From c70c9cd20e15f296b84bd58ceb396384d3f17b4a Mon Sep 17 00:00:00 2001 From: Colin Walters Date: Thu, 7 Sep 2023 09:40:38 -0400 Subject: [PATCH] Pin bootc to a git tag We had a problem in the previous release with having bootc float on a git commit because it ends up meaning "whatever happens to be on the developer's machine" when cutting a release, which is not OK from a reproducibility PoV. Dependabot I think can help us update this. --- Cargo.lock | 2 +- Cargo.toml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/Cargo.lock b/Cargo.lock index 5d24a98e71..6936f7f1d9 100644 --- a/Cargo.lock +++ b/Cargo.lock @@ -247,7 +247,7 @@ dependencies = [ [[package]] name = "bootc-lib" version = "0.1.0" -source = "git+https://github.com/containers/bootc.git?branch=main#4b9728ca0b472006fd8c132cddb27409a8fe06b0" +source = "git+https://github.com/containers/bootc.git?tag=v0.1#d7309b6523d64631726506dfcad52d50b2bb92e7" dependencies = [ "anyhow", "camino", diff --git a/Cargo.toml b/Cargo.toml index 081565e618..af20fa0dc4 100644 --- a/Cargo.toml +++ b/Cargo.toml @@ -45,7 +45,7 @@ rpm = "4" anyhow = "1.0.69" binread = "2.2.0" bitflags = "2.3" -bootc = { git = "https://github.com/containers/bootc.git", branch = "main", package = "bootc-lib"} +bootc = { git = "https://github.com/containers/bootc.git", tag = "v0.1", package = "bootc-lib"} camino = "1.1.6" cap-std-ext = "2.0" cap-std = { version = "1.0.3", features = ["fs_utf8"] }