[arch-projects] [devtools] [GIT] The official devtools repository branch feature/disallow-pkgbuild-mismatch created. 20190912-2-ge9f1a1f

Levente Polyak anthraxx at archlinux.org
Sat Sep 21 19:22:41 UTC 2019

This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "The official devtools repository".

The branch, feature/disallow-pkgbuild-mismatch has been created
        at  e9f1a1fb027498c463ee87724f88086da045d818 (commit)

- Log -----------------------------------------------------------------
commit e9f1a1fb027498c463ee87724f88086da045d818
Author: Levente Polyak <anthraxx at archlinux.org>
Date:   Fri Sep 13 21:17:20 2019 +0200

    commitpkg: disallow if PKGBUILD hash mismatches package's enclosed hash
    Several cases showed that we release packages that were built with
    different PKGBUILDs than the one commited to the source tree. This is
    bad for obvious reasons plus sploils reproducible builds.
    We, under no circumstances, want to allow using commitpkg to publish and
    release a packages whose PKGBUILD doesn't match the one to be commited.

commit 3e2cae8ce9a43a6647eba4758024c722203fc301
Author: Levente Polyak <anthraxx at archlinux.org>
Date:   Fri Sep 13 21:15:23 2019 +0200

    commitpkg: fix wrongly ordered find_cached_package call
    The unknown packager check didn't worked so far as the wrongly ordered
    call to find_cached_package lead to the enclosing block never being


The official devtools repository

More information about the arch-projects mailing list