Skip to content

Re-vendor the Greptile CLI at 3.5.2 - #7

Merged
haotianx merged 1 commit into
mainfrom
haotian/vendor-cli-3-5-2
Sep 4, 2026
Merged

Re-vendor the Greptile CLI at 3.5.2#7
haotianx merged 1 commit into
mainfrom
haotian/vendor-cli-3-5-2

Conversation

@haotianx

@haotianx haotianx commented Sep 4, 2026

Copy link
Copy Markdown
Contributor

Brings the plugin's bundled CLI from 3.5.0 to 3.5.2 and bumps the plugin to 1.2.3.

Why 3.5.2 and not 3.5.1

3.5.1 never reached npm. Its publish landed during an npm registry incident on 2026-09-03: the version document and the latest dist-tag were written, but the packument was never rebuilt and the tarball was never stored, so npm install greptile@3.5.1 failed with ETARGET for a full day. Homebrew and the GitHub release were unaffected, since neither goes through npm. 3.5.2 republishes the same content and npm has since healed both versions.

Re-vendoring at 3.5.1 was therefore impossible while it was broken — CLI Check resolves the bundle with npm pack, which had nothing to fetch.

One artifact, four channels

The vendored greptile.mjs is dist/greptile.js from npm pack greptile@3.5.2, taken from the registry rather than a local build, per RELEASING.md step 6:

f5fac84b4c5d8a68d6419f543008d076f7e3b5066a424cb0c1aa77c458080275

That digest is identical across all four channels — the npm tarball, the greptileai/cli v3.5.2 release asset, the sha256 the Homebrew formula pins, and this file. Verified by fetching each independently.

Checks

  • node plugins/greptile/scripts/greptile.mjs --version3.5.2, run from scripts/, which has no sibling package.json
  • CLI Check compares the vendored file byte-for-byte against the published tarball
  • MCP Check validates the manifest

🤖 Generated with Claude Code

https://claude.ai/code/session_019FX8tWGjHhJTXBExyqWYnj

3.5.1 never reached npm: its publish landed during an npm registry
incident on 2026-09-03 and the tarball was never stored, so
`npm install greptile@3.5.1` failed while Homebrew and the GitHub
release served it fine. 3.5.2 republishes those bytes.

The vendored bundle is `npm pack greptile@3.5.2`'s `dist/greptile.js`,
sha256 f5fac84b4c5d8a68d6419f543008d076f7e3b5066a424cb0c1aa77c458080275
— the same digest the GitHub release asset carries and the Homebrew
formula pins, so all four channels agree on one artifact again.
@greptile-apps-staging

Copy link
Copy Markdown

RetriggerView in GreptileConfidence Score: 5/5

The reviewable changes appear safe to merge, with no actionable defects identified.

Summary

  • Bumps the plugin version from 1.2.2 to 1.2.3.
  • Updates the recorded bundled CLI version from 3.5.0 to 3.5.2.
  • Re-vendors the corresponding CLI artifact.

@haotianx
haotianx merged commit 6b725af into main Sep 4, 2026
3 checks passed
@haotianx
haotianx deleted the haotian/vendor-cli-3-5-2 branch September 4, 2026 23:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant