moonrepo/moon v2.6.3

2.6.3

on GitHub

Release Notes

🛡️ Security

• Distrusted the 8 compromised eMudhra intermediate CA keys, and removed the "emSign ECC Root CA -
  G3" root from our bundled root certificates. Previously, anyone in a position to intercept a
  connection could use these keys to forge a certificate for any host, and proto would accept it on
  Linux, and on all platforms for plugins that make requests through Extism's built-in HTTP
  functions.
  • Hosts with certificates that chain to "emSign ECC Root CA - G3" will now fail TLS verification.
  • Requests to OCI registries on Linux still rely on the system certificate bundle, so update your
    ca-certificates package.

🐞 Fixes

• Fixed an issue where changing any setting in .moon/workspace.*, like codeowners, invalidated
  the cache of every task. Only .moon/extensions.* and .moon/toolchains.* are now implicit task
  inputs.
• Fixed an issue where a task that stopped before running its command, because another task failed
  or a requirement check failed, would be cached on the next run, reusing outputs from its previous
  inputs.
• Fixed an issue where deleted optional: true file outputs were not restored on a cache hit, when
  the hash matched the task's last run.
• Fixed an issue where outputs partially restored by a failed cache hydration could be reused as a
  cache hit on the next run.

Install moon_cli 2.6.3

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/moonrepo/moon/releases/download/v2.6.3/moon_cli-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://github.com/moonrepo/moon/releases/download/v2.6.3/moon_cli-installer.ps1 | iex"

Download moon_cli 2.6.3