Method moveAllowInsecureFromLockfile

internal/devbox/packages.go:683–724

moveAllowInsecureFromLockfile will modernize a Devbox project by moving the allow_insecure: boolean setting from the devbox.lock file to the corresponding package in devbox.json. NOTE: ideally, this function would be in devconfig, but it leads to an import cycle with devpkg, so leaving in this "top

(writer io.Writer, lockfile *lock.File, cfg *devconfig.Config)

// NOTE: ideally, this function would be in devconfig, but it leads to an import cycle with devpkg, so
// leaving in this "top-level" devbox package where we can import devconfig, devpkg and lock.
func (d *Devbox) moveAllowInsecureFromLockfile(writer io.Writer, lockfile *lock.File, cfg *devconfig.Config) error {
	if !lockfile.HasAllowInsecurePackages() {
		return nil
	}

	insecurePackages := []string{}
	for name, pkg := range lockfile.Packages {
		if pkg.AllowInsecure {
			insecurePackages = append(insecurePackages, name)
		}
		pkg.AllowInsecure = false
	}

	// Set the devbox.json packages to allow_insecure
	for _, versionedName := range insecurePackages {
		pkg := devpkg.PackageFromStringWithDefaults(versionedName, lockfile)
		storeName, err := pkg.StoreName()
		if err != nil {
			return fmt.Errorf("failed to get package's store name for package %q with error %w", versionedName, err)
		}
		if err := cfg.PackageMutator().SetAllowInsecure(writer, versionedName, []string{storeName}); err != nil {
			return fmt.Errorf("failed to set allow_insecure in devbox.json for package %q with error %w", versionedName, err)
		}
	}

	if err := d.saveCfg(); err != nil {
		return err
	}

	// Now, clear it from the lockfile
	if err := lockfile.Save(); err != nil {
		return err
	}

	ux.Finfof(
		writer,
		"Modernized the allow_insecure setting for package %q by moving it from devbox.lock to devbox.json. Please commit the changes.\n",
		strings.Join(insecurePackages, ", "),
	)

	return nil
}

func (d *Devbox) FixMissingStorePaths(ctx context.Context) error {
	packages := d.InstallablePackages()