@kungfu-tech/buildchain 2.8.3-alpha.1 → 2.8.3-alpha.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
|
@@ -4,7 +4,7 @@
|
|
|
4
4
|
"product": {
|
|
5
5
|
"name": "Buildchain",
|
|
6
6
|
"package": "@kungfu-tech/buildchain",
|
|
7
|
-
"version": "2.8.3-alpha.
|
|
7
|
+
"version": "2.8.3-alpha.2",
|
|
8
8
|
"repository": "https://github.com/kungfu-systems/buildchain"
|
|
9
9
|
},
|
|
10
10
|
"majorLine": "v2",
|
|
@@ -193,7 +193,7 @@
|
|
|
193
193
|
"release-state SHA is recorded as a durable audit entrance"
|
|
194
194
|
],
|
|
195
195
|
"breakingDigest": "sha256:b627e1b2ece9b6049517a942c5139e342e6077cdd3d8962d61cef8481b1f70ad",
|
|
196
|
-
"auditDigest": "sha256:
|
|
196
|
+
"auditDigest": "sha256:f1c2d70510f074102c2e9ff87b638b7b9b33edaa88aad8abc1e73e75e46a6af7"
|
|
197
197
|
},
|
|
198
198
|
{
|
|
199
199
|
"contractVersion": 1,
|
|
@@ -242,7 +242,7 @@
|
|
|
242
242
|
"prose-only public claims downgrade the release trust passport audit"
|
|
243
243
|
],
|
|
244
244
|
"breakingDigest": "sha256:f0b636eb925ddbf45ff1a8872454ab7b4dd98857cac12bb75217830130e62a16",
|
|
245
|
-
"auditDigest": "sha256:
|
|
245
|
+
"auditDigest": "sha256:f1c2d70510f074102c2e9ff87b638b7b9b33edaa88aad8abc1e73e75e46a6af7"
|
|
246
246
|
},
|
|
247
247
|
{
|
|
248
248
|
"contractVersion": 1,
|
|
@@ -342,9 +342,9 @@
|
|
|
342
342
|
"agents can discover supported Node APIs without importing internal file paths"
|
|
343
343
|
],
|
|
344
344
|
"breakingDigest": "sha256:48f925608d3e2131d90936b07dc2a30341204cae3e6e785c0f77d61ad755c945",
|
|
345
|
-
"auditDigest": "sha256:
|
|
345
|
+
"auditDigest": "sha256:2d1c150464effb5e8ad5d5a6ef78ee71899b8bd74a46c7b7a7a01fec1e35c86a"
|
|
346
346
|
}
|
|
347
347
|
],
|
|
348
348
|
"compatibilityDigest": "sha256:36421b592a782decbfe31a7d8d42d70ce1100a56a2c4f4a0ccc21f0617dc72bf",
|
|
349
|
-
"contractDigest": "sha256:
|
|
349
|
+
"contractDigest": "sha256:6f59faebcc26bc63965cf1eaf930bfb85ba3b0599135ef6f3c0b12fa1ea449ce"
|
|
350
350
|
}
|
|
@@ -62,7 +62,7 @@
|
|
|
62
62
|
"specifier": "@kungfu-tech/buildchain/release-passport",
|
|
63
63
|
"export": "./release-passport",
|
|
64
64
|
"target": "./packages/core/release-passport.js",
|
|
65
|
-
"digest": "sha256:
|
|
65
|
+
"digest": "sha256:f1c2d70510f074102c2e9ff87b638b7b9b33edaa88aad8abc1e73e75e46a6af7"
|
|
66
66
|
},
|
|
67
67
|
{
|
|
68
68
|
"specifier": "@kungfu-tech/buildchain/release-propagation",
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@kungfu-tech/buildchain",
|
|
3
|
-
"version": "2.8.3-alpha.
|
|
3
|
+
"version": "2.8.3-alpha.2",
|
|
4
4
|
"private": false,
|
|
5
5
|
"description": "Buildchain Release Passport, release governance, CLI toolkit, and site facts.",
|
|
6
6
|
"repository": "https://github.com/kungfu-systems/buildchain",
|
|
@@ -1177,6 +1177,7 @@ export function collectGitHubReleasePassport({
|
|
|
1177
1177
|
const resolvedOutputDir = path.resolve(cwd, outputDir);
|
|
1178
1178
|
const productMechanism = defaultProductMechanism({ repository, productName });
|
|
1179
1179
|
const artifactEvidence = createArtifactEvidence({ assets, repository, tag: resolvedTag, sourceSha, workflow });
|
|
1180
|
+
const bundledPublishEvidencePath = publishEvidenceMeta.value ? "evidence.json" : "";
|
|
1180
1181
|
const impact = mergeAuthoritativeImpactBase(
|
|
1181
1182
|
normalizeImpactLedger(impactMeta.value, { tag: resolvedTag, line, decision: "unknown" }),
|
|
1182
1183
|
basePassportMeta.value,
|
|
@@ -1238,6 +1239,9 @@ export function collectGitHubReleasePassport({
|
|
|
1238
1239
|
transactionStatePath: transactionMeta.path ? path.relative(resolvedOutputDir, transactionMeta.path).split(path.sep).join("/") : "",
|
|
1239
1240
|
workflow,
|
|
1240
1241
|
}), basePassportMeta.value, { requireKfd: requireBaseKfd });
|
|
1242
|
+
if (bundledPublishEvidencePath) {
|
|
1243
|
+
passport.evidence.publishEvidence = bundledPublishEvidencePath;
|
|
1244
|
+
}
|
|
1241
1245
|
const checkReport = createReleaseCheckReport({
|
|
1242
1246
|
passport,
|
|
1243
1247
|
artifactEvidence,
|
|
@@ -1250,6 +1254,7 @@ export function collectGitHubReleasePassport({
|
|
|
1250
1254
|
const files = {
|
|
1251
1255
|
"product-mechanism.json": productMechanism,
|
|
1252
1256
|
"artifact-evidence.json": artifactEvidence,
|
|
1257
|
+
...(publishEvidenceMeta.value ? { [bundledPublishEvidencePath]: publishEvidenceMeta.value } : {}),
|
|
1253
1258
|
"impact.json": impact,
|
|
1254
1259
|
"agent-index.json": agentIndex,
|
|
1255
1260
|
"buildchain.release.json": passport,
|