/*.o
+ext/**/*.so
+ext/**/*.bundle
+*.log
+
+# Local scratch / experiment files
+flamegraph.html
+gc.html
+foo.rbs
+sorted.json
+string.json
+Gemfile-*
+gemfiles/

data/.github/dependabot.yml

@@ -21,4 +21,4 @@ updates:
     schedule:
       interval: 'weekly'
     labels:
-      - 'no-milestone'
+      - 'skip-changelog'

data/.github/workflows/bundle-update.yml

@@ -11,7 +11,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
 
       - name: Set up Ruby
         uses: ruby/setup-ruby@v1
@@ -58,6 +58,6 @@ jobs:
             --body "Automated weekly bundle update" \
             --head "$(git rev-parse --abbrev-ref HEAD)" \
             --base "${{ github.event.repository.default_branch }}" \
-            --label "no-milestone"
+            --label "skip-changelog"
 
           gh pr merge --auto --merge "$(git rev-parse --abbrev-ref HEAD)"

data/.github/workflows/c-check.yml

@@ -7,11 +7,14 @@ on:
   pull_request: {}
   merge_group: {}
 
+permissions:
+  contents: read
+
 jobs:
   format-check:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: ruby/setup-ruby@v1
         with:
           ruby-version: "4.0"
@@ -24,8 +27,13 @@ jobs:
           sudo apt-get install -y libdb-dev curl autoconf automake m4 libtool
       - name: Install clang-format from LLVM
         run: |
-          wget -O - https://apt.llvm.org/llvm-snapshot.gpg.key | sudo apt-key add -
-          sudo apt-add-repository "deb http://apt.llvm.org/jammy/ llvm-toolchain-jammy-20 main"
+          # The codename must match the `runs-on` image: `ubuntu-latest` is 24.04 (noble).
+          wget -O - https://apt.llvm.org/llvm-snapshot.gpg.key \
+            | sudo gpg --dearmor -o /usr/share/keyrings/llvm-archive-keyring.gpg
+          # Written directly rather than through `apt-add-repository`, which cannot
+          # parse `[signed-by=...]` inside a one-line `deb` shortcut.
+          echo "deb [signed-by=/usr/share/keyrings/llvm-archive-keyring.gpg] http://apt.llvm.org/noble/ llvm-toolchain-noble-20 main" \
+            | sudo tee /etc/apt/sources.list.d/llvm.list
           sudo apt-get update
           sudo apt-get install -y clang-format-20
           sudo ln -sf /usr/bin/clang-format-20 /usr/local/bin/clang-format
@@ -35,9 +43,9 @@ jobs:
       - name: Install Re2c
         run: |
           cd /tmp
-          curl -L https://github.com/skvadrik/re2c/archive/refs/tags/4.3.tar.gz > re2c-4.3.tar.gz
-          tar xf re2c-4.3.tar.gz
-          cd re2c-4.3
+          curl -L https://github.com/skvadrik/re2c/archive/refs/tags/4.5.1.tar.gz > re2c-4.5.1.tar.gz
+          tar xf re2c-4.5.1.tar.gz
+          cd re2c-4.5.1
           cmake --preset=linux-gcc-release-ootree-skeleton-fast
           cmake --build --preset=linux-gcc-release-ootree-skeleton-fast --parallel="$(nproc)"
           sudo ln -sf "$(pwd)"/.build/linux-gcc-release-ootree-skeleton-fast/re2c /usr/local/bin/re2c

data/.github/workflows/comments.yml

@@ -13,10 +13,10 @@ jobs:
     # env:
     #   RUBY_COMMIT: v4.0.0-preview2
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: ruby/setup-ruby@v1
         with:
-          ruby-version: "4.0.1"
+          ruby-version: "4.0.6"
           bundler: none
       - name: Install dependencies
         run: |

data/.github/workflows/dependabot.yml

@@ -14,10 +14,10 @@ jobs:
     if: ${{ github.event.pull_request.user.login == 'dependabot[bot]' }}
     steps:
       - name: Dependabot metadata
-        uses: dependabot/fetch-metadata@ffa630c65fa7e0ecfa0625b5ceda64399aea1b36 # v3.0.0
+        uses: dependabot/fetch-metadata@25dd0e34f4fe68f24cc83900b1fe3fe149efef98 # v3.1.0
         id: metadata
       - name: Checkout repository
-        uses: actions/checkout@v6
+        uses: actions/checkout@v7
         with:
           fetch-depth: 0
       - name: Abort if blocker files are changed

