From 1bed66bb8d3eb56206959eb96a7eecdd0809255b Mon Sep 17 00:00:00 2001 From: Tong Date: Wed, 12 Aug 2026 23:56:03 +0900 Subject: [PATCH] uphold 1.1.0: a shim that can be installed, and an audit that reads this forge The install instructions in this file described something that did not work: a link named for a command, on PATH for the whole machine, against a declaration that lives in one repository's policy. Every directory without one -- which is most of them, and every repository that declares a shim for a different command -- got exit 2 instead of the command. The seam now runs the command where nothing here stands in front of it, which is what makes the documented install true. `audit --for-publication` no longer walks pull refs the forge stopped serving, so its report is about the repository being published rather than about whatever this clone once fetched. --- Cargo.lock | 2 +- Cargo.toml | 2 +- README.md | 6 +++--- hooks/lefthook.yml | 4 ++-- 4 files changed, 7 insertions(+), 7 deletions(-) diff --git a/Cargo.lock b/Cargo.lock index 7d7e7c1..39b2b7a 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -501,7 +501,7 @@ checksum = "673aac59facbab8a9007c7f6108d11f63b603f7cabff99fabf650fea5c32b861" [[package]] name = "uphold" -version = "1.0.0" +version = "1.1.0" dependencies = [ "encoding_rs", "globset", diff --git a/Cargo.toml b/Cargo.toml index 449aea9..4bd4614 100644 --- a/Cargo.toml +++ b/Cargo.toml @@ -1,6 +1,6 @@ [package] name = "uphold" -version = "1.0.0" +version = "1.1.0" edition = "2021" # 1.88, not 1.85: the ripgrep stack this crate embeds -- globset 0.4.20 and # ignore 0.4.33 in Cargo.lock -- refuses anything older. The 1.85 that stood here diff --git a/README.md b/README.md index cb789dd..4e9ddf3 100644 --- a/README.md +++ b/README.md @@ -25,7 +25,7 @@ bootstraps). default_install_hook_types: [pre-commit, commit-msg, pre-merge-commit, pre-push] repos: - repo: https://github.com/HackingGate/uphold - rev: v1.0.0 + rev: v1.1.0 hooks: - id: uphold-check # the claims still hold - id: uphold-scan # the content policy @@ -48,13 +48,13 @@ the binary must be on PATH. # lefthook.yml remotes: - git_url: https://github.com/HackingGate/uphold - ref: v1.0.0 + ref: v1.1.0 configs: - hooks/lefthook.yml ``` ```sh -cargo install --git https://github.com/HackingGate/uphold --tag v1.0.0 +cargo install --git https://github.com/HackingGate/uphold --tag v1.1.0 ``` ## Declare what enforces what diff --git a/hooks/lefthook.yml b/hooks/lefthook.yml index 97adf7a..726dfec 100644 --- a/hooks/lefthook.yml +++ b/hooks/lefthook.yml @@ -10,7 +10,7 @@ # # lefthook.yml, in the consuming repository # remotes: # - git_url: https://github.com/HackingGate/uphold -# ref: v1.0.0 +# ref: v1.1.0 # configs: # - hooks/lefthook.yml # @@ -21,7 +21,7 @@ # their manifest contract; lefthook runs commands and has no such contract, so # `uphold` must be on PATH: # -# cargo install --git https://github.com/HackingGate/uphold --tag v1.0.0 +# cargo install --git https://github.com/HackingGate/uphold --tag v1.1.0 # # The names below are prefixed `uphold-` on purpose. A remote config is # merged into the consumer's own, and two commands sharing a name under one hook