-
Notifications
You must be signed in to change notification settings - Fork 18
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Use artifact inventory #814
Merged
Merged
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
runesoerensen
force-pushed
the
use-artifact-inventory
branch
from
April 23, 2024 13:44
8693c51
to
f0879eb
Compare
runesoerensen
requested review from
joshwlewis,
colincasey and
a team
as code owners
April 23, 2024 14:42
Merged
colincasey
reviewed
Apr 25, 2024
joshwlewis
approved these changes
Apr 25, 2024
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Direction looks good to me. I tend to agree with Colin's comments, so looks good once those are resolved.
runesoerensen
force-pushed
the
use-artifact-inventory
branch
from
April 25, 2024 20:46
2db2178
to
59cfa15
Compare
The PR is ready to be merged, but I'll hold off doing that until we hear back from the SA team |
runesoerensen
force-pushed
the
use-artifact-inventory
branch
2 times, most recently
from
April 29, 2024 22:11
22e0f81
to
47e772f
Compare
colincasey
approved these changes
Apr 30, 2024
Logic for updating this from the nodejs.org feed will be added later
Node tarballs are prefixed with the filename sans ".tar.gz", so this will allow extraction of arm64 artifacts as well.
Non-zero exit code values aren't used anywhere
Avoid dependency on an archived github action, and take the same approach as other workflows in this repository
It's clear what is happening here, so avoid assigning an "earliest version" variable/providing context for an error that'll be trivial to identify if it's ever changed.
When an error is encountered, the process will still be terminated with a non-zero exit code with adequate error information for debugging an issue written to stderr
runesoerensen
force-pushed
the
use-artifact-inventory
branch
from
May 8, 2024 16:18
47e772f
to
d93b035
Compare
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR introduces support for the artifact inventory code shared with the Go buildpack, and updates the GitHub actions for node.js to write a corresponding
inventory.toml
file in the new format (which includes thesha256
checksum that is used to verify the download, as well as the upstream URL rather than our own S3 mirrored artifact store).A few notes:
libherokubuildpack
at some point.darwin
artifacts and thestaging
channel releases are no longer included in the inventory.We may also want to consider migrating NPM and Yarn over to the new format at some point (so we can avoid mirroring, and simplify our codebase), but that's probably out of scope for the time being.