data/.github/workflows/jruby.yml

@@ -0,0 +1,79 @@
+name: JRuby
+
+on:
+  push:
+    branches:
+      - master
+  pull_request:
+    paths:
+      - ".github/workflows/jruby.yml"
+      - "include/**"
+      - "src/**"
+      - "wasm/**"
+      - "lib/**"
+      - "sig/**"
+      - "core/**"
+      - "stdlib/**"
+      - "test/**"
+      - "Rakefile"
+      - "rbs.gemspec"
+  # `merge_group` has no `paths` filter, so this runs on every queue entry.
+  merge_group: {}
+
+permissions:
+  contents: read
+
+env:
+  # Keep in sync with .github/workflows/wasm.yml.
+  WASI_SDK_VERSION: "33"
+  WASI_SDK_RELEASE: "33.0"
+
+jobs:
+  test:
+    name: jruby
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v7
+      - run: git fetch --depth=1 origin +refs/tags/*:refs/tags/*
+
+      # Build the .wasm and fetch the Chicory jars with CRuby + the WASI SDK,
+      # then run RBS itself on JRuby against those artifacts.
+      - name: Set up Ruby (to assemble the WebAssembly runtime)
+        uses: ruby/setup-ruby@v1
+        with:
+          ruby-version: ruby
+          bundler: none
+      - name: Update rubygems & bundler
+        run: gem update --system
+      - name: Install gems
+        run: |
+          bundle config set --local without libs:profilers
+          bundle install --jobs 4 --retry 3
+      - name: Install the WASI SDK
+        run: |
+          url="https://github.com/WebAssembly/wasi-sdk/releases/download/wasi-sdk-${WASI_SDK_VERSION}/wasi-sdk-${WASI_SDK_RELEASE}-x86_64-linux.tar.gz"
+          mkdir -p "$HOME/wasi-sdk"
+          curl -sSL "$url" | tar xz --strip-components=1 -C "$HOME/wasi-sdk"
+          echo "WASI_SDK_PATH=$HOME/wasi-sdk" >> "$GITHUB_ENV"
+      - name: Build rbs_parser.wasm
+        run: bundle exec rake wasm:jruby_setup
+
+      - name: Set up JRuby
+        uses: ruby/setup-ruby@v1
+        with:
+          ruby-version: jruby
+          bundler: none
+      - name: Install runtime and test gems
+        # rdoc 8.0.0 added a runtime dependency on rbs, which pulls the released
+        # C-extension rbs gem and fails to build on JRuby. Pin rdoc below 8 until
+        # a -java rbs gem is published.
+        run: |
+          gem install prism rake rake-compiler test-unit rspec minitest json-schema pry --no-document
+          gem install rdoc -v "< 8" --no-document
+      # jar-dependencies resolves through the JVM, so download the Chicory/ASM
+      # jars into ~/.m2 here on JRuby (jar-dependencies is not available in the
+      # CRuby step above).
+      - name: Download the Chicory and ASM jars
+        run: jruby -S rake wasm:install_jars
+      - name: Run the test suite on JRuby
+        run: jruby -S rake test

