FS#48210 - [psimedia] pulling source from non-static git HEAD (github master tarball)

Attached to Project: Community Packages
Opened by Levente Polyak (anthraxx) - Tuesday, 16 February 2016, 17:37 GMT
Last edited by Sergej Pupykin (sergej) - Tuesday, 16 February 2016, 19:20 GMT
Task Type Bug Report
Category Packages
Status Closed
Assigned To Sergej Pupykin (sergej)
Architecture All
Severity Medium
Priority Normal
Reported Version
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 0
Private No

Details

Hi, during some tests I observed that the current PKGBUILD is pulling directly the master tarball from github, this is equivalent to checking out the current git HEAD.
I assume this was just a small accident, however it would be great if this could be fixed and a updated version released.

Just in case, a small explanation:
Packages should always be re-buildable and reproducible, which requires PKGBUILD source option to point to the very same upstream version/source. If it is not possible to reference a release tarball (because there may not be any) then it should be pinned to a static git commit hash.

cheers,
Levente
This task depends upon

Closed by  Sergej Pupykin (sergej)
Tuesday, 16 February 2016, 19:20 GMT
Reason for closing:  Fixed

Loading...