Skip to content

Releases: crev-dev/cargo-crev

v0.11.0.p1

02 Nov 22:03
@dpc dpc
Compare
Choose a tag to compare

This is a release exactly like v0.11.0 but with CI fixed to produce windows binaries.

v0.11.0

02 Nov 21:04
@dpc dpc
Compare
Choose a tag to compare

Changed

  • Change the proof format to simplify it and allow 3rd party "kinds" of them. The main goal is to
    support git-crev project: https://github.com/crev-dev/git-crev
  • Tune tokei line counts to exclude tests and examples

Added

  • Ability report the crate as unmaintained and/or list alternatives to it
  • --target to crate verify to ignore crates not compiled on the given (default: current) target
  • --for-id for cargo crev repo fetch trusted
  • Autocompletion generation with config completions
  • crate info subcommand to get some detailed info for a single dependency

Fixed

  • Stale old-syntax commands in documentation
  • Minor help messages

v0.10.1

14 Oct 05:57
@dpc dpc
Compare
Choose a tag to compare
Prepare v0.10.1 release

v0.10.0

08 Oct 03:39
@dpc dpc
Compare
Choose a tag to compare

Changed

  • BREAKING: cargo crev <verb> <noun> was change to cargo crev <noun> <verb>
  • Introduces one letter aliases for most (all?) commands
  • Commands quering proofs will now print them as a multi-object yaml document for easier parsing
  • Shortened =1.2.3 in latest_t to just =

Added

  • id untrust and crate unreview to overwrite/clean errnous review/trust proofs
  • crate mvp to discovering best reviewers
  • crate search for looking up best reviewed dependency candidates
  • crate verify --recursive
  • CREV_PASSPHRASE_CMD for users of pass and similiar
  • Multiple flags and arguments to narrow down crate verify scope
  • Handling of --level <level> in many commands
  • "Tips and tricks" in user documentation

v0.9.0

28 Aug 04:18
@dpc dpc
Compare
Choose a tag to compare
Small improvments and moving to github organization

cargo-crev-v0.8.0

12 Jul 07:23
@dpc dpc
Compare
Choose a tag to compare

Notably, this release introduces an User Guide and other user documentation. Also, static binaries compiled by the CI pipeline are now available. We're hopping these two items will help new users who would like to try cargo-crev.

For existing users, differential reviews should provide an efficient path to keep incrementally reviewing already trusted dependencies, as they are being updated.

Changed

  • verify deps was renamed to just verify
  • Closing draft editor without saving at least once will cancel proof creation.
  • advisories system was revamped

Added

  • Statically compiled release binaries
  • User Documentation, including Getting Started Guide
  • query dir command
  • Differential reviews with diff and review --diff commands
  • New options, particularly for verify