0.8.0

nest 0.8.0

Checksum migration

Add checksums while preserving pinned versions:

nest resolve-nestfile nestfile.yaml

Use update-nestfile instead if you also want to update versions.

To adopt the future default now:

nest bootstrap nestfile.yaml --checksum-policy require

Important

--checksum-policy require will become the default in a future release.
Existing nestfiles without checksums still work temporarily with a warning,
but users should update them now.

Changes

• Checksum mismatches now stop installation before ZIP extraction.
• Direct artifact bundle URLs require --checksum or an explicit --checksum-policy.
• Checksum changes without a version change are rejected unless
  --allow-checksum-changes is specified.
• Artifact bundle URLs must use HTTPS.
• Added opt-in user-scope ZIP caching with --enable-user-scope-cache.

--checksum-policy skip remains available as a temporary migration escape hatch,
but bypassing verification is not recommended.

Full Changelog:
0.7.1...0.8.0