David Runge pushed to branch main at Arch Linux / Packaging / Packages / 
python-lazr.delegates


Commits:
df18256b by loqs at 2024-04-03T22:19:59+00:00
Use non-predictable PyPI URLs for signature

https://archlinux.org/todo/fix-reproducibility-of-packages-broken-by-pypi-removing-signature-files/
https://bugs.launchpad.net/lazr.config/+bug/2028762

- - - - -


1 changed file:

- PKGBUILD


Changes:

=====================================
PKGBUILD
=====================================
@@ -19,7 +19,10 @@ makedepends=(
   python-wheel
 )
 checkdepends=(python-pytest)
-source=(https://files.pythonhosted.org/packages/source/${_name::1}/$_name/$_name-$pkgver.tar.gz{,.asc})
+# 
https://archlinux.org/todo/fix-reproducibility-of-packages-broken-by-pypi-removing-signature-files/
+# https://bugs.launchpad.net/lazr.config/+bug/2028762
+#   
https://files.pythonhosted.org/packages/source/${_name::1}/$_name/$_name-$pkgver.tar.gz
+source=(https://files.pythonhosted.org/packages/d4/4e/d9cd054b93aaf0585a21a9e201840db7c0eabc43fa326d7ce6986e5b691a/$_name-$pkgver.tar.gz{..asc})
 
sha512sums=('e8e081d71afed32aa8b8e898268d1e4a33be6bbdcad7778dfb000b9ad600ae9922032b6d13d066c55106ea403a5a25340fb9f8e1fe3ee246732247cbb3fd108b'
             'SKIP')
 
b2sums=('b8c9a1f0b473162560a21fc4ea7553786cb38f94ed7da63ccd740f5cd49b566ad5a0ba86270d062aed08dfe67dfc33708252a7761783bdeadb99a6ca1452a0c0'



View it on GitLab: 
https://gitlab.archlinux.org/archlinux/packaging/packages/python-lazr.delegates/-/commit/df18256b5f643ce42fd8b8661bde025b00368115

-- 
View it on GitLab: 
https://gitlab.archlinux.org/archlinux/packaging/packages/python-lazr.delegates/-/commit/df18256b5f643ce42fd8b8661bde025b00368115
You're receiving this email because of your account on gitlab.archlinux.org.


Reply via email to