What changed, and why it matters
This commit updates the project's justfile (a task runner configuration) so that commands use absolute paths relative to the justfile's directory. This is a developer-experience and robustness improvement, allowing recipes to be run from subdirectories. There is no security relevance in the changed code.
No security action needed. Treat as a normal build/maintenance improvement.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The diff modifies justfile recipes to prefix script paths with justfile_directory() and changes how the nightly-version file is read so it is resolved relative to the project root. These are path-resolution robustness changes only; no cryptographic, network, or input-handling code is touched.
Changed components
justfileInspect captured patch +10 / −9
diff --git a/justfile b/justfile
index 7c7386d2..5a4d0ed0 100644
--- a/justfile
+++ b/justfile
@@ -1,10 +1,11 @@
set positional-arguments
-NIGHTLY_VERSION := `cat nightly-version`
+# Once just v1.39.0 is widely deployed, simplify with the `read` function.
+NIGHTLY_VERSION := trim(shell('cat "$1"', justfile_directory() / "nightly-version"))
alias ulf := update-lock-files
-default:
+_default:
@just --list
# Run the given CI task using maintainer tools.
@@ -55,23 +56,23 @@ sane: lint
# Check for API changes.
check-api:
- contrib/check-for-api-changes.sh
+ {{justfile_directory()}}/contrib/check-for-api-changes.sh
# Query the current API.
@query-api crate command:
- contrib/api.sh $1 $2
+ {{justfile_directory()}}/contrib/api.sh $1 $2
# Update the recent and minimal lock files.
update-lock-files:
- contrib/update-lock-files.sh
+ {{justfile_directory()}}/contrib/update-lock-files.sh
-# Install githooks
+# Install githooks.
githooks-install:
- ./contrib/copy-githooks.sh
+ {{justfile_directory()}}/contrib/copy-githooks.sh
-# Remove githooks
+# Remove githooks.
githooks-remove:
- ./contrib/copy-githooks.sh -r
+ {{justfile_directory()}}/contrib/copy-githooks.sh -r
# Generate a dependency tree
gen-dep-tree:
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.