From e18e7c91374cc5c562e65354ee50a3a62ebb628a Mon Sep 17 00:00:00 2001
From: Elizabeth Worstell <worstell@squareup.com>
Date: Thu, 26 Feb 2026 13:07:58 -0800
Subject: [PATCH] fix: update hermit to public distribution and CODEOWNERS for
 OSS

---
 CODEOWNERS        | 2 +-
 bin/hermit        | 4 ++--
 bin/hermit.hcl    | 3 +--
 src/backend/go.rs | 1 +
 4 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/CODEOWNERS b/CODEOWNERS
index 7314290..3787498 100644
--- a/CODEOWNERS
+++ b/CODEOWNERS
@@ -1 +1 @@
-*       @squareup/local-dev
+*       @alecthomas @boblail @jrobotham-square @mpeyper @nssherpa @preetim-cash @stuartwdouglas @worstell @wsutina
diff --git a/bin/hermit b/bin/hermit
index 87acaad..31559b7 100755
--- a/bin/hermit
+++ b/bin/hermit
@@ -17,7 +17,7 @@ if [ -z "${HERMIT_STATE_DIR}" ]; then
   esac
 fi
 
-export HERMIT_DIST_URL="${HERMIT_DIST_URL:-https://d1abdrezunyhdp.cloudfront.net/square}"
+export HERMIT_DIST_URL="${HERMIT_DIST_URL:-https://github.com/cashapp/hermit/releases/download/stable}"
 HERMIT_CHANNEL="$(basename "${HERMIT_DIST_URL}")"
 export HERMIT_CHANNEL
 export HERMIT_EXE=${HERMIT_EXE:-${HERMIT_STATE_DIR}/pkg/hermit@${HERMIT_CHANNEL}/hermit}
@@ -26,7 +26,7 @@ if [ ! -x "${HERMIT_EXE}" ]; then
   echo "Bootstrapping ${HERMIT_EXE} from ${HERMIT_DIST_URL}" 1>&2
   INSTALL_SCRIPT="$(mktemp)"
   # This value must match that of the install script
-  INSTALL_SCRIPT_SHA256="4b006236f2e5e81939229b377bb355e3608f94d73ff8feccbd5792d1ed5699cd"
+  INSTALL_SCRIPT_SHA256="09ed936378857886fd4a7a4878c0f0c7e3d839883f39ca8b4f2f242e3126e1c6"
   if [ "${INSTALL_SCRIPT_SHA256}" = "BYPASS" ]; then
     curl -fsSL "${HERMIT_DIST_URL}/install.sh" -o "${INSTALL_SCRIPT}"
   else
diff --git a/bin/hermit.hcl b/bin/hermit.hcl
index 081cbe8..8b13789 100644
--- a/bin/hermit.hcl
+++ b/bin/hermit.hcl
@@ -1,2 +1 @@
-github-token-auth {
-}
+
diff --git a/src/backend/go.rs b/src/backend/go.rs
index 9de6df9..39f3d98 100644
--- a/src/backend/go.rs
+++ b/src/backend/go.rs
@@ -51,6 +51,7 @@ impl Backend for GoBackend {
                     .unwrap_or_else(|| repo_root.to_path_buf());
                 packages.insert(dir);
             } else if file.extension().is_some_and(|ext| ext == "go") {
+                #[allow(clippy::collapsible_if)]
                 if let Some(parent) = file.parent() {
                     let dir = repo_root.join(parent);
                     if dir.exists() {