@norskvideo/ctl-dev-kit 0.2.15 → 0.2.17

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -134,6 +134,30 @@ jobs:
134
134
  changed=1
135
135
  parts+=("media \`$new_media\`")
136
136
  fi
137
+ # The rewrite above is a LITERAL replace of the value found in
138
+ # manifest.seed.json, so it only ever touches pins that already equal the
139
+ # seed. A pin that has drifted off it -- a hand edit, a merge, a
140
+ # half-finished run -- is invisible to this bump and to every later one,
141
+ # permanently, while the job still reports success. funke launched a
142
+ # 2026-09-30 engine against 2026-09-05 npm pins for a month that way;
143
+ # playout and probe sat two months back on 1.1.0-2026-08-02. The whole
144
+ # point of the family is that ONE version string drives it, so a
145
+ # divergent pin is a defect and the only thing missing was someone
146
+ # saying so.
147
+ #
148
+ # Not auto-rewritten: a pin held back on purpose is someone's decision,
149
+ # and silently moving it would be the same class of surprise in the
150
+ # other direction. Fail, name them, and let a human fix the pin or the
151
+ # intent.
152
+ stranded="$(git grep -hoE '"@norskvideo/norsk-(api|sdk|auto-manager|manager-sdk)"[[:space:]]*:[[:space:]]*"[0-9]+\.[0-9]+\.[0-9]+-[0-9]{4}-[0-9]{2}-[0-9]{2}-[0-9a-f]+"' -- '*package.json' \
153
+ | sed -E 's/.*"([^"]+)"$/\1/' | sort -u | grep -vxF "$new_media" || true)"
154
+ if [ -n "$stranded" ]; then
155
+ echo "::error::npm norsk pins are stranded off the nightly channel: $(printf '%s' "$stranded" | tr '\n' ' ')"
156
+ echo "The media family (api, sdk, auto-manager, manager-sdk) and the launched image are built from the same"
157
+ echo "commit, so every pin must read $new_media. These do not, and because the rewrite above is a literal"
158
+ echo "replace of the seed value, no later bump can reach them either. Set them to $new_media."
159
+ exit 1
160
+ fi
137
161
 
138
162
  # STUDIO: unlike media, Norsk builds the studio npm packages and the
139
163
  # studio Docker image from DIFFERENT commits — their hash suffixes never
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@norskvideo/ctl-dev-kit",
3
- "version": "0.2.15",
3
+ "version": "0.2.17",
4
4
  "type": "module",
5
5
  "exports": {
6
6
  "./create-product": "./create-product/create-product.ts",