Skip to content

Releases: hexpm/hex

v0.11.0

16 Jan 14:15
Compare
Choose a tag to compare

Enhancements

  • Append the OTP version to the user_agent function
  • Improve output of http request timeout errors
  • Warn if :manager or :compile is set on dependencies when publishing
  • Add --pre flag to hex.outdated
  • Use erlang binary term encoding for API instead of elixir encoding
  • Pull package name from correct source when publish docs
  • Pass canonical url to ex_doc task
  • Change hexdocs links to use https
  • Add hex.outdated APP to list all requirements on given dependency
  • Do not allow pre-releases for dependencies unless the requirement uses a pre-release version
  • Optimize version cache memory usage

Bug fixes

  • Fix incorrect build version check for dev versions of Elixir
  • Fix loop when backtracking in resolver
  • Fix timeout errors on slow systems

v0.10.4

16 Jan 14:27
Compare
Choose a tag to compare

Enhancements

  • Make the experimental resolver the default

Bug fixes

  • Ensure registry can be opened/closed multiple times
  • Ensure hex.search task handles empty results
  • Fix experimental resolvers only backtracking on parents that had requirements that failed
  • Fix merging of overlapping parent and package versions in backtrack messages

v0.10.3

16 Jan 14:27
Compare
Choose a tag to compare

Bug fixes

  • Fix bug when umbrella child has dependency with :only

v0.10.2

16 Jan 14:27
Compare
Choose a tag to compare

Enhancements

  • General optimizations in dependency resolver
  • Add experimental faster backtracker that does more aggressive backtracking, set environment variable HEX_EXPERIMENTAL_RESOLVER=1 to use it
  • Merge backtrack messages that have similar parents
  • Merge multiple versions into version ranges when possible for more succinct backtrack messages

Bug fixes

  • Reduce memory usage when resolver produces many backtrack messages

v0.10.1

16 Jan 14:27
Compare
Choose a tag to compare

Bug fixes

  • Fix a crash when a dependency is missing its version requirement

v0.10.0

16 Jan 14:28
Compare
Choose a tag to compare

Enhancements

  • Add support for authentication when using HTTP proxies
  • Add more build information to hex.info task to ease debugging
  • Greatly improve backtracking error messages
  • Prevent packages for being published without a description
  • Improve error printing when S3 return errors
  • Improve output from hex.outdated task
  • Warn if a package dependency is missing its requirement
  • Improve error message from hex.docs task when ex_doc dependency is missing
  • Remove useless output when fetching dependencies
  • Improve package output in hex.info task

Bug fixes

  • Fix a rare bug that could cause the resolver to go into an infinite loop
  • UTF8 encode package metadata
  • Only list missing files if :files is set
  • Fix bug when umbrella child has dependency with :only

v0.9.0

16 Jan 14:28
Compare
Choose a tag to compare

Enhancements

  • Pass build tool information to Mix (supported in Elixir 1.1.0)
  • Make Hex a proper OTP application
  • Update CA store
  • Warn if files are missing when building package
  • Improve error message when resolution fails because of a locked dependency
  • Add hex.registry task for loading and dumping registry
  • Add HEX_OFFLINE for running in offline mode which skips fetching registry and packages
  • Add hex.build task for building package without publishing
  • Reduce noise when users gets lots of resolution errors and generally improve their output
  • Add Server Name Indication support for HTTPS requests
  • Add HEX_UNSAFE_HTTPS for disabling certificate checking
  • Rename :contributors metadata to :maintainers to better reflect purpose of field

Bug fixes

  • HEX_API no longer automatically adds api/ to URL
  • Fix crash when user doesn't explicitly override Hex package when needed
  • Fix bug where metadata in package tarball was not properly UTF8 encoded
  • Fix error message when registry file is missing
  • Support hex.outdated task for umbrella projects
  • Do not raise on bad data in a users old lock

v0.8.3

16 Jan 14:28
Compare
Choose a tag to compare

Security fixes

  • Fix a bug that would trust any certificate in the certificate chain signed by a trusted CA, this could allow the certificate, that is not a CA, to issue and sign new certificates for any host

v0.8.2

16 Jan 14:28
Compare
Choose a tag to compare

Enhancements

  • Sort dependency resolver results

Bug fixes

  • Fix build_tools metadata being sent incorrectly

v0.8.1

16 Jan 14:28
Compare
Choose a tag to compare

Enhancements

  • Warn if registry file is missing when loading deps

Bug fixes

  • Consider new optional requirements for already activated dependency
  • Add multiple build tools to metadata