This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "The official pacman repository". The branch, master has been updated via d9cf14ff1d69ac8834b84015c7971f55ce77645b (commit) via ee207d7c7b34ca54ad9bf65952eb1d567ef41ceb (commit) via 95e1a1ef8223dea2b8eb41e60428858b1c39f47f (commit) via 38b6de937cdbf581d13b404b50183d1b7e457413 (commit) via 8122fae51abf382838d9e2fd58d51cd42d475579 (commit) via b00269d9c86c7992951e6dcf2591f709ccc71dc1 (commit) via 879e4665c4ed76376c9e2d9f2c597bb9cdabb79a (commit) from 3e19cd366add23390ce4d0c9531b2c07e009a217 (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit d9cf14ff1d69ac8834b84015c7971f55ce77645b Author: Dave Reisner Date: Sun Sep 7 12:37:34 2014 -0400 updpkgsums: use a throwaway build dir This prevents updpkgsums from potentially dirtying an otherwise pristine directory (likely $PWD) when makepkg creates the srclinks. Signed-off-by: Allan McRae commit ee207d7c7b34ca54ad9bf65952eb1d567ef41ceb Author: lolilolicon Date: Mon Sep 8 00:57:31 2014 +0800 makepkg: do not eval dlcmd This eval enables the following in a PKGBUILD to "just work": source=('$pkgname-$pkgver.tar.gz'::'https://host/$pkgver.tar.gz') This has at least two problems: - It violated the principle of least surprise. - It could be a security issue since URLs are arbitrary input. Instead, expand the dlagent command line into an array, replace the %o, %u place holders, and run the resultant command line as is. Embedded spaces in the DLAGENTS entry can be escaped with a backslash. Fixes FS#41682 Signed-off-by: Allan McRae commit 95e1a1ef8223dea2b8eb41e60428858b1c39f47f Author: William Giokas <1007380@gmail.com> Date: Mon Apr 28 14:16:04 2014 -0500 makepkg: Allow using sources with :: in them Git has the ability to use helper applications for interfacing with hg, and from what we had before, the following url:: foo::git+hg::http://foo.bar/foobar would get converted to something along the lines of: filename: foo URL: http://foo.bar/foobar and the 'git+hg' part would essentially be ignored when it's getting set up in the 'get_protocol' and 'get_downloadclient' functions. With this patch it is possible to have a source link with '::' in it, however it is not possible to have a filename with '::', which is the current behavior. Signed-off-by: Allan McRae commit 38b6de937cdbf581d13b404b50183d1b7e457413 Author: Dave Reisner Date: Sat Jun 7 15:35:25 2014 -0400 paccache: read default cachedir from pacman.conf Implements FS#40738. commit 8122fae51abf382838d9e2fd58d51cd42d475579 Author: Maxim Andersson Date: Thu Aug 28 00:43:02 2014 +0200 paccache: add support for multiple cachedirs Signed-off-by: Maxim Andersson commit b00269d9c86c7992951e6dcf2591f709ccc71dc1 Author: Dave Reisner Date: Sun Aug 10 09:33:23 2014 -0400 PKGBUILD(5): arch-specific fields are always additional Change e10775340 should have included this. Signed-off-by: Allan McRae commit 879e4665c4ed76376c9e2d9f2c597bb9cdabb79a Author: Allan McRae Date: Sat Aug 9 16:36:42 2014 +1000 pacman-key: stricter parsing for -verify Prevents trust being spoofed by using TRUST_FULLY in the signatory's name or in an added notation. Fixes FS#41147. Signed-off-by: Allan McRae ----------------------------------------------------------------------- Summary of changes: contrib/paccache.sh.in | 81 ++++++++++++++++++++++++++++++++++-------------- contrib/updpkgsums.sh.in | 2 ++ doc/PKGBUILD.5.txt | 4 +-- scripts/makepkg.sh.in | 27 ++++++++-------- scripts/pacman-key.sh.in | 2 +- 5 files changed, 75 insertions(+), 41 deletions(-) hooks/post-receive -- The official pacman repository