1 release 5 tags

RSS feed

• v1.1.0 ee2073d507

  Compare

  v1.1.0 Stable

  stephen released this 2026-05-27 21:42:06 +00:00 | 14 commits to main since this release

  Signed by stephen

  GPG key ID: 67F885778E01BF16

  Behavior change for @v1 consumers without an explicit version: pin: the default sccache version is now v0.15.0 (was v0.8.2). The S3 cache layout is shared across recent minor versions; jobs will re-populate on the first build. Pin version: v0.8.2 if you need to stay put.

  Added

  • SHA-256 verification of the downloaded tarball against the upstream .sha256 sidecar Mozilla publishes with each release. Controlled by the new verify-checksum input (default true). Fails closed on mismatch or missing sidecar.
  • outputs.version (resolved tag, v-prefixed) and outputs.install-path (absolute path) so downstream steps can assert what was installed.
  • macOS support: x86_64-apple-darwin and aarch64-apple-darwin selected automatically.
  • curl --retry 5 --retry-delay 2 --retry-connrefused on tarball and sidecar fetches.
  • trap-based tempdir cleanup so failed downloads don't leak.
  • Forgejo self-test workflow at .forgejo/workflows/test.yml.
  • SECURITY.md, CONTRIBUTING.md, CHANGELOG.md.

  Changed

  • Default version bumped from v0.8.2 to v0.15.0.
  • Version input normalized: 0.15.0 and v0.15.0 are equivalent.
  • $GITHUB_PATH always appended after install; bash hash table reset so the in-step smoke test can't be tripped by a stale lookup.
  • Platform-detection error now lists supported platforms.

  Fixed

  • Bash command-lookup cache could cause the in-step PATH fixup to be skipped when sccache was looked up earlier in the same shell.
  • Source binary's mode wasn't always preserved on install.

  See CHANGELOG.md for full history.

  Downloads

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    0 downloads