Merged
Conversation
- Fix ref display: use # separator instead of @ for consistency with dependency syntax (owner/repo#ref) - Update CHANGELOG.md with all PRs merged since v0.8.0 - Bump version to 0.8.1 in pyproject.toml Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
danielmeppiel
force-pushed
the
chore/prepare-v0.8.1
branch
from
96b63db to
abd9f22
Compare
Contributor
There was a problem hiding this comment.
Pull request overview
Prepares the v0.8.1 release by bumping versions, rolling the changelog forward, and aligning apm install ref display with the #ref dependency syntax.
Changes:
- Bump project version to
0.8.1(pyproject.toml,uv.lock) and roll[Unreleased]into0.8.1inCHANGELOG.md. - Update
apm installoutput formatting to use#instead of@when showing resolved refs (and update unit tests accordingly).
Reviewed changes
Copilot reviewed 4 out of 5 changed files in this pull request and generated 4 comments.
Show a summary per file
| File | Description |
|---|---|
src/apm_cli/commands/install.py |
Switch install output ref suffix from @ to # for consistency with dependency syntax. |
tests/unit/test_install_output.py |
Update formatting expectations for cached ref rendering to match # separator. |
CHANGELOG.md |
Consolidate [Unreleased] into 0.8.1 release notes and adjust wording/examples. |
pyproject.toml |
Bump package version 0.8.0 → 0.8.1. |
uv.lock |
Update locked editable package version to 0.8.1. |
Comments suppressed due to low confidence (1)
src/apm_cli/commands/install.py:1769
ref_suffix = f"#{resolved}"will produce duplicated refs for virtual dependencies becausedisplay_nameisstr(dep_ref)(already includes#<ref>). Example:owner/repo/path#main#main (a1b2c3d4). Suggest stripping the#<ref>fromdisplay_namebefore appending the resolved ref, or only appending the commit portion when the manifest already includes a ref.
# Show resolved ref alongside package name for visibility
resolved = getattr(package_info, 'resolved_reference', None)
ref_suffix = f"#{resolved}" if resolved else ""
_rich_success(f"✓ {display_name}{ref_suffix}")
Comment on lines
6
to
+7
| name = "apm-cli" | ||
| version = "0.8.0" | ||
| version = "0.8.1" |
Comment on lines
1354
to
1367
| display_name = ( | ||
| str(dep_ref) if dep_ref.is_virtual else dep_ref.repo_url | ||
| ) | ||
| # Show resolved ref from lockfile for consistency with fresh installs | ||
| ref_str = "" | ||
| if _dep_locked_chk and _dep_locked_chk.resolved_commit and _dep_locked_chk.resolved_commit != "cached": | ||
| short_sha = _dep_locked_chk.resolved_commit[:8] | ||
| if dep_ref.reference: | ||
| ref_str = f" @ {dep_ref.reference} ({short_sha})" | ||
| ref_str = f"#{dep_ref.reference} ({short_sha})" | ||
| else: | ||
| ref_str = f" @ {short_sha}" | ||
| ref_str = f"#{short_sha}" | ||
| elif dep_ref.reference: | ||
| ref_str = f" @ {dep_ref.reference}" | ||
| ref_str = f"#{dep_ref.reference}" | ||
| _rich_info(f"✓ {display_name}{ref_str} (cached)") |
Comment on lines
1360
to
+1366
| short_sha = _dep_locked_chk.resolved_commit[:8] | ||
| if dep_ref.reference: | ||
| ref_str = f" @ {dep_ref.reference} ({short_sha})" | ||
| ref_str = f"#{dep_ref.reference} ({short_sha})" | ||
| else: | ||
| ref_str = f" @ {short_sha}" | ||
| ref_str = f"#{short_sha}" | ||
| elif dep_ref.reference: | ||
| ref_str = f" @ {dep_ref.reference}" | ||
| ref_str = f"#{dep_ref.reference}" |
| - File-level downloads from private repos now use OS credential helpers (macOS Keychain, `gh auth login`, Windows Credential Manager) — closes auth gap between folder and file dependencies (#332) | ||
| - Lockfile now preserves the host for GitHub Enterprise custom domains so subsequent `apm install` clones from the correct server (#338) | ||
| - Pinning hint moved from inline tip to `── Diagnostics ──` section with aggregated count (#347) | ||
| - Install ref display uses `#` separator instead of `@` for consistency with dependency syntax (#340) |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Prepares the v0.8.1 release with a consistency fix and changelog/version updates.
Changes
#separator (✓ owner/repo#main (a1b2c3d4)) instead of@, matching the#refdependency syntax introduced in feat: improve version pinning guidance and CLI visibility #340[0.8.1] - 2026-03-17covering PRs feat: audit hardening — unpack scanning, SARIF/JSON/Markdown output #330, fix: close auth asymmetry between folder and file downloads #332, fix: MCP registry validation resilience for transient network errors #337, fix: preserve GHE custom domain host in lockfile download refs #338, feat: improve version pinning guidance and CLI visibility #340, fix: move pinning hint to diagnostics section #3470.8.0→0.8.1Testing
42 affected tests pass (test_install_output + test_diagnostics).