@kungfu-tech/buildchain 3.0.9-alpha.6 → 3.0.9-alpha.8
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/site/buildchain-contract.json +67 -7
- package/dist/site/buildchain-site.json +9 -9
- package/dist/site/kfd-claims.json +3 -3
- package/dist/site/kfd-upstream-aggregate.json +1 -1
- package/dist/site/manual-registry.json +1 -1
- package/dist/site/node-api-registry.json +11 -11
- package/dist/site/page-registry.json +4 -4
- package/dist/site/public-surface-audit.json +2 -2
- package/dist/site/publication-registry.json +4 -4
- package/dist/site/site-manifest.json +5 -5
- package/dist/site/workflow-registry.json +4 -4
- package/docs/aws-us-elastic-runner-burst-plane.md +5 -0
- package/docs/node-api-reference.md +16 -16
- package/package.json +1 -1
- package/packages/core/buildchain-compatibility-proof.js +22 -0
- package/scripts/aws-macos-jit-controller-core.mjs +50 -0
- package/scripts/aws-macos-jit-controller.mjs +47 -0
- package/scripts/aws-macos-jit-source-rebind.mjs +45 -4
- package/scripts/aws-macos-jit.mjs +12 -0
- package/scripts/check-inventory.mjs +1 -1
- package/scripts/seal-artifact-signing-requests.mjs +7 -4
- package/scripts/workflow-call-contract.mjs +1 -1
|
@@ -1003,7 +1003,7 @@ for (const forbiddenSnippet of [
|
|
|
1003
1003
|
for (const requiredSnippet of [
|
|
1004
1004
|
"id-token: write",
|
|
1005
1005
|
"actions: write",
|
|
1006
|
-
"uses: kungfu-systems/buildchain/.github/workflows/release-candidate-promote.yml@
|
|
1006
|
+
"uses: kungfu-systems/buildchain/.github/workflows/release-candidate-promote.yml@cc6c32845ab5779009aeb48cc34efe65e229fe30\n",
|
|
1007
1007
|
"github.event.workflow_run.event == 'push'",
|
|
1008
1008
|
"!startsWith(github.event.workflow_run.display_title, 'chore(release): prepare v')",
|
|
1009
1009
|
"!startsWith(github.event.workflow_run.display_title, 'chore(release): release v')",
|
|
@@ -275,16 +275,19 @@ export function sealArtifactSigningRequests({
|
|
|
275
275
|
sourceTreeSha = process.env.BUILDCHAIN_SOURCE_TREE_SHA,
|
|
276
276
|
runtimeSha = process.env.BUILDCHAIN_RUNTIME_SHA,
|
|
277
277
|
platformId = process.env.BUILDCHAIN_PLATFORM_ID,
|
|
278
|
+
requestsEnabled = process.env.BUILDCHAIN_SIGNING_REQUESTS_ENABLED !== "false",
|
|
278
279
|
} = {}) {
|
|
279
280
|
const resolvedWorkspace = path.resolve(workspace);
|
|
280
281
|
const resolvedCwd = path.resolve(resolvedWorkspace, cwd);
|
|
281
282
|
assertInside(resolvedWorkspace, resolvedCwd, "signing working directory");
|
|
282
283
|
const loaded = loadBuildchainConfig(resolvedCwd);
|
|
283
284
|
const declarations = loaded?.config?.signing?.artifacts || [];
|
|
284
|
-
const selected =
|
|
285
|
-
(
|
|
286
|
-
|
|
287
|
-
|
|
285
|
+
const selected = requestsEnabled
|
|
286
|
+
? declarations.filter(
|
|
287
|
+
(entry) =>
|
|
288
|
+
entry.platforms.length === 0 || entry.platforms.includes(platformId),
|
|
289
|
+
)
|
|
290
|
+
: [];
|
|
288
291
|
const resolvedOutputRoot = path.resolve(resolvedWorkspace, outputRoot);
|
|
289
292
|
assertInside(resolvedWorkspace, resolvedOutputRoot, "signing request output");
|
|
290
293
|
if (selected.length === 0) {
|
|
@@ -6,7 +6,7 @@ import { pathToFileURL } from "node:url";
|
|
|
6
6
|
import { evaluateWorkflowCallContract } from "../packages/core/workflow-call-contract.js";
|
|
7
7
|
import { parseWorkflowDocument } from "../packages/core/workflow-yaml-contract.js";
|
|
8
8
|
|
|
9
|
-
export const SELF_RELEASE_REF = "
|
|
9
|
+
export const SELF_RELEASE_REF = "cc6c32845ab5779009aeb48cc34efe65e229fe30";
|
|
10
10
|
export const SELF_RELEASE_PUBLIC_WORKFLOW = `kungfu-systems/buildchain/.github/workflows/release-candidate-promote.yml@${SELF_RELEASE_REF}`;
|
|
11
11
|
|
|
12
12
|
function parityFailure(message) {
|