Gary Buhrmaster schreef op di 22-09-2026 om 03:26 [+0000]: > If you wanted to do all the work (with all > the various PRs required for each package) > I guess you could do it, but is there any > advantage to the organization to do so > globally that I am missing?
Jason Tibbits claims that well over 2000 packages still use the plain md5sum format, so doing this with PRs is out of the question. More importantly, as far as I know this needs adjustments to the lookaside server (living at src.fedoraproject.org/repo/pkgs) which would make PRs a non-starter too. > If your personal scripting does not handle > the md5 case then your personal scripting > should probably be updated to accommodate > the existing definition of the signatures (that > includes md5). The thing is I did change my scripting a few years ago (five? ten?) to switch to the tagged sha512sum format. I was a bit surprised to again stumble onto the plain md5sum format. (Apparently it's an update to the sourcefiles themselves that trigger the switch. So packages that are "frozen" upstream never switch.) I'd think that at some point in time Fedora should decide to switch these packages over. Is that point in time now? -- _______________________________________________ devel mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/[email protected] Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new
