Skip to content

chore: vendor verified production SDK 0.1.0-beta.188 #95

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
mdbase-dev-release-automation wants to merge 1 commit into from
Closed

chore: vendor verified production SDK 0.1.0-beta.188 #95

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion apps/writer/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -49,7 +49,7 @@
"@mdbase-dev/connect": "0.1.0-beta.149",
"@mdbase-dev/connect-protocol": "file:vendor/mdbase-dev-connect-protocol-0.1.0-beta.145-e6e66bcd172f.tgz",
"@mdbase-dev/i18n": "0.1.0-beta.176",
"@mdbase-dev/sdk": "0.1.0-beta.187",
"@mdbase-dev/sdk": "0.1.0-beta.188",
"@mdbase-dev/sdk-lab": "file:../../vendor/sdk-lab-beta157.tgz",
"@mdbase-dev/sdk-staging": "file:../../vendor/sdk-staging-beta157.tgz",
"@mdbase-dev/ui": "0.1.0-beta.176",
Expand Down
2 changes: 1 addition & 1 deletion apps/writer/scripts/writer-sdk.mjs
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -21,7 +21,7 @@ const hash = (bytes) => createHash("sha256").update(bytes).digest("hex");
export const writerSdkPins = Object.freeze({
lab: "sdk-lab-beta157.json",
staging: "sdk-staging-beta157.json",
production: "sdk-production-beta187.json",
production: "sdk-production-beta188.json",
});

/** Installed package names to try, in order. The plain name comes first so a
Expand Down
16 changes: 8 additions & 8 deletions pnpm-lock.yaml
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

2 changes: 1 addition & 1 deletion pnpm-workspace.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -9,7 +9,7 @@ minimumReleaseAgeExclude:
- '@mdbase-dev/connect-dev@0.1.0-beta.149'
- '@mdbase-dev/ui@0.1.0-beta.176'
- '@mdbase-dev/i18n@0.1.0-beta.176'
- '@mdbase-dev/sdk@0.1.0-beta.187'
- '@mdbase-dev/sdk@0.1.0-beta.188'

onlyBuiltDependencies:
- esbuild
Expand Down
8 changes: 4 additions & 4 deletions tests/writer-sdk-intake.test.mjs
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -13,14 +13,14 @@ const metadata=bytes=>JSON.parse(/^const metadata = (\{.*\});$/m.exec(bytes.toSt
const member=(archive,path)=>execFileSync('tar',['-xOf',resolve(root,'vendor',archive),`package/dist/${path}`],{maxBuffer:8_000_000});

test('production npm archive and installed SDK match the authenticated release',async()=>{
const pin=JSON.parse(await read('vendor/sdk-production-beta187.json'));
assert.equal(pin.sha256,'00eb1395160907323bfcdc9e6689438bbb8b478ec2d1c4e1b79c421d2a940c8d');
assert.equal(pin.sourceCommit,'1907e67f26ece85f9c8b35bd99d4099d4e3f181a');
const pin=JSON.parse(await read('vendor/sdk-production-beta188.json'));
assert.equal(pin.sha256,'9ac39582b5440272f7e95177ac4f4840aebd4c8ddf832b24545232abe99c6b27');
assert.equal(pin.sourceCommit,'e8ffb806d16c58fe03cf50c96fb66e29ebb612ba');
assert.equal(hash(await read(`vendor/${pin.artifact}`)),pin.sha256);
const pkg=JSON.parse(await read('apps/writer/package.json'));
const target=process.env.VITE_MDBASE_ENV==='staging'?'staging':'production';
const archive=pin.artifact;
assert.equal(pkg.dependencies['@mdbase-dev/sdk'],'0.1.0-beta.187');
assert.equal(pkg.dependencies['@mdbase-dev/sdk'],'0.1.0-beta.188');
const original=member(pin.artifact,'application/packaged-trust.js');
assert.equal(hash(original),pin.packagedTrustModuleSha256);
assert.deepEqual(await read('apps/writer/node_modules/@mdbase-dev/sdk/dist/application/packaged-trust.js'),member(archive,'application/packaged-trust.js'));
Expand Down
Binary file added vendor/sdk-e8ffb806-production-beta188.tgz
View file
Open in desktop
Binary file not shown.
47 changes: 47 additions & 0 deletions vendor/sdk-production-beta188.json
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,47 @@
{
"schema": "tnapp/production-sdk-original/1",
"artifact": "sdk-e8ffb806-production-beta188.tgz",
"version": "0.1.0-beta.188",
"sourceCommit": "e8ffb806d16c58fe03cf50c96fb66e29ebb612ba",
"environment": "production",
"bytes": 4819840,
"sha256": "9ac39582b5440272f7e95177ac4f4840aebd4c8ddf832b24545232abe99c6b27",
"sri": "sha512-EDaInyP8q2Lz0Akz8P+CNj5O6OvinMJWR1bE04fKtWRFDt9mVRBRBYRja5okOtb3gtnKYyMdQFGLlFln7F1RrA==",
"publication": {
"repository": "mdbase-dev/mdbase-connect",
"workflow": ".github/workflows/publish-sdk-npm.yml",
"ref": "refs/tags/v0.1.0-beta.188",
"npm": "@mdbase-dev/sdk@0.1.0-beta.188",
"integrity": "sha512-EDaInyP8q2Lz0Akz8P+CNj5O6OvinMJWR1bE04fKtWRFDt9mVRBRBYRja5okOtb3gtnKYyMdQFGLlFln7F1RrA==",
"tarball": "https://registry.npmjs.org/@mdbase-dev/sdk/-/sdk-0.1.0-beta.188.tgz",
"attestations": "https://registry.npmjs.org/-/npm/v1/attestations/@mdbase-dev%2fsdk@0.1.0-beta.188"
},
"trust": {
"package": "@mdbase-dev/sdk",
"sha256": "7912e40838213e60b65848350d319a48019021317b112e3326429b250f0133d7",
"bytes": 840,
"cpOrigin": "https://connect.mdbase.dev",
"logOrigin": "https://log.mdbase.dev",
"sourceCommit": "36abd4b065be9495a7f5ae0808865a1f2279af04",
"sourceVersion": "0.1.0-beta.141"
},
"runtime": {
"sha256": "7004351583c3a79411e644fafe9f5786816d32ea058605d1905fd50666012f40",
"bytes": 3875815,
"maxBytes": 3875815,
"source": {
"repository": "mdbase-dev/mdbase-connect",
"commit": "aae332572834fbfa065c0f696017c0de3540649d"
}
},
"packagedTrustModuleSha256": "cf9690968d68b3c1eed2356ccfa2c72198b2f8cf07b9b24b1bb7be499b05bffb",
"bundledDependencies": [
{
"name": "@mdbase-dev/connect-protocol",
"member": "package/vendor/mdbase-dev-connect-protocol-0.1.0-beta.145-e6e66bcd172f.tgz",
"bytes": 106404,
"sha256": "e901144b8d93dc96fcf71d9d8f85dddbf647e9908913be21191c484e9224bb98"
}
],
"package": "@mdbase-dev/sdk"
}
Loading