Update atuin to 18.19.0 - #582
Conversation
…untime
The bot's bump builds on neither arch:
Could not find openssl via pkg-config: The pkg-config command could not
be found. ... openssl-sys = 0.9.117
Not a packaging error. Upstream added a native-TLS path — verified by diffing
the two lockfiles:
18.17.1 openssl-sys 0 native-tls 0
18.19.0 openssl-sys 1 native-tls 1 (+11 tls-feature refs)
`reqwest` 0.13.4 takes its default-tls feature, and `sqlx-core` /
`tokio-tungstenite` pull `native-tls` as well, so it is wired through the graph
rather than being one flag to flip. 18.17.1 resolved TLS in pure Rust and needed
no system library at all, which is why the package never declared one.
Follows the `codex` precedent exactly (rust + toolchain + pkgconf + openssl, no
env vars needed).
## The half that would have shipped broken
Adding the BUILD deps made it compile — and `missing runtime_deps` then failed:
executable dependency 'libcrypto.so.3' not in runtime deps, needed by usr/bin/atuin
executable dependency 'libssl.so.3' not in runtime deps, needed by usr/bin/atuin
native-tls links openssl DYNAMICALLY, so it is a runtime dependency too. Without
it the package builds clean, checks green on everything else, and the shipped
binary cannot start. The checker is the only thing between those two states.
Third bump today whose build INPUTS changed rather than just its version
(happy's happy-lib split, grafana dropping grafana-server, now this). A version
check cannot see any of them; only a build can.
Built and checked on both: 15/15 Pass.
|
Build fixed in Verified by diffing the two lockfiles:
Added The half that would have shipped brokenAdding the build deps made it compile — and then native-tls links openssl dynamically, so it's a runtime dep too. Without it the package builds clean, every other check goes green, and the shipped binary can't start. That checker is the only thing standing between those two outcomes — worth noting given how close "it compiles" came to being mistaken for "it works". Built and checked on both arches: 15/15 Pass. Aside: this is the third bump today whose build inputs changed rather than just its version — |
2 participants
Update atuin
18.17.1→18.19.0Source:
github:atuinsh/atuinRelease: https://github.com/atuinsh/atuin/releases/tag/v18.19.0
Changelog: atuinsh/atuin@v18.17.1...v18.19.0
Released: 3 days ago (2026-08-03)
Pkgscan: 2 below-threshold signals (all Info severity, risk score 0.2). Demoted in benign contexts (test fixtures, CI workflow setup); expand for details.
crates/atuin-lab-share/src/error.rspersistence/filesystem~/.zshrccrates/atuin-lab-share/src/lib.rspersistence/filesystem~/.zshrcComponents changed
CycloneDX component delta (declared materials — the package's own version, not a dependency-tree diff)
atuin18.17.118.19.0atuin-upstream18.17.118.19.0Changes
18.17.118.19.0851c3f4870e4bd18...fdb8268cdd5b1310...gs://minimal-staging-archives/atuinsh/atuin/v18.17.1.tar.gzgs://minimal-staging-archives/atuinsh/atuin/v18.19.0.tar.gzMIT(source: GitHub + tarball)Quality suggestions
testsblock. This package has no standalone tests, so the buildbot will only verify compilation — not functional correctness. Consider adding a minimal smoke test (e.g., a--versionor small round-trip invocation) as part of this PR so future bumps catch regressions. Seepackages/python/build.nclfor a simple example.Created by pkgmgr