Ecosyste.ms: Timeline
Browse the timeline of events for every public repo on GitHub. Data updated hourly from GH Archive.
ben-alkov created a review comment on a pull request on containerbuildsystem/cachi2
If nothing else, based on `Mapping famous and public registries will prevent the use of private registries. To solve this, we need to allow users to change Cachi2's default configuration to enable ...
aloubyansky created a review comment on a pull request on containerbuildsystem/cachi2
> this design proposes that only resolved download_urls are used as input Thanks, I overlooked that. > If we consider Cachi2 as a standalone project, its goal is to prefetch the dependencies ...
brunoapimentel created a review comment on a pull request on containerbuildsystem/cachi2
I agree with what Erik is proposing here. We should take the GAV as input for maven artifacts, which enable us to generate proper SBOMs.
brunoapimentel created a review comment on a pull request on containerbuildsystem/cachi2
I think this is the core of the discussion that led us to the change. We, as Cachi2 maintainers, are not confident we should allow users to specify how the reported purls should be. And to clarify,...
aloubyansky created a review comment on a pull request on containerbuildsystem/cachi2
This is missing a potential artifact `classifier`. With a `classifier` it would be ``` https://{repository_url}/{as_dir(group_id)}/{artifactId}/{version}/{artifact_id}-{version}[{-classifier}].{e...
aloubyansky created a review comment on a pull request on containerbuildsystem/cachi2
One of the challenges with this approach is that in some edge cases you will not be able to accurately derive the `classifier` and `extension` qualifiers for Maven artifacts from a URL.
a-ovchinnikov created a comment on a pull request on containerbuildsystem/cachi2
I messed this one up and will close it now. https://github.com/containerbuildsystem/cachi2/pull/704 is essentially the same, but done properly.
a-ovchinnikov closed a pull request on containerbuildsystem/cachi2
Revert "Dockerfile: bump library/node from 22.9.0-bullseye to 23.0.0-bullseye"
Reverts containerbuildsystem/cachi2#695 A breaking change slipped in and now yarn complains about package checksums when it is not supposed to (see https://github.com/containerbuildsystem/cachi2...a-ovchinnikov created a branch on containerbuildsystem/cachi2
pull/703/head - Cachi2 is a CLI tool that pre-fetches your project's dependencies to aid in making your build process network-isolated.
a-ovchinnikov created a branch on containerbuildsystem/cachi2
pr703 - Cachi2 is a CLI tool that pre-fetches your project's dependencies to aid in making your build process network-isolated.
ben-alkov created a review on a pull request on containerbuildsystem/cachi2
Same as above :grin:
taylormadore created a review on a pull request on containerbuildsystem/cachi2
LGTM, just needs a signoff
a-ovchinnikov opened a pull request on containerbuildsystem/cachi2
Revert "Dockerfile: bump library/node from 22.9.0-bullseye to 23.0.0-bullseye"
Reverts containerbuildsystem/cachi2#695 A breaking change slipped in and now yarn complains about package checksums when it is not supposed to (see https://github.com/containerbuildsystem/cachi2...a-ovchinnikov created a branch on containerbuildsystem/cachi2
revert-695-dependabot/docker/library/node-23.0.0-bullseye - Cachi2 is a CLI tool that pre-fetches your project's dependencies to aid in making your build process network-isolated.