@containerbase/base 14.52.8 → 14.53.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
|
@@ -14,10 +14,16 @@ export const ToolFile = z.object({
|
|
|
14
14
|
name: z.string().min(1),
|
|
15
15
|
/** the https download url */
|
|
16
16
|
url: z.url({ protocol: /^https$/ }),
|
|
17
|
-
/**
|
|
17
|
+
/**
|
|
18
|
+
* `<algorithm>:<lowercase hex>`, published with `sha1`, `sha256` or
|
|
19
|
+
* `sha512`. The digests of the sha algorithms readers verify (`sha1`,
|
|
20
|
+
* `sha224`, `sha256`, `sha384`, `sha512`) must have their exact length.
|
|
21
|
+
* Lenient for other algorithms, so a new one doesn't reject the whole file:
|
|
22
|
+
* readers skip a file with an algorithm they don't know.
|
|
23
|
+
*/
|
|
18
24
|
checksum: z
|
|
19
25
|
.string()
|
|
20
|
-
.regex(/^(sha1:[0-9a-f]{40}|sha256:[0-9a-f]{64}|sha512:[0-9a-f]{128})$/),
|
|
26
|
+
.regex(/^(?:sha1:[0-9a-f]{40}|sha224:[0-9a-f]{56}|sha256:[0-9a-f]{64}|sha384:[0-9a-f]{96}|sha512:[0-9a-f]{128}|(?!sha(?:1|224|256|384|512):)[a-z0-9-]+:[0-9a-f]+)$/),
|
|
21
27
|
/**
|
|
22
28
|
* the containerbase arch, like `amd64`, omitted for arch-independent files;
|
|
23
29
|
* readers ignore files of an arch they don't know
|
|
@@ -12,7 +12,10 @@ export interface ToolFile {
|
|
|
12
12
|
*/
|
|
13
13
|
url: string;
|
|
14
14
|
/**
|
|
15
|
-
* `<algorithm>:<lowercase hex
|
|
15
|
+
* `<algorithm>:<lowercase hex>`, published with `sha1`, `sha256` or
|
|
16
|
+
* `sha512`. The digests of the sha algorithms readers verify (`sha1`,
|
|
17
|
+
* `sha224`, `sha256`, `sha384`, `sha512`) have their exact length. Readers
|
|
18
|
+
* skip a file with an algorithm they don't know.
|
|
16
19
|
*/
|
|
17
20
|
checksum: string;
|
|
18
21
|
/**
|