moreal · Oct 25, 2026 · Oct 25, 2026 · Oct 25, 2026 · Oct 25, 2026 · Oct 25, 2026
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
@@ -161,7 +161,8 @@ updates:
     cooldown:
       default-days: 7
   - package-ecosystem: npm
-    directory: /
+    directories:
+      - "wasm/*"
     schedule:
       interval: weekly
     cooldown:

diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
@@ -791,7 +791,7 @@ jobs:
           components: rustfmt
 
       - name: actionlint
-        uses: reviewdog/action-actionlint@3cbf14efd750961dba35fccbf00f9e14028cb1f5 # v1.80.2
+        uses: reviewdog/action-actionlint@419a49378266e892f40c773b4f2fc6de9aa87499 # v1.80.4
 
       - name: zizmor
         uses: zizmorcore/zizmor-action@85b2b9fb8e3325e7a23d7d0a9d7ba5ae0f999e3e # v0.7.1

diff --git a/.github/workflows/oscca-pr.yml b/.github/workflows/oscca-pr.yml
diff --git a/.github/zizmor.yml b/.github/zizmor.yml
@@ -1,9 +1,6 @@
 rules:
   dangerous-triggers:
     ignore:
-      # pull_request_target is needed to label and assign PRs from forks with issues: write.
-      # The workflow does not check out or execute pull request code.
-      - oscca-pr.yml:3
       # workflow_run is needed to post a PR comment from a fork's run, which is
       # handed a read-only token however the triggering workflow is configured.
       # The workflow does not check out or execute pull request code: it reads

diff --git a/Cargo.lock b/Cargo.lock
diff --git a/Cargo.toml b/Cargo.toml
@@ -259,6 +259,7 @@ log = "0.4.30"
 lz4_flex = "0.14"
 nix = { version = "0.31", features = ["fs", "user", "process", "term", "time", "signal", "ioctl", "socket", "sched", "zerocopy", "dir", "hostname", "net", "poll"] }
 mac_address = "1.1.3"
+mach2 = "0.7.0"
 malachite-bigint = "0.14.0"
 malachite-q = "0.14.0"
 malachite-base = "0.14.0"
@@ -271,6 +272,7 @@ num-integer = "0.1.46"
 num-traits = "0.2"
 num_cpus = "1.17.0"
 num_enum = { version = "0.7", default-features = false }
+object = { version = "0.40.0", default-features = false, features = ["read_core", "elf", "macho", "pe", "std", "unaligned"] }
 openssl = "0.10.80"
 openssl-sys = "0.9.110"
 optional = "0.5"

diff --git a/Lib/profiling/sampling/__main__.py b/Lib/profiling/sampling/__main__.py
@@ -0,0 +1,73 @@
+"""Run the sampling profiler from the command line."""
+
+import sys
+
+MACOS_PERMISSION_ERROR = """\
+🔒 Permission Error: Unable to access process memory on macOS
+
+Tachyon needs elevated permissions to profile processes. Try one of these solutions:
+
+1. Try running again with elevated permissions by running 'sudo -E !!'.
+
+2. If targeting system Python processes:
+   Note: Apple's System Integrity Protection (SIP) may block access to system
+   Python binaries. Consider using a user-installed Python instead.
+"""
+
+LINUX_PERMISSION_ERROR = """
+🔒 Tachyon was unable to access process memory. This could be because tachyon
+has insufficient privileges (the required capability is CAP_SYS_PTRACE).
+Unprivileged processes cannot trace processes that they cannot send signals
+to or those running set-user-ID/set-group-ID programs, for security reasons.
+
+If your uid matches the uid of the target process you want to analyze, you
+can do one of the following to get 'ptrace' scope permissions:
+
+* If you are running inside a Docker container, you need to make sure you
+  start the container using the '--cap-add=SYS_PTRACE' or '--privileged'
+  command line arguments. Notice that this may not be enough if you are not
+  running as 'root' inside the Docker container as you may need to disable
+  hardening (see next points).
+
+* Try running again with elevated permissions by running 'sudo -E !!'.
+
+* You can disable kernel hardening for the current session temporarily (until
+  a reboot happens) by running 'echo 0 | sudo tee /proc/sys/kernel/yama/ptrace_scope'.
+"""
+
+WINDOWS_PERMISSION_ERROR = """
+🔒 Tachyon requires administrator rights to access process memory on Windows.
+Please run your command prompt as Administrator and try again.
+"""
+
+GENERIC_PERMISSION_ERROR = """
+🔒 Tachyon was unable to access the target process due to operating
+system restrictions or missing privileges.
+"""
+
+from .cli import main
+from .errors import SamplingUnknownProcessError, SamplingModuleNotFoundError, SamplingScriptNotFoundError
+
+def handle_permission_error():
+    """Handle PermissionError by displaying appropriate error message."""
+    if sys.platform == "darwin":
+        print(MACOS_PERMISSION_ERROR, file=sys.stderr)
+    elif sys.platform.startswith("linux"):
+        print(LINUX_PERMISSION_ERROR, file=sys.stderr)
+    elif sys.platform.startswith("win"):
+        print(WINDOWS_PERMISSION_ERROR, file=sys.stderr)
+    else:
+        print(GENERIC_PERMISSION_ERROR, file=sys.stderr)
+    sys.exit(1)
+
+if __name__ == '__main__':
+    try:
+        main()
+    except PermissionError:
+        handle_permission_error()
+    except SamplingUnknownProcessError as err:
+        print(f"Tachyon cannot find the process: {err}", file=sys.stderr)
+        sys.exit(1)
+    except (SamplingModuleNotFoundError, SamplingScriptNotFoundError) as err:
+        print(f"Tachyon cannot find the target: {err}", file=sys.stderr)
+        sys.exit(1)