Release: Release v1.9.3 · elixir-lang/elixir · GitHub

This release deprecates the use of URLs on mix archive.install, mix escript.install, and mix local.rebar. Support for passing URLs to said commands will be fully removed on Elixir v1.10, as they are unsafe. Thanks to Bram Verburg for the report and for providing a fix.

The alternative is straight-forward: you can simply download the artifact via the command line and then invoke the command with a file system path. For example, instead of:

$ mix archive.install https://example.org/installer.ez

You can execute on Unix (Linux, MacOS X):

$ wget https://example.org/installer.ez
$ mix archive.install installer.ez

or

$ curl -o installer.ez https://example.org/installer.ez
$ mix archive.install installer.ez

On Windows (Win7 or later):

> powershell -Command "Invoke-WebRequest https://example.org/installer.ez -OutFile installer.ez"
> mix archive.install installer.ez

or

> powershell -Command "(New-Object Net.WebClient).DownloadFile('https://example.org/installer.ez', 'installer.ez')"
> mix archive.install installer.ez

Note that, if you are a library author, consider providing installable escripts and archives through Hex, such as Phoenix:

$ mix archive.install hex phx_new

Installations through Hex are always safe and they come with version management and all other benefits from Hex too.

1. Enhancements

Mix

• [mix release] Add :tar option for releases to create a tarball

2. Bug fixes

Mix

• [mix release] Use default_release option when name is not given
• [mix release] Make release’s boot script contents deterministic

3. Deprecations

Mix

• [mix archive.install] Warn when installing from URI
• [mix escript.install] Warn when installing from URI
• [mix local.rebar] Warn when installing from URI

Checksums

• Precompiled.zip SHA1: 8bcf1cca9a946db02af570a78b007e9424cd933f
• Precompiled.zip SHA512: e5252721b5a08f48c5988027cb765f9317e7e271e52f3f4a3ebcb77581eb584c9aa0cdb216e12a3d626f725964fde2af84ce2241ac8b04d034dd461206c17f54
• Docs.zip SHA1: a7935d18ec5a04dd7a3e631483e31b6fbe6a8b1d
• Docs.zip SHA512: 59a53ed8a83920afaf087ecd6edb39a6401d9c917a113ce0ea7ad05612a33f35f188e3673e50c7b068b614c6121461095b32a4385d9a838e8b6461274a9ac6d6

Have fun!