runspec-linux 0.4.0__tar.gz → 0.4.1__tar.gz

{runspec_linux-0.4.0 → runspec_linux-0.4.1}/CHANGELOG.md

@@ -1,5 +1,15 @@
 # runspec-linux Changelog
 
+## [0.4.1] — 2026-06-20
+
+Give `list-upgrades` `run_as = "root"`. It refreshes the package index
+(`apt-get update` / `dnf check-update` / …) by default, which needs root — but it
+had no `run_as`, so over the console it ran as the SSH login user and failed with
+`Could not open lock file /var/lib/apt/lists/lock — Permission denied`. It now
+escalates like the rest of the package family (works password-free with the
+`enable-passwordless-sudo` drop-in). `--no-refresh` still skips the index refresh
+and lists from the cache (now just faster, rather than a non-root workaround).
+
 ## [0.4.0] — 2026-06-20
 
 Make the privileged package/power runnables escalate via runspec's `run_as`, and

{runspec_linux-0.4.0 → runspec_linux-0.4.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: runspec-linux
-Version: 0.4.0
+Version: 0.4.1
 Summary: Linux system admin runnables for runspec
 Requires-Python: >=3.10
 Requires-Dist: runspec-linux-core>=0.3.0

{runspec_linux-0.4.0 → runspec_linux-0.4.1}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "runspec-linux"
-version = "0.4.0"
+version = "0.4.1"
 requires-python = ">=3.10"
 description = "Linux system admin runnables for runspec"
 dependencies = [

{runspec_linux-0.4.0 → runspec_linux-0.4.1}/runspec_linux/runspec.toml

@@ -324,10 +324,11 @@ serve       = ["local"]
 description = "List packages with an available upgrade (refreshes the package index first)"
 autonomy    = "autonomous"
 output      = "json"
+run_as      = "root"
 
 [list-upgrades.args.no-refresh]
 type        = "flag"
-description = "Read the cached package index instead of refreshing it first (no root needed)"
+description = "Skip refreshing the package index — list from the cached index (faster)"
 default     = false
 
 [upgrade-packages]