Repository navigation
tools: Task and go-tools as released binaries, not go.mod's - #228
Merged
Merged
Conversation
go tool task is go-tools' task command now: the Task versions.yaml pins, with go-tools' latest release on its PATH, so the Taskfiles and hack/ call versions, mutate, sbom, provenance, attestgate and the gates by name. Neither is compiled here any more: the module graph goes from 455 modules to 81. task is pinned for every platform a person or a runner works on, so the image takes linux/amd64's as TASK_SHA256_LINUX_AMD64 and hands install-dev-tools.sh the same TASK_SHA256 it read: the guest's Task is the bytes it was. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
go tool taskis now go-tools' task command (spin-stack/go-tools#100, #101): the Task thatversions.yamlpins, with every go-tools command from its latest release onPATH.go.mod: Task's and go-tools' ten tools are replaced bygithub.com/spin-stack/go-tools/cmd/task.go list -m all: 455 → 81 modules. The libraries this repository imports (versions,attestgate, …) stay.versions.yamltask:{os}_{arch}withpinsfor linux/amd64, linux/arm64, darwin/amd64 and darwin/arm64, and thegithub-releasetrack (tagscan't check publication of a per-platform URL).image/Dockerfile: takesTASK_SHA256_LINUX_AMD64and exports it as the sameTASK_SHA256thatinstall-dev-tools.shreads. Same sha (680859db…), so the guest's Task doesn't change.boot/,e2fsprogs/,kernel/,qemu/) andhack/release,hack/touches: the tools by name; they all run inside Task.taskgate-allow.txtanddocs/releasing.md.Checked locally:
go tool task lintandgo test ./...pass (versionsgate, workflows).versions args ubuntu mkosi task git-lfs buildkitgivesTASK_SHA256_LINUX_AMD64=680859db…andTASK_VERSION=3.54.0.hack/toucheswill seetask's arguments changed, so the image gets rebuilt in this PR. The bytes of Task inside are the same.🤖 Generated with Claude Code