Skip to content

adopt: read release pins from dx-sha256sums.txt next to dx (part of #6167) - #6422

Merged
TrapsterDK merged 1 commit into
mainfrom
adopt-runtime-pins
Nov 4, 2026
Merged

TrapsterDK merged 1 commit into
mainfrom
adopt-runtime-pins

Conversation

@TrapsterDK

Copy link
Copy Markdown
Collaborator

Part of #6167.

When the embedded pins are empty, release_pins now reads dx-sha256sums.txt from the directory of the running executable. A bad manifest errors with a message saying .dx/version would be written without hashes; a missing one keeps the unpinned behaviour. Test: manifest_dir_gives_pins_and_missing_manifest_gives_none.

Remaining:

  • The manifest is trusted as placed by the installer; the sigstore bundle is not verified in dx itself.
  • No version check inside the manifest.
  • Callers do not yet print the message for the missing-manifest case.

Tests: //cli/adopt:dx_adopt_test passes except overrides::tests::table_matches_the_repo_module_bazel (gcc_toolchain patches, untouched here). No consumer tests run.

Assisted by Claude.

🤖 Generated with Claude Code

https://claude.ai/code/session_011u9TXHDZrfmzFQ2WT8QAKK

…mbedded (part of #6167)

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_011u9TXHDZrfmzFQ2WT8QAKK
@TrapsterDK
TrapsterDK merged commit faba3bf into main Nov 4, 2026
1 check failed
@TrapsterDK
TrapsterDK deleted the adopt-runtime-pins branch November 4, 2026 19:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant