filter: skip the read-only directory test as root, ci's runner ignores mode bits

CHANGELOG.md

@@ -4,7 +4,7 @@ All notable changes to nxdns are recorded here. The format follows [Keep a Chang
 
 Sections are written by hand. Nothing here is generated from commit messages: the point of the file is to say what changed for an operator, which a commit subject rarely does.
 
-## [Unreleased]
+## [0.0.19] - 2026-09-12
 
 ### Changed
 

build.zig.zon

@@ -1,6 +1,6 @@
 .{
     .name = .nxdns,
-    .version = "0.0.18",
+    .version = "0.0.19",
     .minimum_zig_version = "0.16.0",
     .paths = .{""},
     .fingerprint = 0x3307b311dded1d91,

flake.nix

@@ -8,10 +8,10 @@
     let
       # `zig build cut` rewrites the lines between the delimiters by text replacement.
       # BEGIN GENERATED BY zig build cut
-      version = "0.0.18";
+      version = "0.0.19";
       hashes = {
-        "aarch64-linux" = "sha256-7TmuJr6TkgRdPkYvNiEOFVfkzkp+djjWSml+vAUee78=";
-        "x86_64-linux" = "sha256-uBWjl8FvP4VgPisJgydNazyPu40jjQa7+i64+M/B50A=";
+        "aarch64-linux" = "sha256-sNIjsnJ5TPRpSE/wDtwb0j7lYyyMXCPMwc7IAv5sy3s=";
+        "x86_64-linux" = "sha256-SvWV8lmyJWceVBhuAOtldMbwGA8hLx/puJVda2t0sCg=";
       };
       # END GENERATED BY zig build cut
 

src/filter/filter_integration_test.zig

@@ -1067,6 +1067,8 @@ test "6: a 404 leaves the compiled files and the snapshot untouched" {
 
 test "6b: a local failure reports itself, not the previous source's network fault" {
     if (!build_options.integration) return error.SkipZigTest;
+    // Mode bits do not apply to root, so the denial the test needs cannot happen.
+    if (std.c.geteuid() == 0) return error.SkipZigTest;
 
     const gpa = testing.allocator;
     const env = try Env.create(gpa);