Breadway/bos
1
0
Fork 0
Code Issues Pull requests Projects Releases 8 Packages Wiki Activity Actions

iso: pin bakery versions to the published stable index
Some checks failed
Build and release ISO / release-iso (push) Failing after 48s
Details

Browse source 
Newer git tags for breadpad, breadmon, breadclip, breadshot,
breadhelp, and breadcrumbs have no artifacts on dl.breadway.dev
because bakery release CI failed. Pin what the signed index
actually serves so the ISO bake can verify sha256.
This commit is contained in:
Breadway 2026-08-15 23:39:33 +08:00
parent ca550c3ffc
commit 59fa81de98
1 changed files with 13 additions and 10 deletions
Download patch file Download diff file Expand all files Collapse all files

23
iso/bread-lockfile.toml
View file

@ -3,7 +3,7 @@
# build-local.sh and CI (scripts/ci-stage-bakery.py) read this file. A missing # build-local.sh and CI (scripts/ci-stage-bakery.py) read this file. A missing
# *required* binary fails the bake: a hollow ISO is worse than a failed build. # *required* binary fails the bake: a hollow ISO is worse than a failed build.
# optional_bins are baked when the verified stable index publishes them, and # optional_bins are baked when the verified stable index publishes them, and
# skipped with a warning when it does not (today: bread 0.7.0 has no # skipped with a warning when it does not (today: bread 0.8.0 has no
# bread-emit / bread-module-host). # bread-emit / bread-module-host).
# #
# A flat `bins` list is still accepted and treated as required_bins. # A flat `bins` list is still accepted and treated as required_bins.
@ -47,21 +47,24 @@ optional_bins = [
"bread-module-host", "bread-module-host",
] ]
# Package name → version, matching today's stable index. CI prefers the # Package name → version. Must exist at dl.breadway.dev/<pkg>/<ver>/ and
# pinned version URL when a key is set. [[pin]] { package, version } is # should match the signed index so CI can verify sha256. Newer git tags
# accepted as well and merged (conflict = bake error). # that bakery release CI did not publish (breadpad 0.5.1, breadmon 0.1.3,
# breadclip 0.2.2, breadshot 0.1.2, breadhelp 0.2.4, breadcrumbs 2.1.7)
# stay off this list until those artifacts exist.
# [[pin]] { package, version } is accepted as well and merged (conflict = bake error).
[versions] [versions]
bakery = "0.7.2" bakery = "0.7.2"
bread = "0.8.0" bread = "0.8.0"
bread-theme = "0.7.2" bread-theme = "0.7.2"
breadbar = "0.3.1" breadbar = "0.3.1"
breadbox = "0.3.1" breadbox = "0.3.1"
breadcrumbs = "2.1.7" breadcrumbs = "2.1.6"
breadpad = "0.5.1" breadpad = "0.5.0"
breadpaper = "0.1.12" breadpaper = "0.1.12"
breadmon = "0.1.3" breadmon = "0.1.2"
breadsearch = "0.3.1" breadsearch = "0.3.1"
breadclip = "0.2.2" breadclip = "0.1.1"
breadshot = "0.1.2" breadshot = "0.1.1"
bos-settings = "0.8.0" bos-settings = "0.8.0"
breadhelp = "0.2.4" breadhelp = "0.2.3"