v5.8.0

v5.8.0 (2026-06-03)

This release is published under the MIT License.

Documentation

• Document cache_mounts (#73, 7502477)

Features

• build: Opt-in BuildKit cache mounts for package-manager steps (#73, 7502477)

Testing

• Cover apt cache mounts and the opt-in default (#73, 7502477)

---

Detailed Changes: v5.7.0...v5.8.0

v5.7.0

v5.7.0 (2026-06-03)

This release is published under the MIT License.

Documentation

• Document pin_base_images (#72, a694825)

Features

• dockerfile: Optionally pin base images to their digest (#72, a694825)

Testing

• Cover base-image digest pinning and the resolver (#72, a694825)

---

Detailed Changes: v5.6.0...v5.7.0

v5.6.0

v5.6.0 (2026-06-03)

This release is published under the MIT License.

Documentation

• Document devcontainer.json generation (#71, 25697a2)

Features

• devcontainer: Generate .devcontainer/devcontainer.json (#71, 25697a2)

Testing

• Cover devcontainer.json generation (#71, 25697a2)

---

Detailed Changes: v5.5.0...v5.6.0

v5.5.0

v5.5.0 (2026-06-03)

This release is published under the MIT License.

Build System

• nix: Add flake for nix run and declarative installs (#68, 00ad4e9)

Documentation

• Document build secrets (#70, cb3b0b6)

• Fix audit findings across docs and README (#69, b5b5054)

Features

• build: Support build-time secrets via BuildKit secret mounts (#70, cb3b0b6)

Testing

• Cover build-secret generation and validation (#70, cb3b0b6)

---

Detailed Changes: v5.4.2...v5.5.0

v5.4.2

v5.4.2 (2026-06-03)

This release is published under the MIT License.

Bug Fixes

• dockerfile: Give single-token non-workspace copy a destination (#67, 930329f)

Documentation

• Document single-token copy destination (#67, 930329f)

Testing

• Cover single-token non-workspace copy into home (#67, 930329f)

---

Detailed Changes: v5.4.1...v5.4.2

v5.4.1

v5.4.1 (2026-06-03)

This release is published under the MIT License.

Bug Fixes

• packaging: Ship registry YAML files in the wheel (#66, 84782a2)

Testing

• Guard registry data files stay in package-data (#66, 84782a2)

---

Detailed Changes: v5.4.0...v5.4.1

v5.4.0

v5.4.0 (2026-06-03)

This release is published under the MIT License.

Features

• runner: Wrap custom commands with set -o pipefail (#65, 39d80b6)

Testing

• Assert piped custom command exit code propagates (#65, 39d80b6)

---

Detailed Changes: v5.3.1...v5.4.0

v5.3.1

v5.3.1 (2026-06-02)

This release is published under the MIT License.

Bug Fixes

• dockerfile: Resolve 'copy: workspace' keyword for renamed workspaces (#63, 3327012)

Testing

• Cover 'copy: workspace' keyword with a renamed workspace (#63, 3327012)

---

Detailed Changes: v5.3.0...v5.3.1

v5.3.0

v5.3.0 (2026-04-16)

This release is published under the MIT License.

Documentation

• Add managed-block markers around registry defaults table (#62, 321b0f6)

Features

• registry: Auto-generate registry defaults table from YAML (#62, 321b0f6)

Testing

• registry: Drift-check docs table against registry YAML (#62, 321b0f6)

---

Detailed Changes: v5.2.0...v5.3.0

v5.2.0

v5.2.0 (2026-04-16)

This release is published under the MIT License.

Documentation

• Document conda support and registry field declarations (#61, 40854a2)

Features

• registry: Add conda/mamba/micromamba with channel field support (#61, 40854a2)

• registry: Trigger bytecode compilation for any python-package installer (#61, 40854a2)

Testing

• registry: Cover conda/mamba/micromamba and field expansion (#61, 40854a2)

---

Detailed Changes: v5.1.0...v5.2.0