Repository navigation
Add --reach-disable-dependency-downloads - #430
Merged
Oskar Haarklou Veileborg (BarrensZeppelin) merged 1 commit intoOct 29, 2026
Merged
Oskar Haarklou Veileborg (BarrensZeppelin) merged 1 commit into
Oskar Haarklou Veileborg (BarrensZeppelin) merged 1 commit into
Conversation
Forwards Coana's --disable-dependency-downloads (Coana 15.13.1+), which makes reachability analysis use only dependencies that are already installed and report missing ones as install failures.
Oskar Haarklou Veileborg (BarrensZeppelin)
requested a review
from Martin Torp (mtorp)
October 29, 2026 09:26
Oskar Haarklou Veileborg (BarrensZeppelin)
requested a review
from a team
as a code owner
October 29, 2026 09:26
Oskar Haarklou Veileborg (BarrensZeppelin)
deployed
to
socket-firewall
October 29, 2026 09:26 — with 
GitHub Actions
Active
GitHub Actions
Active
Martin Torp (mtorp)
approved these changes
Oct 29, 2026
Oskar Haarklou Veileborg (BarrensZeppelin)
merged commit Oct 29, 2026
a07f7d2
into
main
33 checks passed
This branch was successfully deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Adds
--reach-disable-dependency-downloads, which forwards Coana's--disable-dependency-downloads(available since Coana 15.13.1; the pinned version is 15.13.2). With it, reachability analysis uses only dependencies that are already installed (e.g. in.venv,vendor/or the module cache) and reports missing ones as install failures. This is for setups where every package must come from the customer's own registry mirror.Also bumps the CLI to 2.11.6 and documents the flag in the CLI reference and changelog.
Expected reviewer effort: Stamp
Note
Low Risk
Small, opt-in reachability flag with the same wiring pattern as existing Coana passthroughs; default behavior is unchanged.
Overview
Release 2.11.6 adds
--reach-disable-dependency-downloads, which tells reachability analysis to use only dependencies already on disk (.venv,vendor/, module cache, etc.) and to treat anything missing as an install failure instead of fetching packages.The flag is wired like other reach passthroughs:
CliConfig/ argparse,socketcli→ReachabilityAnalyzer.run_reachability_analysis, which appends Coana’s--disable-dependency-downloads. Changelog anddocs/cli-reference.mddocument the behavior.Reviewed by Cursor Bugbot for commit 9336648. Configure here.