[z-Fng]

Add manifest for LLVM full build (with libraries and tools not normally used in a toolchain).

Closes #3088
Supersedes ScoopInstaller/Main#6654

• Use conventional PR title: <manifest-name[@version]|chore>: <general summary of the pull request>
• I have read the Contributing Guide

[github-actions]

All changes look good.

Wait for review from human collaborators.

llvm-full

• Lint
• Description
• License
• Hashes
• Checkver
• Autoupdate

Check the full log for details.

[coderabbitai]

Navigate logical layers of code changes, visualize relationships, and explore their blast radius.

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

• Configuration used: Organization UI
• Review profile: CHILL
• Plan: Advanced
• Run ID: 1f48565f-52be-40bb-a4fb-10ec8fe17844

📥 Commits

Reviewing files that changed from the base of the PR and between 3cf8ed7 and e60149c.

📒 Files selected for processing (1)

• bucket/llvm-full.json

Included review availability: This review used your included allowance. Your plan provides up to 2 included reviews per hour; 1 remain after this review.

---

Summary by CodeRabbit

• New Features
  • Added an LLVM 23.1.2 package for 64-bit and ARM64 Windows, with architecture-specific downloads and setup of required environment paths.

Walkthrough

Adds an LLVM 23.1.2 manifest with separate 64-bit and ARM64 Windows MSVC archives, environment settings, GitHub version checking, and architecture-specific autoupdate configuration.

Changes

LLVM manifest

Layer / File(s)	Summary
LLVM manifest configuration bucket/llvm-full.json	Adds LLVM 23.1.2 archive URLs, SHA-256 hashes, and extraction directories for 64-bit and ARM64 Windows. Adds bin to PATH, sets LIBCLANG_PATH and LLVM_LIB_DIR, and configures GitHub version checking and architecture-specific autoupdate settings.

Priority: ⬇️ Low

Merge Risk: ⚪ Minimal · up to e6014

The manifest’s x64 and ARM64 release bindings are consistent with the reported release metadata, and no concrete install or update failure is established. The archive layouts remain unverified, so confidence is moderate.

Security Architecture Review

Security architecture risk: 🔵 Low · up to e6014

The package uses versioned upstream downloads, architecture-specific hashes, and installation-relative paths without custom installation scripts or declared privilege escalation. No concrete security issue was identified, but interrupted installation, environment cleanup, and rollback behavior remain unverified.

Retained concerns
No architecture-level concerns identified.

Security review details

Security Blast Radius

• inferred — The directly affected scope is installations selecting this package and downstream processes resolving its tools or libraries through the configured environment. The manifest does not itself introduce a remotely reachable service or declare additional privileges.

Trust Boundaries and Controls

• inferred — Upstream release content crosses into locally usable compiler tools and libraries through package installation. Pinned hashes provide integrity expectations for the current release; upstream provenance and installer enforcement remain trust dependencies. Earlier inspected updater source reports regenerating hashes when URLs change, so omission of an explicit autoupdate hash is not by itself evidence of a verification bypass.

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Title check	✅ Passed	The title follows the required conventional format and clearly identifies the addition of version 23.1.2 to the llvm-full manifest.
Description check	✅ Passed	The description summarizes the manifest change, references the related issue, identifies the superseded pull request, and includes both required checked items.

• Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}