# 1.0.0-alpha.1 (2023-12-01)

### Bug Fixes

* **rules_download:** make intergrity optional ([41b6477f](https://git.gitlab.arm.com/bazel/rules_download/commit/41b6477fcc90445cac3a143f83d2c98189d2e01b))
* **rules_download:** remove need for `http_archive` ([f888e320](https://git.gitlab.arm.com/bazel/rules_download/commit/f888e32031d9c92ee42288d4a6e521c75666ad3f))
* use `rules_toolchain` pre-release registry ([62b85469](https://git.gitlab.arm.com/bazel/rules_download/commit/62b85469f37d098ef6012276e385d1ac49c795d1))

### Features

* remove `coreutils` ([f6814300](https://git.gitlab.arm.com/bazel/rules_download/commit/f6814300e8768dd261b78fe23921dfd566033732))
* rules for downloading ([c7f4e5a4](https://git.gitlab.arm.com/bazel/rules_download/commit/c7f4e5a42b0d499aa3f9a6d7a0365025eb0fe89b))
* **rules_download:** add `deb` extension ([0cd29d83](https://git.gitlab.arm.com/bazel/rules_download/commit/0cd29d839549d49f895e24c73b33196595b97bcd))
* **rules_download:** add `file` extension ([ee4956cc](https://git.gitlab.arm.com/bazel/rules_download/commit/ee4956ccd7badb52e15df2eafeea52da7d8329f0))
* **rules_download:** hermetic `commands` ([abc68643](https://git.gitlab.arm.com/bazel/rules_download/commit/abc68643a6522d3832d8afa8c5e9195604560e4b))

Install them directly from GitLab

This was incorrectly changed via a `@semantic-release/bzlmod` bug

# 1.0.0-alpha.1 (2023-12-01)

### Bug Fixes

* **rules_download:** make intergrity optional ([41b6477f](https://git.gitlab.arm.com/bazel/rules_download/commit/41b6477fcc90445cac3a143f83d2c98189d2e01b))
* **rules_download:** remove need for `http_archive` ([f888e320](https://git.gitlab.arm.com/bazel/rules_download/commit/f888e32031d9c92ee42288d4a6e521c75666ad3f))
* use `rules_toolchain` pre-release registry ([62b85469](https://git.gitlab.arm.com/bazel/rules_download/commit/62b85469f37d098ef6012276e385d1ac49c795d1))

### Features

* remove `coreutils` ([f6814300](https://git.gitlab.arm.com/bazel/rules_download/commit/f6814300e8768dd261b78fe23921dfd566033732))
* rules for downloading ([c7f4e5a4](https://git.gitlab.arm.com/bazel/rules_download/commit/c7f4e5a42b0d499aa3f9a6d7a0365025eb0fe89b))
* **rules_download:** add `deb` extension ([0cd29d83](https://git.gitlab.arm.com/bazel/rules_download/commit/0cd29d839549d49f895e24c73b33196595b97bcd))
* **rules_download:** add `file` extension ([ee4956cc](https://git.gitlab.arm.com/bazel/rules_download/commit/ee4956ccd7badb52e15df2eafeea52da7d8329f0))
* **rules_download:** hermetic `commands` ([abc68643](https://git.gitlab.arm.com/bazel/rules_download/commit/abc68643a6522d3832d8afa8c5e9195604560e4b))

Double down on all hermetic tooling should be provided in `tools`.

`rules_coreutils` should be the ruleset that provides hermetic coreutils,
not `rules_download`.

Users should only pay for what they use and if they never use core utilities,
we download it everytime.

Especially, turning off legacy runfiles.

Allows running commands using hermetically provided binaries:

```py
archive = use_repo_rule("@rules_download//download:defs.bzl", "download_archive")

archive(
    ...,
    commands = {
        "symlink": ["ln", "-s", "abc", "foo"],
    },
)
```

`use_repo_rule` is available in `6.4.0` and above.

It _hugely_ simplifies what we want to do.

That should be the new minimum version for our rulesets.

As of writing, `6.4.0` is not released. The release candidates do not have
the `use_repo_rule` added, yet. Most rules use `last_rc` Bazel version.

`visibility` is available in 6.0+.

Sebastian Birunt authored Oct 02, 2023 and Matthew Clarkson committed Nov 16, 2023

`deb` can use also `zstd` compression next to `XZ`.

This provides a convienient way to unpack the actual data contained
in a Debian package. This has a extensive use-case in grabbing pre-built
binaries for use in Debian based open-container images.

Lukasz Okraszewski authored Sep 26, 2023 and Matthew Clarkson committed Nov 16, 2023

This change makes it so that if the user does not know the
intergrity when adding a new download, the framework will
notify them with the correct intergrity on the first download.

This is a better DevEx as otherwise the user needs to manually
download and checksum the file first.

This approach will also fail more gracefully when using mirrors
that have dynamically generated files and cannot be easily pinned.

We get syntax highlighting and `pre-commit`.

`git` is line based, having each argument on a separate line allows
tracking changes with `git blame`