fix: Audit 06/26

CHANGELOG.md

@@ -1,5 +1,19 @@
 # Changelog
 
+## Unreleased
+
+#### 🐞 Fixes
+
+- Fixed an issue where Git hooks would not work correctly in submodules.
+- Fixed an issue where `moon docker` commands may generate non-deterministic output, resulting in invalid Docker layer caching.
+
+#### 🧰 Toolchains
+
+- **Go**
+  - Fixed `go list -deps` relationship inference not detecting sibling workspace modules imported via subpackages (e.g. `example.com/org/a/pkg`).
+- **JavaScript**
+  - Added Deno v2.9 support.
+
 ## 2.3.4
 
 #### 🐞 Fixes

crates/app/Cargo.toml

@@ -63,6 +63,7 @@ clap_complete = { workspace = true }
 clap_complete_nushell = "4.6.0"
 convert_case = { workspace = true }
 diff = "0.1.13"
+indexmap = { workspace = true }
 iocraft = { workspace = true }
 miette = { workspace = true }
 proto_core = { workspace = true }

crates/app/src/commands/docker/mod.rs

@@ -10,8 +10,8 @@ pub use scaffold::*;
 pub use setup::*;
 
 use clap::Subcommand;
+use indexmap::IndexSet;
 use moon_common::{Id, cacheable};
-use rustc_hash::FxHashSet;
 
 #[derive(Clone, Debug, Subcommand)]
 pub enum DockerCommands {
@@ -38,10 +38,10 @@ pub enum DockerCommands {
 }
 
 cacheable!(
-    #[derive(Debug)]
+    #[derive(Debug, Default)]
     pub struct DockerManifest {
-        pub focused_projects: FxHashSet<Id>,
-        pub unfocused_projects: FxHashSet<Id>,
+        pub focused_projects: IndexSet<Id>,
+        pub unfocused_projects: IndexSet<Id>,
     }
 );
 

crates/app/src/commands/docker/scaffold.rs

@@ -302,11 +302,7 @@ async fn scaffold_sources(
         "Scaffolding sources skeleton, copying files from focused projects"
     );
 
-    let mut manifest = DockerManifest {
-        focused_projects: FxHashSet::default(),
-        unfocused_projects: FxHashSet::default(),
-    };
-
+    let mut manifest = DockerManifest::default();
     let mut visited = FxHashSet::default();
 
     // Copy all focused projects

crates/config-loader/src/toolchains_config_ext.rs

@@ -13,8 +13,8 @@ impl ToolchainsConfigExt {
         match id.as_str() {
             "bun" => Some(locate("bun_toolchain", "1.0.2")),
             "deno" => Some(locate("deno_toolchain", "1.1.0")),
-            "go" => Some(locate("go_toolchain", "1.4.2")),
-            "javascript" => Some(locate("javascript_toolchain", "1.1.0")),
+            "go" => Some(locate("go_toolchain", "1.4.3")),
+            "javascript" => Some(locate("javascript_toolchain", "1.2.0")),
             "node" => Some(locate("node_toolchain", "1.0.2")),
             "npm" => Some(locate("node_depman_toolchain", "1.0.3")),
             "pnpm" => Some(locate("node_depman_toolchain", "1.0.3")),