data/.github/workflows/release-gems.yml

@@ -0,0 +1,164 @@
+name: Release gems
+
+# Builds, publishes, and announces a release. Dispatch it against the `vX.Y.Z` tag
+# of the release: the tag is created first so that everything published afterwards
+# traces back to an immutable ref, and so the reversible step comes before the
+# irreversible one.
+#
+# Dispatching against a branch builds and verifies the gems and stops there, which
+# is how the build is exercised without releasing anything.
+#
+# | Gem                  | Platform      | Parser                           |
+# | -------------------- | ------------- | -------------------------------- |
+# | `rbs-X.Y.Z.gem`      | `ruby` (MRI)  | C extension, compiled on install |
+# | `rbs-X.Y.Z-java.gem` | `java` (JRuby)| `rbs_parser.wasm`, prebuilt here |
+#
+# See docs/release.md. The `java` gem is built on CRuby: the platform comes from
+# `RBS_PLATFORM`, not from the engine running `gem build`. JRuby is only needed to
+# run the result, which the workflow does before it would publish anything.
+#
+# One job on purpose. Tagging, pushing the gems, and opening the GitHub release
+# all belong to a single release, and keeping them in one place keeps their order
+# readable -- the tag is created before anything is published, so the reversible
+# step comes before the irreversible one.
+
+on:
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+env:
+  # Keep in sync with .github/workflows/wasm.yml and .github/workflows/jruby.yml.
+  WASI_SDK_VERSION: "33"
+  WASI_SDK_RELEASE: "33.0"
+
+jobs:
+  release:
+    name: release
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write # publish the GitHub release
+      id-token: write # trusted publishing to RubyGems
+    steps:
+      # The gemspec takes its file list from `git ls-files`, so both gems are built
+      # from the committed state.
+      - uses: actions/checkout@v7
+      - name: Set up Ruby
+        uses: ruby/setup-ruby@v1
+        with:
+          ruby-version: ruby
+          bundler: none
+      - name: Update rubygems & bundler
+        run: gem update --system
+      - name: Install gems
+        run: |
+          bundle config set --local without libs:profilers
+          bundle install --jobs 4 --retry 3
+
+      - name: Read the version
+        id: version
+        run: echo "version=$(ruby -e 'load "lib/rbs/version.rb"; print RBS::VERSION')" >> "$GITHUB_OUTPUT"
+
+      # Fail before spending a minute on the build, and before anything is pushed:
+      # the tag is what the release is named after, so it has to be the version the
+      # tagged commit actually declares.
+      - name: Check the tag against RBS::VERSION
+        if: github.ref_type == 'tag'
+        run: |
+          if [ "${{ github.ref_name }}" != "v${{ steps.version.outputs.version }}" ]; then
+            echo "::error::tag ${{ github.ref_name }} does not match RBS::VERSION ${{ steps.version.outputs.version }}"
+            exit 1
+          fi
+
+      - name: Build the ruby gem
+        run: |
+          mkdir -p pkg
+          gem build rbs.gemspec -o "pkg/rbs-${{ steps.version.outputs.version }}.gem"
+
+      # `rake wasm:jruby_setup` compiles src/**/*.c to WebAssembly and copies the
+      # result to lib/rbs/wasm/, where the gemspec picks it up. clang runs as a
+      # subprocess, so this works on CRuby.
+      - name: Install the WASI SDK
+        run: |
+          url="https://github.com/WebAssembly/wasi-sdk/releases/download/wasi-sdk-${WASI_SDK_VERSION}/wasi-sdk-${WASI_SDK_RELEASE}-x86_64-linux.tar.gz"
+          mkdir -p "$HOME/wasi-sdk"
+          curl -sSL "$url" | tar xz --strip-components=1 -C "$HOME/wasi-sdk"
+          echo "WASI_SDK_PATH=$HOME/wasi-sdk" >> "$GITHUB_ENV"
+      - name: Build rbs_parser.wasm
+        run: bundle exec rake wasm:jruby_setup
+
+      - name: Build the java gem
+        env:
+          RBS_PLATFORM: java
+        run: gem build rbs.gemspec -o "pkg/rbs-${{ steps.version.outputs.version }}-java.gem"
+
+      # `git ls-files` vouches for everything else, but rbs_parser.wasm is a build
+      # artifact, so the java gem is the one that can come out quietly wrong.
+      - name: Check the built gems
+        run: |
+          ruby -rrubygems/package -e '
+            ruby_gem, java_gem = ARGV.map { Gem::Package.new(_1).spec }
+
+            raise "unexpected platform: #{ruby_gem.platform}" unless ruby_gem.platform.to_s == "ruby"
+            raise "the C extension is not declared" if ruby_gem.extensions.empty?
+
+            raise "unexpected platform: #{java_gem.platform}" unless java_gem.platform.to_s == "java"
+            raise "rbs_parser.wasm is missing" unless java_gem.files.include?("lib/rbs/wasm/rbs_parser.wasm")
+            raise "the java gem must not declare an extension" unless java_gem.extensions.empty?
+
+            [ruby_gem, java_gem].each { puts "#{_1.full_name}: #{_1.files.size} files" }
+          ' "pkg/rbs-${{ steps.version.outputs.version }}.gem" \
+            "pkg/rbs-${{ steps.version.outputs.version }}-java.gem"
+
+      # The checks above cannot tell whether rbs_parser.wasm actually runs. Install
+      # the gem the way a user would -- jar-dependencies fetches Chicory and ASM
+      # from Maven during the install -- and parse something with it, so the
+      # WebAssembly runtime is exercised end to end before anything is published.
+      - name: Set up JRuby
+        uses: ruby/setup-ruby@v1
+        with:
+          ruby-version: jruby
+          bundler: none
+      - name: Check the java gem on JRuby
+        run: |
+          gem install "pkg/rbs-${{ steps.version.outputs.version }}-java.gem"
+          ruby -e '
+            require "rbs"
+            _, _, decls = RBS::Parser.parse_signature("class Foo end")
+            names = decls.map { _1.name.to_s }
+            raise "parsed #{names.inspect}, expected [\"Foo\"]" unless names == ["Foo"]
+            puts "#{RUBY_ENGINE} #{RUBY_VERSION}: rbs #{RBS::VERSION} parses through the WebAssembly runtime"
+          '
+
+      - name: Switch back to CRuby
+        uses: ruby/setup-ruby@v1
+        with:
+          ruby-version: ruby
+          bundler: none
+
+      # Uploaded before publishing, so a failed push still leaves the gems behind.
+      - uses: actions/upload-artifact@v7
+        with:
+          name: gems
+          path: pkg/*.gem
+          if-no-files-found: error
+
+      # Everything below runs only for a release tag.
+      - name: Configure RubyGems credentials
+        if: github.ref_type == 'tag'
+        # No floating major tag on this action, so the exact release is pinned.
+        uses: rubygems/configure-rubygems-credentials@v2.1.0
+
+      - name: Push the gems
+        if: github.ref_type == 'tag'
+        run: |
+          gem push "pkg/rbs-${{ steps.version.outputs.version }}.gem"
+          gem push "pkg/rbs-${{ steps.version.outputs.version }}-java.gem"
+
+      # Last, so that a failed push never announces a release that has no gems.
+      - name: Publish the GitHub release
+        if: github.ref_type == 'tag'
+        env:
+          GH_TOKEN: ${{ github.token }}
+        run: bundle exec rake gem:gh_release

