boringbuilder 0.1.0.alpha.7 → 0.1.0.alpha.8

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (7) hide show
  1. checksums.yaml +4 -4
  2. data/CHANGELOG.md +6 -0
  3. data/docs/building.md +2 -0
  4. data/lib/boringbuilder/boring_cache.rb +4 -4
  5. data/lib/boringbuilder/mise.rb +7 -1
  6. data/lib/boringbuilder/version.rb +1 -1
  7. metadata +2 -2
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: 7989014876752492e82ec7b87d6a3d4fd6e081ae5f4ef8c3d5b0fde569c045c4
4
- data.tar.gz: d494aa39ed239460513c22008f6ea2684778f4804ed53ee71e5e2f1947717a1a
3
+ metadata.gz: 22116f34c754c470cf545293e07c4a80535b5029e6de14a6f0a40b566519df51
4
+ data.tar.gz: d7ca4d972b06de91ab789e1b40e5d79f066e235211449c67ba10f3aaf36860ed
5
5
  SHA512:
6
- metadata.gz: 1178e296831904c2833a69342a675a1ebffd0292033202cab99a3b64ba87bc1dd51872ba47a15df6e1c0687d924451db59cef317a8036a5327ced32362fae386
7
- data.tar.gz: cd9dabc4f8c672aa7e1e79bb12bb5ef28a3f39fbcb2bd3a3296433e8e1300efd0c707ff72a12929c25e8cc1df4f6363f8b480d2168d8490bbfb7b0c4c8df2084
6
+ metadata.gz: fb825fc16e19697558797e7b6b105af57ccbbf9795bd4515a345e0bdd5885e9ebe76e527386edc471d00d8216c9bd48dab53dc4ad17f93bd9a124e92d77aa60b
7
+ data.tar.gz: 9f64ea4bbc096137a82a390cbcb2efb71cd20d833b3c999ecc3ffc863b4408837f3b5096b653017f9670245b8f39eb4d0a0d0d798e4ac5ab6a24aa24fbe5603c
data/CHANGELOG.md CHANGED
@@ -1,5 +1,11 @@
1
1
  # Changelog
2
2
 
3
+ ## 0.1.0.alpha.8 - 2026-10-16
4
+
5
+ - Update the BoringCache CLI and build images to 1.42.0 with pinned multi-platform digests.
6
+ - Trust copied project Mise configuration inside build containers before installing tools, while retaining
7
+ paranoid mode.
8
+
3
9
  ## 0.1.0.alpha.7 - 2026-10-02
4
10
 
5
11
  - Require Dagger Ruby 0.11.1 or newer for startup status and Dagger 0.21.9 support.
data/docs/building.md CHANGED
@@ -134,6 +134,8 @@ end
134
134
 
135
135
  `pipeline.mise` prepares the requested tools and application source in a Dagger container. Project versions in
136
136
  `mise.toml`, `.mise.toml`, or `.tool-versions` override recipe fallbacks, and `mise.lock` is respected when present.
137
+ The build trusts the copied project configuration files inside its container before installing tools. Mise's
138
+ paranoid mode remains enabled; host-side Mise trust is unchanged.
137
139
  Any tool in the [Mise registry](https://mise.jdx.dev/registry.html) can use the same shape.
138
140
 
139
141
  `pipeline.run` persists the declared path in the local Dagger engine or through BoringCache when shared credentials
data/lib/boringbuilder/boring_cache.rb CHANGED
@@ -2,10 +2,10 @@
2
2
 
3
3
  module BoringBuilder
4
4
  class BoringCache
5
- CLI_IMAGE = "ghcr.io/boringcache/base:bookworm-v1.19.4@" \
6
- "sha256:84d1e168a50fd086ecd4fdb2fd96f689982a6f3c61454acd8c7189e336f8f3ae"
7
- BUILD_IMAGE = "ghcr.io/boringcache/base:bookworm-build-v1.19.4@" \
8
- "sha256:df4461581214c0052157041238a67b8da420e1399e4024bc857c68c74a9721cb"
5
+ CLI_IMAGE = "ghcr.io/boringcache/base:bookworm-v1.42.0@" \
6
+ "sha256:9d663a781f5e2ff07ee430cb73e99b6b01e00584583c78c27062680842673430"
7
+ BUILD_IMAGE = "ghcr.io/boringcache/base:bookworm-build-v1.42.0@" \
8
+ "sha256:0d621a60a42741365f69d991b121e1a1ea3b900c360b11e265d99e27eeaaa311"
9
9
  TOKEN_NAMES = %w[BORINGCACHE_RESTORE_TOKEN BORINGCACHE_SAVE_TOKEN].freeze
10
10
  ENVIRONMENT_NAMES = %w[BORINGCACHE_API_URL BORINGCACHE_DEFAULT_WORKSPACE BORINGCACHE_WORKSPACE].freeze
11
11
 
data/lib/boringbuilder/mise.rb CHANGED
@@ -7,7 +7,8 @@ module BoringBuilder
7
7
  DEFAULT_IMAGE = BoringCache::BUILD_IMAGE
8
8
  CACHE_PATH = "/mise/cache"
9
9
  INSTALL_COMMAND = %w[mise install].freeze
10
- METADATA_FILES = %w[mise.toml .mise.toml .tool-versions mise.lock].freeze
10
+ CONFIG_FILES = %w[mise.toml .mise.toml .tool-versions].freeze
11
+ METADATA_FILES = [*CONFIG_FILES, "mise.lock"].freeze
11
12
  ENVIRONMENT = {
12
13
  "MISE_CACHE_DIR" => CACHE_PATH,
13
14
  "MISE_DATA_DIR" => "/mise",
@@ -32,6 +33,11 @@ module BoringBuilder
32
33
  container = with_environment(container)
33
34
  container = container.with_workdir(workdir)
34
35
  .with_new_file("/etc/mise/config.toml", system_config(tools))
36
+ CONFIG_FILES.each do |name|
37
+ next unless project.root.join(name).file?
38
+
39
+ container = container.with_exec(["mise", "trust", "--", "#{workdir}/#{name}"])
40
+ end
35
41
  command = [*INSTALL_COMMAND, *Array(only).map(&:to_s)]
36
42
  pipeline.run(
37
43
  container,
data/lib/boringbuilder/version.rb CHANGED
@@ -1,5 +1,5 @@
1
1
  # frozen_string_literal: true
2
2
 
3
3
  module BoringBuilder
4
- VERSION = "0.1.0.alpha.7"
4
+ VERSION = "0.1.0.alpha.8"
5
5
  end
metadata CHANGED
@@ -1,7 +1,7 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: boringbuilder
3
3
  version: !ruby/object:Gem::Version
4
- version: 0.1.0.alpha.7
4
+ version: 0.1.0.alpha.8
5
5
  platform: ruby
6
6
  authors:
7
7
  - BoringCache
@@ -86,7 +86,7 @@ licenses:
86
86
  metadata:
87
87
  allowed_push_host: https://rubygems.org
88
88
  homepage_uri: https://github.com/boringcache/builder
89
- source_code_uri: https://github.com/boringcache/builder/tree/v0.1.0.alpha.7
89
+ source_code_uri: https://github.com/boringcache/builder/tree/v0.1.0.alpha.8
90
90
  documentation_uri: https://github.com/boringcache/builder#readme
91
91
  changelog_uri: https://github.com/boringcache/builder/blob/main/CHANGELOG.md
92
92
  bug_tracker_uri: https://github.com/boringcache/builder/issues