v0.21.3

Enhancements

• Add config no_short_urls and env var HEX_NO_SHORT_URLS to disable short URL generation
• Mention mix hex.sponsor when fetching packages that accept sponsorship
• Add --key option to mix hex.repo show NAME to print repository key
• Improve output when update check fails
• Print hint if version resolution is slow

Bug fixes

• Improve version backtracking to fix slow version resolutions and downgrading of dependencies

v0.21.2

Enhancements

• Adds support for mix hex.package fetch PACKAGE (without version)

Bug fixes

• Gracefully handle missing hex metadata in sponsor task
• Fix building hex registry
• Update ssl opts for host validation on redirect
• Store correct password after confirmation failure

v0.21.1

Enhancements

• Warn when using ssl-10.2
• Disable API write operations when using ssl-10.2

v0.21.0

Enhancements

• Add --epub option to mix hex.docs offline
• Add --replace option to mix hex.publish
• Add locked version to mix hex.info <package>
• Clarify publish message around ownership
• Remove reliance on colors for hex.outdated
• Follow XDG Base Directory Specification
• Add link to diffs page in footer of mix hex.outdated
• Introduce latest branch to install Hex using mix archive.install git ...
• Add --repo flag to mix hex.package task
• Make mix hex.package diff more CLI-friendly
• Customize hostname check to allow also wildcard certificates
• Use API for dependency config in mix hex.info
• Do not pass --canonical to docs task
• Always add *.DS_Store to :exclude_patterns
• Add note about updatable packages to mix hex.outdated task
• Use tarball outer checksum to check cache freshness
• Add --within-requirements flag to mix hex.outdated
• Add --fetch-public-key FINGERPRINT to mix hex.repo add
• Return non-zero exit when package or release are not found in mix hex.info
• Add no_proxy configuration
• Add mix hex.package diff APP VERSION
• Add mix hex.sponsor for listing all dependencies ask for sponsors or support
• Add mix hex.registry build for building registries locally

Bug fixes

• Fix order of organizations displayed on mix hex.publish
• Fix stacktrace warning
• Hide mix hex.install private task
• Fix mix hex.repo remove command doc
• Fix backtracking on single parent
• Do not unpack the tarball on mix hex.package fetch unless --unpack is passed
• Re-fetch stale cached package if registry checksum changed
• Fix compatibility with OTP 24

v0.20.6

Bug fixes

• Fix compatibility with OTP 24

v0.20.5

Enhancements

• Add timestamps to entries in registry cache for easier debugging
• Bump registry cache version to invalidate old caches
• Warn if fetching registry without outer checksum

Bug fixes

• Do not require that the registry supports outer checksums
• Missing outer checksum is not a mismatch, this will fix "out of date" errors when the manifest is newer than the lockfile

v0.20.4

Bug fixes

• Fix tarball file extraction through symlinks

v0.20.3

Enhancements

• Fetch the latest non-prerelease version of a package in mix hex.docs

Bug fixes

• Correctly handle old manifest files without crashing

v0.20.2

Enhancements

• Add --output option to mix hex.package fetch task
• Add cacerts_path configuration for custom CA certificate files
• Improve output in mix hex.publish to make it more clear to what repository you are publishing
• Explain red colors in hex.outdated

Bug fixes

• Fix HTTP timeout config
• Do not allow creating empty packages

Security fixes

• Fix for directory traversal vulnerability for symlinks in tarballs
• Update package checksum to include the entire tarball instead of specific files inside it

v0.20.1

Bug fixes

• Do not print transfer message when not transferring ownership