data/.github/workflows/ruby.yml

@@ -7,13 +7,16 @@ on:
   pull_request: {}
   merge_group: {}
 
+permissions:
+  contents: read
+
 jobs:
   test:
     runs-on: "ubuntu-latest"
     strategy:
       fail-fast: false
       matrix:
-        ruby: ['3.2', '3.3', '3.4', '4.0', head]
+        ruby: ['3.3', '3.4', '4.0', head]
         rubyopt: [""]
         job:
           - test
@@ -37,7 +40,7 @@ jobs:
     env:
       RANDOMIZE_STDLIB_TEST_ORDER: "true"
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: ruby/setup-ruby@v1
         with:
           ruby-version: ${{ matrix.ruby }}
@@ -87,7 +90,7 @@ jobs:
       matrix:
         ruby: ['4.0', head]
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - name: Install dependencies
         run: |
           brew install ruby-build
@@ -116,3 +119,40 @@ jobs:
         run: |
           bin/setup
       - run: bundle exec rake clean compile_c99
+
+  clang_compile:
+    runs-on: macos-latest
+    strategy:
+      fail-fast: false
+      matrix:
+        ruby: ['4.0', head]
+    steps:
+      - uses: actions/checkout@v7
+      - name: Install dependencies
+        run: |
+          brew install ruby-build
+      - uses: ruby/setup-ruby@v1
+        with:
+          ruby-version: ${{ matrix.ruby }}
+          bundler: none
+      - name: Set working directory as safe
+        run: git config --global --add safe.directory $(pwd)
+      - name: Update rubygems & bundler
+        run: |
+          ruby -v
+          gem update --system
+      - name: install erb
+        run: gem install erb
+      - name: clang version
+        run: clang --version
+      - name: bundle config set force_ruby_platform true if head
+        if: ${{ contains(matrix.ruby, 'head') }}
+        run: |
+          bundle config set force_ruby_platform true
+      - name: Ignore Gemfile.lock's BUNDLED WITH on ruby-head
+        if: ${{ contains(matrix.ruby, 'head') }}
+        run: bundle config set --local version system
+      - name: bin/setup
+        run: |
+          bin/setup
+      - run: bundle exec rake clean compile

data/.github/workflows/rust.yml

@@ -8,12 +8,15 @@ on:
     paths:
       - ".github/workflows/rust.yml"
       - "rust/**"
-      - "include/**"
-      - "src/**"
+  # `merge_group` has no `paths` filter, so this runs on every queue entry.
+  merge_group: {}
 
 env:
   RUSTFLAGS: "-D warnings"
 
