View Source CHANGELOG
0-10-0-2023-05-09
0.10.0 (2023-05-09)
Drop support for old OTP and Rebar versions.
hex_core
now requires OTP20+ and Rebar 3.15.1+.Add
hex_repo:get_docs/3
andhex_repo:get_public_key/1
.
0-9-0-2022-11-03
0.9.0 (2022-11-03)
Change
hex_registry
functions to match protobuf fieldsBefore:
> hex_registry:unpack_names(Payload, <<"test">>, TestPublicKey) {ok,[#{name => <<"package1">>, ...}, #{name => <<"package2">>, ...}]}
After:
> hex_registry:unpack_names(Payload, <<"test">>, TestPublicKey) {ok,#{packages => [#{name => <<"package1">>, ...}, #{name => <<"package2">>, ...}], repository: <<"test">>}}
Change
hex_repo
functions to match protobuf fieldsBefore:
> hex_repo:get_names(Config), {ok,{200, ..., [#{name => <<"pacakge2">>, ...}, #{name => <<"pacakge2">>, ...}, ...]}}
After:
> hex_repo:get_names(Config), {ok,{200, ..., #{packages => [#{name => <<"pacakge2">>, ...}, #{name => <<"pacakge2">>, ...}, ...], repository => <<"test">>}}}
0-8-4-2021-12-20
0.8.4 (2021-12-20)
- Add
@doc
tohex_licenses
0-8-3-2021-12-14
0.8.3 (2021-12-14)
- Don't warn on non-https URLs
- Add
hex_licenses
module
0-8-2-2021-05-28
0.8.2 (2021-05-28)
- Warn on unsafe httpc default SSL settings
0-8-1-2021-05-20
0.8.1 (2021-05-20)
- Update gpb to 4.17.6 to avoid dialyzer warnings
0-8-0-2021-05-02
0.8.0 (2021-05-02)
- Deprecate registry encode/decode API in favour of new high-level build/unpack API
- Add
updated_at
to repository names resource
0-7-1-2020-10-12
0.7.1 (2020-10-12)
- Fix dialyzer warnings on OTP 23
0-7-0-2020-10-20
0.7.0 (2020-10-20)
- Fix compatibility with OTP 24
Change
hex_tarball:create/2
error value from{error, too_big}
to{tarball, {too_big_compressed | too_big_uncompressed, Size}}
.
0-6-10-2020-08-25
0.6.10 (2020-08-25)
- Add configuration for max tarball size
- Do not create extraneous "memory" directory when unpacking
0-6-9-2020-05-24
0.6.9 (2020-05-24)
- Add
hex_api_release:publish/3
0-6-8-2020-02-04
0.6.8 (2020-02-04)
- Fix tarball file extraction through symlinks
0-6-7-2020-02-03
0.6.7 (2020-02-03)
- Fix compatibility with OTP 18 and 17
0-6-6-2020-02-03
0.6.6 (2020-02-03)
- Do not crash on empty tarballs
- Fix directory traversal vulnerability for symlinks in tarballs
0-6-5-2020-01-14
0.6.5 (2020-01-14)
- Transition away from
http_uri
when using newer OTP releases - Ensure
Role
is given as an atom inhex_api_organization_member:add/3
- Add
http_headers
to thehex_core:config()
type - Add default
http_headers
tohex_core:default_config/0
- Fix
hex_registry:decode_and_verify_signed/2
spec - Fix
hex_tarball:files/0
type
0-6-4-2019-12-27
0.6.4 (2019-12-27)
- Fix setting level and transfer options in organization api
0-6-3-2019-12-16
0.6.3 (2019-12-16)
- Add organization API
- Add level and transfer params to add owner API
- Add
hex_tarball:unpack_docs/2
- Add
hex_api_auth:test_key/3
0-6-2-2019-11-11
0.6.2 (2019-11-11)
- Gracefully handle HTTP errors
0-6-1-2019-07-30
0.6.1 (2019-07-30)
- Fix bug when publishing with configuration that does not have
repo_organization
key set
0-6-0-2019-07-27
0.6.0 (2019-07-27)
- Backwards-incompatible: Change successful return value of
hex_tarball:create/2
from{ok, {Tarball, Checksum}}
to{ok, Map}
. Currently,Map
hastarball
,inner_tarball
, andouter_tarball
keys - Rename existing tarball checksum to inner checksum and deprecate it
- Add tarball outer checksum
- Do not allow comments in
safe_erl_term
- Forward compatible tarball contents by not failing on unknown files
0-5-1-2019-07-30
0.5.1 (2019-07-30)
- Fix bug when publishing with configuration that does not have
repo_organization
key set
0-5-0-2019-02-26
0.5.0 (2019-02-26)
- Fetch package data from proper repository organization and don't verify origin if configured
- Backwards-incompatible: Make
hex_api
module private - Backwards-incompatible:
organization
config key has been replaced withapi_organization
andapi_repository
keys - Add
repo_organization
config key vendor.sh
: Add missinghex_pb_*.erl
filesvendor.sh
: Fix replacinghex_core
0-4-0-2018-12-30
0.4.0 (2018-12-30)
- Revert switch from proto2 to proto3
- Verify authenticity of signed payload
- Add
repo_verify_origin
config option
0-3-0-2018-12-14
0.3.0 (2018-12-14)
- Switch from proto2 to proto3
- Fix
hex_http:body
type - Fix
hex_http:request
spec
0-2-1-2018-12-13
0.2.1 (2018-12-13)
- Always return the whole response tuple from requests
- Guess rebar3 as build tool over rebar
- Return compressed tarball from hex_tarball:create_docs/1
- Add package identity to registry records
0-2-0-2018-09-01
0.2.0 (2018-09-01)
- Accept
{filename(), filename()}
in files list for tarballs - Support httpc profile through adapter configs
- Update generated protobuf files with OTP 21 compatibility
0-1-1-2018-08-11
0.1.1 (2018-08-11)
- Use
hex_core
project name in user agent string
0-1-0-2018-08-08
0.1.0 (2018-08-08)
- First release