Age | Commit message (Collapse) | Author | |
---|---|---|---|
2024-02-28 | feat(publish): provenance attestation (#22573) | Divy Srivastava | |
Supply chain security for JSR. ``` $ deno publish --provenance Successfully published @divy/test_provenance@0.0.3 Provenance transparency log available at https://search.sigstore.dev/?logIndex=73657418 ``` 0. Package has been published. 1. Fetches the version manifest and verifies it's matching with uploaded files and exports. 2. Builds the attestation SLSA payload using Github actions env. 3. Creates an ephemeral key pair for signing the github token (aud=sigstore) and DSSE pre authentication tag. 4. Requests a X.509 signing certificate from Fulcio using the challenge and ephemeral public key PEM. 5. Prepares a DSSE envelop for Rekor to witness. Posts an intoto entry to Rekor and gets back the transparency log index. 6. Builds the provenance bundle and posts it to JSR. | |||
2024-02-27 | feat(publish): support sloppy imports and bare node built-ins (#22588) | Luca Casonato | |
2024-02-23 | feat(publish): respect .gitignore during `deno publish` (#22514) | Divy Srivastava | |
Files from `.gitignore`, global git config, `.git/info/exclude` and `deno.json`'s `exclude` are ignored. | |||
2024-02-20 | fix(publish): print files that will be published (#22495) | Luca Casonato | |
2024-02-19 | fix(publish): ignore .DS_Store while publishing (#22478) | Luca Casonato | |
2024-02-09 | fix: upgrade to deno_ast 0.33 (#22341) | David Sherret | |
* Uses diagnostics from deno_ast * Real fix for https://github.com/denoland/deno/pull/22310 * Moves `deno lint --json` code here * Upgrades swc Closes #22117 Closes #22109 Closes #21927 Closes #20993 | |||
2024-02-06 | fix(publish): lazily parse sources (#22301) | David Sherret | |
Closes #22290 | |||
2024-01-24 | feat(publish): give diagnostic on invalid package files (#22082) | Luca Casonato | |
2024-01-24 | feat(publish): exclude and include (#22055) | Luca Casonato | |
2024-01-24 | chore: improve unanalyzable dynamic import diagnostic (#22051) | Luca Casonato | |
2024-01-23 | refactor: use parsed source cache when unfurling import map (#22001) | Luca Casonato | |
2024-01-15 | refactor: use globbing from deno_config (#21925) | David Sherret | |
2024-01-08 | fix(unstable/tar): skip node_modules, .git, and config "exclude" (#21816) | David Sherret | |
2024-01-01 | chore: update copyright to 2024 (#21753) | David Sherret | |
2023-12-26 | refactor: change cli/ to use hyper 1.1 (#21705) | Bartek Iwańczuk | |
2023-12-14 | chore(unstable/publish): ordered publish of packages in workspace (#21550) | David Sherret | |
Co-authored-by: Luca Casonato <hello@lcas.dev> | |||
2023-12-12 | refactor: nicer warning display (#21547) | Bartek Iwańczuk | |
2023-11-30 | fix: batch upload authentication (#21397) | Luca Casonato | |
2023-11-23 | feat(unstable): tar up directory with deno.json (#21228) | Bartek Iwańczuk | |
Co-authored-by: David Sherret <dsherret@gmail.com> Co-authored-by: Luca Casonato <lucacasonato@yahoo.com> Co-authored-by: Luca Casonato <hello@lcas.dev> |