@crossdelta/platform-sdk 0.26.9 → 0.26.10

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/CHANGELOG.md CHANGED
@@ -5,6 +5,16 @@ All notable changes to `@crossdelta/platform-sdk` will be documented in this fil
5
5
  The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
6
6
  and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
7
7
 
8
+ ## [0.26.10] - 2026-10-27
9
+
10
+ ### Fixed
11
+ - **The generated `setup-bun-install` action no longer caches the Bun binary.** Its default
12
+ `cache-paths` held all of `~/.bun`, so a cache restored after `setup-bun` put the previously
13
+ cached Bun back over the pinned one. Host steps then ran the old Bun, and the lockfile it wrote
14
+ for the Docker build context was refused as changed by the pinned Bun in the image. The default
15
+ is now `~/.bun/install/cache`, and a new step fails the job when `bun --revision` differs from
16
+ the revision `setup-bun` installed.
17
+
8
18
  ## [0.26.9] - 2026-10-27
9
19
 
10
20
  ### Security
@@ -19,9 +19,11 @@ inputs:
19
19
  description: Restore keys for the cache step.
20
20
  default: ''
21
21
  cache-paths:
22
- description: Newline-delimited paths to include in the cache.
22
+ description: >-
23
+ Newline-delimited paths to include in the cache. Never ~/.bun as a whole: it holds the Bun
24
+ binary, and restoring it after setup-bun swaps the pinned Bun for the cached one.
23
25
  default: |
24
- ~/.bun
26
+ ~/.bun/install/cache
25
27
  node_modules
26
28
  bun-version-file:
27
29
  description: Path to a file containing the Bun version (passed to setup-bun).
@@ -35,6 +37,7 @@ runs:
35
37
  using: composite
36
38
  steps:
37
39
  - name: Install Bun
40
+ id: setup-bun
38
41
  uses: oven-sh/setup-bun@v2
39
42
  with:
40
43
  bun-version-file: $\{{ inputs.bun-version-file }}
@@ -47,6 +50,19 @@ runs:
47
50
  key: $\{{ inputs.cache-key }}
48
51
  restore-keys: $\{{ inputs.cache-restore-keys }}
49
52
 
53
+ # A Bun other than the pinned one writes a lockfile the pinned Bun in the Docker image refuses
54
+ # as changed, so a drifted binary fails here instead of in the image build.
55
+ - name: Verify Bun version
56
+ shell: bash
57
+ env:
58
+ EXPECTED_REVISION: $\{{ steps.setup-bun.outputs.bun-revision }}
59
+ run: |
60
+ ACTUAL_REVISION=$(bun --revision)
61
+ if [ "$ACTUAL_REVISION" != "$EXPECTED_REVISION" ]; then
62
+ echo "::error::bun on PATH is $ACTUAL_REVISION, setup-bun installed $EXPECTED_REVISION"
63
+ exit 1
64
+ fi
65
+
50
66
  - name: Install dependencies
51
67
  shell: bash
52
68
  env:
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@crossdelta/platform-sdk",
3
- "version": "0.26.9",
3
+ "version": "0.26.10",
4
4
  "description": "Platform toolkit for event-driven microservices — keeping code and infrastructure in lockstep.",
5
5
  "keywords": [
6
6
  "cli",