+permissions:
+  contents: read
+
 jobs:
   test:
     name: cargo:test
@@ -23,7 +26,7 @@ jobs:
       matrix:
         os: [ubuntu-latest, macos-latest, windows-latest]
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - run: git fetch --depth=1 origin +refs/tags/*:refs/tags/*
       - name: Set up Ruby
         uses: ruby/setup-ruby@v1
@@ -42,7 +45,7 @@ jobs:
         run: |
           rustup update --no-self-update stable
           rustup default stable
-      - uses: actions/cache@v5
+      - uses: actions/cache@v6
         with:
           path: |
             ~/.cargo/registry
@@ -61,7 +64,7 @@ jobs:
     runs-on: ubuntu-latest
     continue-on-error: true
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - run: git fetch --depth=1 origin +refs/tags/*:refs/tags/*
       - name: Set up git identity
         run: |
@@ -84,7 +87,7 @@ jobs:
         run: |
           rustup update --no-self-update stable
           rustup default stable
-      - uses: actions/cache@v5
+      - uses: actions/cache@v6
         with:
           path: |
             ~/.cargo/registry
@@ -103,7 +106,7 @@ jobs:
     runs-on: ubuntu-latest
     continue-on-error: true
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - run: git fetch --depth=1 origin +refs/tags/*:refs/tags/*
       - name: Set up git identity
         run: |
@@ -126,7 +129,7 @@ jobs:
         run: |
           rustup update --no-self-update stable
           rustup default stable
-      - uses: actions/cache@v5
+      - uses: actions/cache@v6
         with:
           path: |
             ~/.cargo/registry
@@ -144,7 +147,7 @@ jobs:
     name: cargo:lint
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - run: git fetch --depth=1 origin +refs/tags/*:refs/tags/*
       - name: Set up Ruby
         uses: ruby/setup-ruby@v1
@@ -164,7 +167,7 @@ jobs:
           rustup update --no-self-update stable
           rustup default stable
           rustup component add --toolchain stable clippy rustfmt
-      - uses: actions/cache@v5
+      - uses: actions/cache@v6
         with:
           path: |
             ~/.cargo/registry

data/.github/workflows/truffleruby.yml

@@ -0,0 +1,54 @@
+name: TruffleRuby
+
+on:
+  push:
+    branches:
+      - master
+  pull_request: {}
+  merge_group: {}
+
+permissions:
+  contents: read
+
+jobs:
+  test:
+    runs-on: "ubuntu-latest"
+    strategy:
+      fail-fast: false
+      matrix:
+        ruby: ['truffleruby']
+        job:
+          - test
+    env:
+      RANDOMIZE_STDLIB_TEST_ORDER: "true"
+      # TruffleRuby warns and falls back to US-ASCII unless the locale is UTF-8.
+      LANG: "en_US.UTF-8"
+    steps:
+      - uses: actions/checkout@v7
+      - uses: ruby/setup-ruby@v1
+        with:
+          ruby-version: ${{ matrix.ruby }}
+          bundler: none
+      - name: Set working directory as safe
+        run: git config --global --add safe.directory $(pwd)
+      - name: Install dependencies
+        run: |
+          sudo apt-get update
+          sudo apt-get install -y libdb-dev curl autoconf automake m4 libtool python3
+      - name: Update rubygems & bundler
+        run: |
+          ruby -v
+          gem update --system
+      - name: install erb
+        run: gem install erb
+      - name: bundle config
+        run: |
+          # Profilers and the typecheck tooling are not needed for the smoke test,
+          # and some of them do not support TruffleRuby.
+          bundle config set --local without 'profilers typecheck_test'
+      - name: bin/setup
+        run: |
+          bin/setup
+      - name: Run test
+        run: |
+          bundle exec rake ${{ matrix.job }}

data/.github/workflows/typecheck.yml

@@ -7,16 +7,19 @@ on:
   pull_request: {}
   merge_group: {}
 
+permissions:
+  contents: read
+
 jobs:
   steep:
     runs-on: "ubuntu-latest"
     strategy:
       fail-fast: false
     steps:
-      - uses: actions/checkout@v6
+      - uses: actions/checkout@v7
       - uses: ruby/setup-ruby@v1
         with:
-          ruby-version: "3.4"
+          ruby-version: "4.0"
           bundler: none
       - name: Set working directory as safe
         run: git config --global --add safe.directory $(pwd)