Skip to content

Latest commit

 

History

History
82 lines (57 loc) · 3.42 KB

CHANGELOG.md

File metadata and controls

82 lines (57 loc) · 3.42 KB
Raw

v0.3.3 (2023-05-08)

  • Add --no-dev flag to omit dev dependencies (contribution by @smoelius)

v0.3.2 (2022-11-04)

  • Upgrade to bpaf 0.7

v0.3.1 (2021-03-18)

  • Fix --features flag not being honored if --target is also passed

v0.3.0 (2021-03-18)

  • Renamed --cache_max_age to --cache-max-age for consistency with Cargo flags
  • Accept flags such as --target directly, without relying on the escape hatch of passing cargo metadata arguments after --
  • No longer default to --all-features, handle features via the same flags as Cargo itself
  • The json schema is now printed separately, use cargo supply-chain json --print-schema to get it
  • Dropped the help subcommand. Use --help instead, e.g. cargo supply-chain crates --help

Internal improvements:

  • Migrate to bpaf CLI parser, chosen for its balance of expressiveness vs complexity and supply chain sprawl
  • Add tests for the CLI interface
  • Do not regenerate the JSON schema on every build; saves a bit of build time and a bit of dependencies in production builds

v0.2.0 (2021-05-21)

  • Added json subcommand providing structured output and more details
  • Added -d, --diffable flag for diff-friendly output mode to all subcommands
  • Reduced the required download size for update subcommand from ~350Mb to ~60Mb
  • Added a detailed progress bar to all subcommands using indicatif
  • Fixed interrupted update subcommand considering its cache to be fresh. Other subcommands were not affected and would simply fetch live data.
  • If a call to cargo metadata fails, show an error instead of panicking
  • The list of crates in the output of publishers subcommand is now sorted

v0.1.2 (2021-02-24)

  • Fix help text sometimes being misaligned
  • Change download progress messages to start counting from 1 rather than from 0
  • Only print warnings about crates.io that are immediately relevant to listing dependencies and publishers

v0.1.1 (2021-02-18)

  • Drop extreaneous files from the tarball uploaded to crates.io

v0.1.0 (2021-02-18)

  • Drop authors subcommand
  • Add help subcommand providing detailed help for each subcommand
  • Bring help text more in line with Cargo help text
  • Warn about a large amount of data to be downloaded in update subcommand
  • Buffer reads and writes to cache files for a 6x speedup when using cache

v0.0.4 (2021-01-01)

  • Report failure instead of panicking on network failure in update subcommand
  • Correctly handle errors returned by the remote server

v0.0.3 (2020-12-28)

  • In case of network failure, retry with exponential backoff up to 3 times
  • Use local certificate store instead of bundling the trusted CA certificates
  • Refactor argument parsing to use pico-args instead of hand-rolled parser

v0.0.2 (2020-10-14)

  • crates - Shows the people or groups with publisher rights for each crate.
  • publishers - Is the reverse of crates, grouping by publisher instead.
  • update - Caches the data dumps from crates.io to avoid crawling the web service when lookup up publisher and author information.

v0.0.1 (2020-10-02)

Initial release, supports one command:

  • authors - Crawl through Cargo.toml of all crates and list their authors. Authors might be listed multiple times. For each author, differentiate if they are known by being mentioned in a crate from the local workspace or not. Support for crawling crates.io sourced packages is planned.
  • publishers - Doesn't do anything right now.