Release CodeTruss CLI v0.2.41 - #30
Merged
Merged
Conversation
Syncs the 0.2.41 source from the private monorepo. codetruss-cli-0.2.41.tgz sha256 cb0b9d69f15e7113a6a523a6b139ec3150b7d07459e5242b2c047fc9aac57d04 That is the digest the website serves and the digest in release-reference.json, rebuilt from this tree and compared rather than copied across. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
0.2.41 adds a lockfile integrity check: a grammar pack records the package and version its wasm was cut from, and `verify-grammar-packs` refuses to believe that provenance unless pnpm-lock.yaml pins exactly one resolution of each source package. The mirror is its own workspace with its own lockfile, and it pinned neither, so the check failed with pnpm-lock.yaml does not pin web-tree-sitter; grammar pack provenance cannot be checked on every Node 22 and Node 24 leg. Node 20.9 passed, which is why this was not visible until the grammar tests ran. Declares the same two packages the monorepo declares, at the same versions the pack provenance names, and regenerates the lockfile. The released archive is unaffected: it rebuilds to cb0b9d69f15e7113a6a523a6b139ec3150b7d07459e5242b2c047fc9aac57d04 with and without this change. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Syncs the 0.2.41 source from the private monorepo.
That is the digest the website serves, the digest in
release-reference.json,and the digest
release.ymlrebuilds and checks before it signs anything.Sync fidelity
164 mirrored files were compared byte for byte against the monorepo source
after a fresh checkout, including the
public/downloads/grammars/artifacts.Zero mismatches. Mirror-owned files (workflows, README, packaging metadata)
are untouched, and historical changelog entries and version labels are
unchanged.
Follows #29, which closed the same gap for 0.2.40.