[pacman-dev] [GIT] The official pacman repository branch, master, updated. v6.0.0alpha1-72-g0f75ab32

[Allan McRae]

This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "The official pacman repository".

The branch, master has been updated
       via  0f75ab3224141a5e8a4fe72b48b4639c83c6316b (commit)
       via  7587153a447bd537c8f138be9ca0a3886a5f1e57 (commit)
      from  17d3da477770313a16a4f29ecae8476613ad3277 (commit)

Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.

- Log -----------------------------------------------------------------
commit 0f75ab3224141a5e8a4fe72b48b4639c83c6316b
Author: Morten Linderud <morten at linderud.pw>
Date:   Mon Feb 22 00:09:07 2021 +0100

    pacman-key: --refresh-keys queries WKD before keyserver
    
    With the recent outages of the keyservers there is a possibility of
    `--refresh-keys` failing to fetch new keys. A lot of current key
    distribution is done over WKD these days, and `pacman-key` has the
    ability to use it for `--recv-key`.
    
    There was a hope `gpg` would end up supporting WKD for the refresh
    functionality, but this seems to be limited to expired keys fetched
    through WKD. Since this functionality isn't yet available it makes sense
    to stuff it into `pacman-key`.
    
    The current implementation looks over all available keyids in the
    keyring, attempts to fetch over WKD and then fall backs to keyservers if
    no email has a valid WKD available. The downside of this approach is
    that it takes a bit longer to refresh the keys, but it should be more
    robust as the distribution should be providing their own WKDs.
    
    Co-authored-by: Jonas Witschel <diabonas at archlinux.org>
    Signed-off-by: Morten Linderud <morten at linderud.pw>
    Signed-off-by: Allan McRae <allan at archlinux.org>

commit 7587153a447bd537c8f138be9ca0a3886a5f1e57
Author: Morten Linderud <morten at linderud.pw>
Date:   Sun Feb 21 22:36:31 2021 +0100

    libmakepkg: Support zstd decompression for sources
    
    This enables us to extract files in the source array and ensures that we
    can decompress files if the uncompressed signature is served.
    
    Signed-off-by: Morten Linderud <morten at linderud.pw>
    Signed-off-by: Allan McRae <allan at archlinux.org>

-----------------------------------------------------------------------

Summary of changes:
 .../libmakepkg/integrity/verify_signature.sh.in    |  3 +-
 scripts/libmakepkg/source/file.sh.in               |  5 ++++
 scripts/pacman-key.sh.in                           | 33 +++++++++++++++++++---
 3 files changed, 36 insertions(+), 5 deletions(-)


hooks/post-receive
-- 
The official pacman repository