Add optional locked plugin download URLs

This commit is contained in:
pleb
2026-07-10 09:17:02 -07:00
parent 26def9609d
commit 538feae811
7 changed files with 121 additions and 10 deletions
+7
View File
@@ -162,6 +162,7 @@ id = "songcore"
repo = "Kylemc1413/SongCore"
tag = "v4.3.0"
asset = "SongCore-4.3.0.zip"
download_url = "https://github.com/Kylemc1413/SongCore/releases/download/v4.3.0/SongCore-4.3.0.zip"
sha256 = "..."
reason = "Pinned until dependent mods support newer SongCore"
@@ -170,9 +171,15 @@ id = "some-ui-mod"
repo = "example/some-ui-mod"
tag = "v1.2.1"
asset = "SomeUIMod.dll"
download_url = "https://github.com/example/some-ui-mod/releases/download/v1.2.1/SomeUIMod.dll"
sha256 = "..."
```
`download_url` is the optional concrete URL for the locked artifact. It should
point at the exact zip or DLL when the artifact is publicly downloadable, and
should be omitted for local builds, private/commercial packages, and packages
that must be reconstructed from source or a recipe.
The lockfile should be the source of truth for reproducible installs. `check` may propose newer versions, but `apply` should install what is present in a plan generated from the lockfile or from an explicit update command.
## Install State