Repository navigation
Record this repository as the canonical source - #7
Merged
Merged
Conversation
After packdb/packdb#1731 removes the monorepo's copies and export kit, this repository is canonical: EXPORT_MANIFEST.md becomes a provenance record, and the export-time FILE_INVENTORY.txt and SHA256SUMS (already stale) are removed.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Coordinated with packdb/packdb#1731, which removes the monorepo's copies of these crates and its export kit. Merge together with #1731, not before. From then on this repository is the canonical source of
packdb-query-cli.EXPORT_MANIFEST.mdis rewritten as a provenance record: this repository is canonical; the last export came from monorepob4978798and was released asv0.2.1(1449d9bb). The previous file's "deliberate decisions" section described the SDK (packdb-oss/packdb-sdk,packdb-client); the new one describes this repository.FILE_INVENTORY.txtandSHA256SUMSare removed. They were export artifacts, stale since Own this repository's action pins: Dependabot and a weekly pin check #6.scripts/oss-ci.sh): the release record'ssdk_inventory_sha256hashed../packdb-sdk/SHA256SUMS. That is an export inventory, already stale after packdb-sdk#12, and removed by Record this repository as the canonical source packdb-sdk#13. It is replaced bysdk_tree, the git tree id of the SDK checkout the binary was built against: a content digest of exactly those sources, next to the existingsdk_source_sha. Both are now read without the old|| echo unknownfallback, so a candidate that cannot name its SDK fails instead of recordingunknown.30ed6e97the new code yieldseab5e8db…, GitHub's tree id for that commit, and a missing SDK checkout aborts underset -euo pipefail.Cargo.toml,.github/dependabot.ymlanddocs/WORKFLOWS.mdnow say the SDK crates move whenSDK_COMMITis bumped to a newpackdb-sdkrelease, not "when the SDK export is regenerated".No source, dependency, tag, release, publication or visibility change.