FS#67189 : [libvorbis] use signed git tag

Please read this before reporting a bug:
https://wiki.archlinux.org/title/Bug_reporting_guidelines

Do NOT report bugs when a package is just outdated, or it is in the AUR. Use the 'flag out of date' link on the package page, or the Mailing List.

REPEAT: Do NOT report bugs for outdated packages!

FS#67189 - [libvorbis] use signed git tag

Attached to Project: Arch Linux
Opened by T.J. Townsend (blakkheim) - Saturday, 04 July 2020, 17:24 GMT
Last edited by Maxime Gauduin (Alucryd) - Sunday, 05 July 2020, 13:50 GMT

Task Type	Bug Report
Category	Packages: Extra
Status	Closed
Assigned To	Maxime Gauduin (Alucryd)
Architecture	All
Severity	Low
Priority	Normal
Reported Version
Due in Version	Undecided
Due Date	Undecided
Percent Complete
Votes	0
Private	No

Details

Description:
Previous releases of libvorbis didn't have signed git tags. The current one does. Attached patch adds a "validpgpkeys" line to verify it.

https://github.com/xiph/vorbis/releases

Additional info:
Signed tarballs are also available:
https://ftp.osuosl.org/pub/xiph/releases/vorbis/