This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "The official pacman repository". The branch, master has been updated via e4f13e62cf74393e811dd247a28b887935ce6a56 (commit) via 62bfba53dbb33d12f3a4beaf9044a04b40c6b537 (commit) via 2ddbc6964b31f65678ed8e7c2cf1e80f0a7d4a0f (commit) via 4dae3fde17d663bf39a17978c2ee365696a54fb0 (commit) via 39319c1860d200a9b4a3cc2c6975e3cece502f2d (commit) via 64b7edd2fed122e63abd42dbe392a6f2896a0c16 (commit) via 064e7280cb2608747b2ce628f7e8faf7745f0707 (commit) via b4a197a6155d6cb4d02e712bf324beb0502b4d51 (commit) via 2b1b7b70753eb56bee08cd270efc7cfa342bc0ec (commit) via fa8419a0b569378674fb87e69f249d9cfe724596 (commit) from bcc9c417ae989ffda193083807142171c7a0190f (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit e4f13e62cf74393e811dd247a28b887935ce6a56 Author: Allan McRae <allan@archlinux.org> Date: Sun Oct 8 23:34:48 2017 +1000 libmakepkg: only output package file names when checking for build references The leading directory is distraction from identifying the files containing build references. Signed-off-by: Allan McRae <allan@archlinux.org> commit 62bfba53dbb33d12f3a4beaf9044a04b40c6b537 Author: Alastair Hughes <hobbitalastair@gmail.com> Date: Sat Aug 12 09:15:33 2017 +1200 Make the flags used for sed -i configurable Not all sed implementations on linux accept the --follow-symlinks argument, so let the user configure the arguments passed to sed if required. Signed-off-by: Alastair Hughes <hobbitalastair@gmail.com> [Allan: fixed configure summary output] Signed-off-by: Allan McRae <allan@archlinux.org> commit 2ddbc6964b31f65678ed8e7c2cf1e80f0a7d4a0f Author: Allan McRae <allan@archlinux.org> Date: Thu Sep 14 09:45:53 2017 +1000 libmakepkg: grammar fix Signed-off-by: Allan McRae <allan@archlinux.org> commit 4dae3fde17d663bf39a17978c2ee365696a54fb0 Author: Eli Schwartz <eschwartz@archlinux.org> Date: Tue Sep 12 23:59:24 2017 -0400 makepkg: respect $SOURCE_DATE_EPOCH to activate reproducible builds If SOURCE_DATE_EPOCH is set, `touch` all source files between the (optional) prepare() and build() functions to unify the modification times. This works around build systems and compilers that embed the file modification times into the file contents of release artifacts. Signed-off-by: Eli Schwartz <eschwartz@archlinux.org> Signed-off-by: Allan McRae <allan@archlinux.org> commit 39319c1860d200a9b4a3cc2c6975e3cece502f2d Author: Eli Schwartz <eschwartz@archlinux.org> Date: Tue Sep 12 23:57:32 2017 -0400 libmakepkg: check for invalid tags in git As per https://lists.archlinux.org/pipermail/arch-general/2017-July/043876.html git doesn't check that the tag name matches what an annotated tag object *thinks* it should be called. This is a bit of a theoretical attack and some would argue that we should always use commits since upstream can legitimately change a tag, but nevertheless this can result in a downgrade attack if the git download transport was manipulated or the upstream repository hacked. So, check the tag blob to make sure the tag actually matches the name we used for `git checkout`. This really should be fixed in git itself, rather than forcing all downstream users of git verify-tag to implement their own checks, but the git developers disagree, see the discussion surrounding https://public-inbox.org/git/xmqqk2hzldx8.fsf@gitster.mtv.corp.google.com/ Signed-off-by: Eli Schwartz <eschwartz@archlinux.org> Signed-off-by: Allan McRae <allan@archlinux.org> commit 64b7edd2fed122e63abd42dbe392a6f2896a0c16 Author: Michael Straube <straubem@gmx.de> Date: Sat Jul 15 14:56:30 2017 +0200 Fix brace coding style issues - Add missing braces to one-line if blocks - Move opening brace to line end Signed-off-by: Michael Straube <straubem@gmx.de> commit 064e7280cb2608747b2ce628f7e8faf7745f0707 Author: Michael Straube <straubem@gmx.de> Date: Thu Jul 13 21:30:59 2017 +0200 Fix coding style issue in pacman/util.c Add missing braces to some one-line if blocks. Signed-off-by: Michael Straube <straubem@gmx.de> Signed-off-by: Allan McRae <allan@archlinux.org> commit b4a197a6155d6cb4d02e712bf324beb0502b4d51 Author: Michael Straube <straubem@gmx.de> Date: Sun Jul 9 16:45:38 2017 +0200 test/pacman: fix spelling of distribution name and another typo Signed-off-by: Michael Straube <straubem@gmx.de> Signed-off-by: Allan McRae <allan@archlinux.org> commit 2b1b7b70753eb56bee08cd270efc7cfa342bc0ec Author: Andrew Gregory <andrew.gregory.8@gmail.com> Date: Sat Jul 8 20:33:18 2017 -0400 clarify broken dependency error messages Signed-off-by: Andrew Gregory <andrew.gregory.8@gmail.com> Signed-off-by: Allan McRae <allan@archlinux.org> commit fa8419a0b569378674fb87e69f249d9cfe724596 Author: Andrew Gregory <andrew.gregory.8@gmail.com> Date: Sat Jul 8 20:33:17 2017 -0400 provide command for downloading missing databases This is primarily to help users who are not aware that -F operations use a separate set of databases that need to be separately downloaded. Signed-off-by: Andrew Gregory <andrew.gregory.8@gmail.com> Signed-off-by: Allan McRae <allan@archlinux.org> ----------------------------------------------------------------------- Summary of changes: configure.ac | 16 +++++++++++----- doc/makepkg.8.txt | 16 ++++++++++++++++ lib/libalpm/delta.c | 3 +-- lib/libalpm/sync.c | 6 ++++-- scripts/Makefile.am | 3 ++- scripts/libmakepkg/lint_package.sh.in | 2 +- scripts/libmakepkg/lint_package/build_references.sh.in | 2 +- scripts/libmakepkg/source/git.sh.in | 11 ++++++++++- scripts/makepkg.sh.in | 17 ++++++++++++++--- src/pacman/callback.c | 5 +++-- src/pacman/sync.c | 11 ++++++----- src/pacman/util.c | 12 ++++++++---- test/pacman/ChangeLog | 2 +- test/pacman/README | 6 +++--- 14 files changed, 81 insertions(+), 31 deletions(-) hooks/post-receive -- The official pacman repository