You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
fix: replace non-ASCII characters with ASCII equivalents
Replace U+2192 (->), U+2014 (--), U+2013 (--), U+2026 (...),
and box-drawing chars with printable ASCII to comply with the
project's cp1252-safe encoding policy.
Co-Authored-By: Claude Sonnet 4.6 <[email protected]>
Copy file name to clipboardExpand all lines: CHANGELOG.md
+4-4Lines changed: 4 additions & 4 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -10,10 +10,10 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
10
10
11
11
### Added
12
12
13
-
-`RegistryConfig` dataclass in `apm_cli.deps.registry_proxy`— registry-agnostic abstraction over VCS proxies; reads canonical `PROXY_REGISTRY_URL` / `PROXY_REGISTRY_TOKEN` / `PROXY_REGISTRY_ONLY` env vars with deprecated fallback to `ARTIFACTORY_*` aliases
14
-
-`InstalledPackage` dataclass in `apm_cli.deps.installed_package`— replaces the ad hoc positional tuple used to accumulate install results before lockfile generation; `LockFile.from_installed_packages()` accepts both the new dataclass and legacy tuples
15
-
-`LockedDependency.registry_prefix` field in `apm.lock.yaml`— stores the URL path prefix (e.g. `artifactory/github`) separately from the pure FQDN `host`; enables correct auth token routing and air-gapped re-installs through the same proxy
16
-
-`PROXY_REGISTRY_ONLY` / `PROXY_REGISTRY_URL` / `PROXY_REGISTRY_TOKEN`— canonical generic registry env vars replacing the deprecated `ARTIFACTORY_*` equivalents (deprecated aliases still work with a `DeprecationWarning`)
13
+
-`RegistryConfig` dataclass in `apm_cli.deps.registry_proxy`-- registry-agnostic abstraction over VCS proxies; reads canonical `PROXY_REGISTRY_URL` / `PROXY_REGISTRY_TOKEN` / `PROXY_REGISTRY_ONLY` env vars with deprecated fallback to `ARTIFACTORY_*` aliases
14
+
-`InstalledPackage` dataclass in `apm_cli.deps.installed_package`-- replaces the ad hoc positional tuple used to accumulate install results before lockfile generation; `LockFile.from_installed_packages()` accepts both the new dataclass and legacy tuples
15
+
-`LockedDependency.registry_prefix` field in `apm.lock.yaml`-- stores the URL path prefix (e.g. `artifactory/github`) separately from the pure FQDN `host`; enables correct auth token routing and air-gapped re-installs through the same proxy
16
+
-`PROXY_REGISTRY_ONLY` / `PROXY_REGISTRY_URL` / `PROXY_REGISTRY_TOKEN`-- canonical generic registry env vars replacing the deprecated `ARTIFACTORY_*` equivalents (deprecated aliases still work with a `DeprecationWarning`)
17
17
- Post-download `content_hash` verification: fresh downloads are now verified against the lockfile's recorded SHA-256 hash; a mismatch aborts the install with a supply-chain warning instead of silently accepting different content
18
18
-`RegistryConfig.find_missing_hashes()` warns at startup when registry-proxy lockfile entries lack a `content_hash`, prompting `--update` to populate them for tamper detection
Copy file name to clipboardExpand all lines: docs/src/content/docs/getting-started/authentication.md
+3-3Lines changed: 3 additions & 3 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -165,12 +165,12 @@ Air-gapped environments route all VCS traffic through a JFrog Artifactory proxy.
165
165
|----------|---------|
166
166
| `PROXY_REGISTRY_URL` | Full proxy base URL, e.g. `https://art.example.com/artifactory/github` |
167
167
| `PROXY_REGISTRY_TOKEN` | Bearer token for the proxy |
168
-
| `PROXY_REGISTRY_ONLY` | Set to `1` to block all direct VCS access — only proxy downloads allowed |
168
+
| `PROXY_REGISTRY_ONLY` | Set to `1` to block all direct VCS access -- only proxy downloads allowed |
0 commit comments