Update Radiance with Windows migration hardening

[atavism]

Summary by CodeRabbit

• Chores
  • Updated a required internal dependency.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

• Configuration used: defaults
• Review profile: CHILL
• Plan: Advanced
• Run ID: 56b6bcf8-307e-4f9a-8ac9-9420065acc74

📥 Commits

Reviewing files that changed from the base of the PR and between ec287f7 and b1805b0.

⛔ Files ignored due to path filters: 1

• go.sum is excluded by !**/*.sum

📒 Files selected for processing: 1

• go.mod

Included review availability: This review used your included allowance. Your plan provides up to 10 included reviews per hour; 9 remain after this review.

📝 Walkthrough

The required github.com/getlantern/radiance version in go.mod changes from v0.0.0-20261015201452-d031191b6c27 to v0.0.0-20261016073414-66aa0a372058.

Changes: Radiance dependency update

Layer / File(s)	Summary
Update the required Radiance version go.mod	The required version of github.com/getlantern/radiance changes to v0.0.0-20261016073414-66aa0a372058.

Priority: ⬇️ Low

Estimated code review effort: 1 (Trivial) | ~3 minutes

Change: Other

Suggested reviewers: myleshorton

Merge Risk: ⚪ Minimal · up to b1805

This PR only updates the Radiance dependency to a newer revision, and its checksums are already recorded. No concrete defect was found, so normal build and test checks are enough before merging.

Security architecture risk: 🔵 Low · up to b1805

The update is limited to dependency selection. The selected Windows file-copy code includes a disk-space check, and no introduced vulnerability has been established. However, the previous implementation and the production migration invocation could not be compared, leaving some security impact unverified.

Retained concerns
No architecture-level concerns identified.

Security review details

Security Blast Radius

• observed — The deferred candidate concerns destination-storage exhaustion during Windows migration. Its attacker prerequisites, supported-entrypoint reachability, and independently attackable scope remain unresolved; a high impact label does not establish exploitability or broader exposure.

Security Findings and Attack Paths

• observed — The sparse-file disk-exhaustion candidate remains deferred rather than verified. Available evidence does not establish whether the dependency update introduces or worsens the condition relative to the previous version.

Trust Boundaries and Controls

• observed — The inspected file-rebuild path opens the source with read-only sharing and checks available space before copying. These are concrete controls relevant to the candidate, but their presence does not establish migration-wide authority validation, resource reservation, or coverage of every write path.

Resilience and Maintainability Implications

• observed — The inspected helper copies into a temporary file, synchronizes and closes it before requesting replacement, and attempts temporary-file removal when an error is returned. This demonstrates normal error-path cleanup, not durable recovery after interruption or complete migration rollback.

Pre-merge checks: 5

Check name	Status	Explanation
Description Check		Check skipped - CodeRabbit’s high-level summary is enabled.
Title check		The title clearly identifies the Radiance update and its Windows migration hardening purpose. This matches the dependency version change in the pull request.
Docstring Coverage		No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check		Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check		Check skipped because no linked issues were found for this pull request.

Full details: Docstring Coverage

Explanation

No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0 files. (1 skipped: 1 unsupported.)

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Commit to this branch
• Create a new PR

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

_{Comment @coderabbitai help to get the list of available commands.}

[Copilot]

🔵 Needs a closer look

The dependency’s privileged permission and migration changes warrant human review and Windows upgrade validation.

0 open findings

What changed in this PR

Updates Lantern’s Radiance dependency to incorporate Windows migration hardening.

Changes:

• Advances Radiance from commit d031191b6c27 to 66aa0a372058.
• Updates the corresponding module checksums.

File	Description
go.sum	Updates Radiance module checksums.
go.mod	Pins the newer Radiance revision.

🧠 Review effort: Balanced

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.