Two more failures, both found by the guards added in the previous commit
rather than by shipping a broken package:
- install_github() has been deprecated since devtools 2.5.0 and now
delegates to the 'remotes' package, which is no longer a hard dependency
of devtools. jaspModuleTools could therefore never install, regardless of
GitHub tokens - my earlier diagnosis of a rate limit was wrong. remotes is
now pre-seeded into the library the script sets via .libPaths().
- later 1.4.6, pinned in every module renv.lock, bundles a tinycthread whose
'#define once_flag pthread_once_t' collides with the C11 once_flag that
glibc >= 2.43 declares under C23. Fixed upstream in later 1.4.7
(r-lib/later#257); the 2026-04-22 RSPM snapshot the lockfiles already
point at carries 1.4.8.
The lockfile patch is deliberately an explicit per-package list with a
recorded reason, not a blanket 'use latest' - silently changing the analysis
packages users get would be worse than a build failure.
agw
0680e9cb0a