Skip to content

v1.3.2

Choose a tag to compare

View all tags
@github-actions github-actions released this 27 May 20:04
· 5 commits to main since this release
Immutable release. Only release title and notes can be modified.
v1.3.2
This tag was signed with the committer’s verified signature.
brndnmtthws Brenden Matthews
GPG key ID: 65458E93BD621972
Verified
Learn about vigilant mode.
31a69c3
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

cargo-hold v1.3.2

Patch release focused on making CI cache recovery fail correctly and preserving restored build artifacts during garbage collection. This release also hardens the release pipeline with trusted publishing and binary attestations.

Full Changelog: v1.3.1...v1.3.2

Breaking Changes

None.

Highlights Since v1.3.1

CI Cache Correctness

  • stow and salvage now fail when tracked files cannot be read or hashed, instead of silently writing or restoring partial metadata.
  • heave now refreshes stale mtimes on recently restored crate artifacts before selecting artifacts for removal, preventing restored CI caches from being immediately deleted.
  • Timestamp restoration now validates repository-relative metadata paths before applying mtimes.

Release Integrity

  • Release binaries are now attested through GitHub artifact attestations.
  • Publishing now uses crates.io trusted publishing instead of a long-lived registry token.

Pull Requests by Category

Bug Fixes

  • Fix CI failures when salvage/stow skip files and heave eats restored cache (#62)
  • Satisfy clippy::manual_checked_ops in GC auto-cap sizing (#64)

CI and Release

  • Use crates.io trusted publishing (#60)
  • Attest release binaries (#63)

Dependencies and Maintenance

  • Bump GitHub Actions dependencies (#53, #58, #65)
  • Bump filetime development dependency (#59)
  • Bump crate version for the release (#66)
Assets 8
Loading
0 Join discussion