v0.2.20

Full Changelog: v0.2.19...v0.2.20

v0.2.18

Full Changelog: v0.2.17...v0.2.18

v0.2.17

Full Changelog: v0.2.16...v0.2.17

v0.2.16

Full Changelog: v0.2.15...v0.2.16

v0.2.15

Full Changelog: v0.2.14...v0.2.15

v0.2.12

Full Changelog: v0.2.11...v0.2.12

v0.2.10

What's Changed

• Cross-checkout keys: path-independent tokens, repository root, empty path sets by @zah in #463
• Keep committed sibling pins current at commit time and check them at push by @zah in #470
• Link SQLite from the Nix toolchain and never bake a host lib dir into RPATH by @zah in #471
• Portable caching: allowlisted action environment; the monitor leaves PATH alone by @zah in #472
• install: on NixOS, print the nixpkgs fork configuration instead of installing by @zah in #467
• ci(deploy-get): stop starving the get.reprobuild.com deploy by @zah in #473
• Scratch directories; long-path tree manifests; content-named publish markers by @zah in #474
• npm: the committed lock goes into the build's work tree, not the fetched one by @zah in #475
• Portable records: an action's accesses to its own outputs are not inputs by @zah in #476
• Portable identities: existence is asked in the extended-length form by @zah in #477
• An evidence channel can only be appended to by a named observer by @zah in #478
• Hotfix: recipes run by the engine that compiled them, linked without host RPATHs by @zah in #480
• Portable identities: a read of a missing file is identified, the same both ways by @zah in #483
• npm vendor: leave the private cache's log directory as the build leaves it by @zah in #484
• Stage-copy edges publish their bytes: they are the package's public output by @zah in #485
• reprobuild#171: regression cases for package identity by @zah in #486
• node_package: a delivered bundle does not name the checkout by @zah in #487
• An empty tool dependency report is not an observation by @zah in #488
• Hotfix: worktree hooks, and lock pins that never move backward by @zah in #491
• A cache refusal that names no class buys a publish another refusal denied by @zah in #492
• test(attest): refresh the pinned AMD KDS revocation lists by @zah in #489

Full Changelog: v0.2.6...v0.2.10

v0.2.6

What's Changed

• Portable keys stable across runs; npm constructors declare what they produce by @zah in #453
• Portable probes above a root, observed env, hermetic npm builds by @zah in #454
• Directories above the project are layout; node builds get a project-local home by @zah in #455
• ci: cancel superseded pull-request runs by @zah in #456
• deps: advance the io-mon pin to the merge-time identity fold by @zah in #457
• Extract zip tool archives without Expand-Archive by @zah in #458
• install: serve the repository installer at /sh, pinned to the repositories' signing key by @zah in #462
• Record develop-set sibling revisions in the committed lock by @zah in #461
• Name the missing decompressor when a tool archive cannot be read by @zah in #459
• Keep the MSVC search paths when an action declares its own PATH by @zah in #460
• Regenerate the suite inventory after concurrent test additions by @zah in #465
• Rust edges reach their declared linker; foreign tarball binaries are refused on NixOS by @zah in #464
• Install on Windows from the organisation's Scoop bucket by @zah in #466

Full Changelog: v0.2.5...v0.2.6

v0.2.5

What's Changed

• Determinism probe needs declared outputs; fold extended-length paths to plain by @zah in #448
• Fixed-output actions: verified fetches take part in portable caching by @zah in #449
• release: run the package gate's dev-exec calls from the checkout by @zah in #451
• release: 0.2.5 by @zah in #452

Full Changelog: v0.2.4...v0.2.5

v0.2.3

Warning

Do not install the .deb or .rpm attached to this release; use v0.2.4 packages. They install only bin/ and lib/, not share/repro, so an apt/dnf-installed repro fails its first project compile. The .tar.gz/.zip archives of this release are complete and work. These packages were never published to deb./rpm.metacraft-labs.com.

What's Changed

• tests: close the audits a comment can satisfy, including when false: by @zah in #427
• Portable fingerprints over logical paths (Cache-Scope P3.1) by @zah in #429
• Record portable fingerprints per action (Cache-Scope P3.1) by @zah in #430
• Output content identity for portable actions (Cache-Scope P3.2) by @zah in #431
• Cache-Scope P3.3: portable memo store, recorded by the engine by @zah in #432
• Cache-Scope P3.3: remote memoization plane over the binary cache by @zah in #433
• Portable memo plane: split record metadata from output bytes by @zah in #435
• Cache-Scope P3.4a: lookup without materialization in the engine by @zah in #436
• Cache-Scope P3.4b: CLI opt-in, directory manifests, records from hits by @zah in #437
• Portable weak fingerprint: include the action's static description by @zah in #439
• Portable records: the injected monitor shim is not an input by @zah in #440
• release: make the prebuilt archives able to build a project by @zah in #428

Full Changelog: v0.2.2...v0.2.3