[pull] master from science-computing:master

.github/workflows/cargo.yml

@@ -14,7 +14,7 @@ jobs:
       - name: Install toolchain
         uses: dtolnay/rust-toolchain@v1
         with:
-          toolchain: 1.74.0 # MSRV
+          toolchain: 1.85.0 # MSRV
           components: rustfmt
 
       - name: Run cargo fmt
@@ -26,7 +26,7 @@ jobs:
     strategy:
       matrix:
         rust:
-          - 1.74.0 # MSRV
+          - 1.85.0 # MSRV
           - stable
           - beta
 
@@ -53,7 +53,7 @@ jobs:
     strategy:
       matrix:
         rust:
-          - 1.74.0 # MSRV
+          - 1.85.0 # MSRV
           - stable
           - beta
     steps:
@@ -81,12 +81,13 @@ jobs:
           - advisories
           - bans licenses sources
 
-    # Prevent sudden announcement of a new advisory from failing ci:
+    # Prevent sudden announcement of a new advisory from failing CI:
     continue-on-error: ${{ matrix.checks == 'advisories' }}
 
     steps:
       - uses: actions/checkout@v4
-      - uses: EmbarkStudios/cargo-deny-action@v1
+      # https://github.com/EmbarkStudios/cargo-deny-action:
+      - uses: EmbarkStudios/cargo-deny-action@v2
         with:
           command: check ${{ matrix.checks }}
 
@@ -99,9 +100,8 @@ jobs:
       fail-fast: false
       matrix:
         include:
-          - rust: 1.74.0 # MSRV
+          - rust: 1.85.0 # MSRV
             optional: false
-            extra_opts: "-A unknown-lints"
           - rust: beta
             optional: true
     steps:
@@ -114,7 +114,7 @@ jobs:
         with:
           shared-key: "ci"
       - name: cargo clippy
-        run: cargo clippy --all-targets -- -D warnings ${{ matrix.extra_opts }}
+        run: cargo clippy --all-targets -- -D warnings
 
   # This "accumulation" job is used as the required CI check for PRs.
   # We could require multiple jobs but the MSRV is subject to change and makes

CHANGELOG.md

@@ -8,9 +8,52 @@ is too old (i.e., must be updated).
 
 ## Upcoming
 
+## v0.5.0
+
 ### Major/Breaking changes
 
 * The configuration must be updated, see `CHANGELOG.toml` for details.
+  * The `compatibility` setting is now independent of the butido version and
+    will be used to output the required configuration changes
+* Butido now rejects unknown fields in its configuration source(s)
+  (`config.toml` files and environment variables) and package definitions
+  (`pkg.toml` files). This is done to detect typos/mistakes and requires
+  changes if such unknown/misspelled fields are present.
+* The "merging" of `patches` arrays in `pkg.toml` files has been fixed (the old
+  logic silently ignored a patch if a patch with the same name was declared in
+  an upper level/layer `pkg.toml` file)
+
+### Highlights
+
+* Lots of dependency updates (including security updates)
+  * All dependencies are up-to-date now (except for the `config` crate due to
+    breaking changes in `0.14.x` that currently prevent us from updating)
+  * Some deprecated/unmaintained crates have been replaced or dropped
+* CLI improvements and fixes (partly due to the clap update from version 3 to 4)
+  * Better / more consistent argument parsing
+  * Output tweaks/improvements
+  * Improved error messages (e.g., for dependency cycles and unsupported
+    version specifications)
+  * Support for short build image names
+  * More filtering options for DB commands
+  * Build dependencies are now marked with a star (`*`) in the `tree-of` output
+  * A new "release list" subcommand ("db releases" alias for convenience)
+* Fixed the default log level (info -> warn)
+* Source download improvements (warnings when downloading HTML files, no more
+  empty source files after failed downloads, a check for the HTTP status code
+  to avoid downloading "404 Not Found" HTML responses, and the User-Agent
+  header is now set)
+* The included example configuration and packages repo have been fixed (and new
+  CI tests should ensure that they remain valid)
+* It is now possible to depend on packages whose name starts with a number
+* The tracing has been improved (some spans and structured fields are now used)
+  and the `--tracing-chrome` flag has been added to generate `chrome://tracing`
+  compatible JSON files
+* Butido no longer crashes when `..` is used in paths of `patches` (`pkg.toml`)
+* Lots of cleanups, refactorings, new tests (+ CI improvements), and minor fixes
+* Various minor improvements (additional directory/filesystem checks, handling
+  of multiple release stores, etc.)
+* Minor documentation improvements (typos, fixes, additional comments, etc.)
 
 ## v0.4.0