Repository navigation
Release 0.14.0: an SBOM for hardware you did not build - #38
Merged
Merged
Conversation
Zenofex
added a commit
that referenced
this pull request
Oct 7, 2026
#37 shipped a race, and it blocked #38. Every test in `submit_cli.rs` wrote the same `tmpdir()/boot.log`. Rust runs tests in parallel threads, and `fs::write` truncates before it writes, so one test's spawned process could read the file in the instant another had emptied it. The binary then did exactly what it should: ``` Error: /tmp/submit_cli/boot.log is empty; nothing to submit ``` It passed 7/7 locally and passed on main's own CI run, then failed `test (default-features)` on the next branch. That is the shape of flake that survives: red often enough to erode trust in the suite, green often enough that nobody can reproduce it. Each test now writes its own `<tag>.log`. Verified with 15 consecutive runs of the file — 0 failures — and seven distinct files on disk. 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>
`bootintel submit` (#37) is merged but sits under [Unreleased], and the workspace is still 0.13.0, which is also the latest published release. So nobody can install the command: a `brew install` or a release download today gets 0.13.0 without it. A merged feature no user can run is not shipped. The repo's own policy makes this MINOR: "new detector; new subcommand; new flag; new output format". Same four files the 0.13.0 release touched: the workspace version, the detectors pin in crates/cli, Cargo.lock, and the CHANGELOG heading. Nothing here publishes anything by itself -- cli-release.yml is workflow_dispatch only, with an explicit version input and a dry_run option -- so the release remains a deliberate manual act after this lands. Verified the built binary reports 0.14.0 and still carries `submit`. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
Zenofex
force-pushed
the
release-0.14.0
branch
from
October 7, 2026 10:28
19bea50 to
b350612
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
bootintel submit(#37) is merged but sits under[Unreleased], and the workspace is still0.13.0— which is also the latest published release. So nobody can install the command: abrew installor a release download today gets 0.13.0 without it. A merged feature no user can run is not shipped.The repo's own policy makes this MINOR: "new detector; new subcommand; new flag; new output format".
What this changes
The same four files the 0.13.0 release touched:
0.13.0→0.14.0bootintel-detectorspin incrates/cli/Cargo.tomlCargo.lockCHANGELOG.md—[Unreleased]closed out into a dated headingThis does not publish anything
cli-release.ymlisworkflow_dispatchonly, with an explicitversioninput and adry_runoption. Merging this prepares the release; cutting it stays a deliberate manual dispatch afterwards.Verified the built binary reports
bootintel 0.14.0and still carriessubmit.🤖 Generated with Claude Code