Release Notes
Added
- The registry URL may carry the token in its userinfo, Composer style:
https://<login>:<password>@packages.example.com/ (both parts percent-decoded). The
credentials need a login and a password, are refused over plain http except for
localhost/127.0.0.1, and are stripped from the URL before it is used or printed.
--oidc still wins; an explicit --token/REGISTRY_TOKEN that differs from the URL's
credentials is an error. sreg auth writes the URL's credentials, and the GitHub
Action skips OIDC when registry carries them.
sreg generic get <name> <constraint>: a version that is not an exact semver version
(^1.2, ">=1 <2", 1.x) is a constraint resolved by the registry
(GET /generic/<name>/latest?version=<constraint>, with --prerelease and the label
filters); the resolved version is printed on stderr and --json prints the feed
document.sreg generic get --sole: fail unless the label filter selects exactly one file. The
registry's GET /generic/<name>/<version|latest>/-/download redirects to that file and
names it in X-Resolved-Version and X-Resolved-File; the file is still verified
against the size and SHA-256 of its feed entry. 409 ambiguous lists the candidate
files and exits with 1; --out may name a file path instead of a directory.- Bump and release workflow (
.github/workflows/bump-and-release.yml, started by hand
on main): computes the next version (prerelease, patch, minor, release,
custom, …) with the dependency-free scripts/bump-version.mjs, sets it in
Cargo.toml and Cargo.lock, rolls CHANGELOG.md, commits and tags v<version> and
starts the cargo-dist Release workflow for the tag.
- cargo-dist post-announce job (
.github/workflows/release-action.yml): after a stable
release it starts the Release workflow of
kduma-OSS/serverless-registry-publish-action with the new version as the action's
default sreg-version, authenticated as a GitHub App (repository secrets
SERVERLESS_REGISTRY_RELEASE_APP_ID and SERVERLESS_REGISTRY_RELEASE_APP_PRIVATE_KEY).
Without them it only prints a notice; the action repository's hourly sync then picks
the release up.
Changed
- The GitHub Action moved to
kduma-OSS/serverless-registry-publish-action
(uses: kduma-OSS/serverless-registry-publish-action@v1), with its history; it is
versioned and released there, and the action/ directory and action/VERSION are gone.
Install sreg-cli 0.1.1
Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/kduma-OSS/serverless-registry-cli/releases/download/v0.1.1/sreg-cli-installer.sh | sh
Install prebuilt binaries via powershell script
powershell -ExecutionPolicy Bypass -c "irm https://github.com/kduma-OSS/serverless-registry-cli/releases/download/v0.1.1/sreg-cli-installer.ps1 | iex"
Download sreg-cli 0.1.1
