On 21/3/24 09:22, Ben Westover wrote:

Hello,

I package pacman for Debian, and I have been using the tarballs from sources.archlinux.org as my source, since they are PGP signed. 6.1.0 was released a couple weeks ago but still has not appeared at that location. Is this no longer the best place to get pacman source tarballs? Is there anywhere else to look for signed tarballs?

Hi, We are switching over to everything on our gitlab instance. You can get release tarballs there: https://gitlab.archlinux.org/pacman/pacman/-/releases Make sure to look at the releases/6.1.x branch for patches since release. I recommended using a patch collecting all changes since v6.1.0 was tagged. Allan