wget-1.21.4 released [stable]

2023-05-10 Thread Darshit Shah
This is to announce wget-1.21.4, a stable release.

This is a slow release, with not many exciting things to talk about. The main 
reason is to allow HSTS tests to function again on i686 systems. 

There have been 29 commits by 3 people in the 62 weeks since 1.21.3.

See the NEWS below for a brief summary.

Thanks to everyone who has contributed!
The following people contributed changes to this release:

  Darshit Shah (6)
  Tim Rühsen (22)
  jinfuchiang (1)

Darshit
 [on behalf of the wget maintainers]
==

Here is the GNU wget home page:
http://gnu.org/s/wget/

For a summary of changes and contributors, see:
  http://git.sv.gnu.org/gitweb/?p=wget.git;a=shortlog;h=v1.21.4
or run this command from a git-cloned wget directory:
  git shortlog v1.21.3..v1.21.4

Here are the compressed sources:
  https://ftpmirror.gnu.org/wget/wget-1.21.4.tar.gz   (4.9MB)
  https://ftpmirror.gnu.org/wget/wget-1.21.4.tar.lz   (2.4MB)

Here are the GPG detached signatures:
  https://ftpmirror.gnu.org/wget/wget-1.21.4.tar.gz.sig
  https://ftpmirror.gnu.org/wget/wget-1.21.4.tar.lz.sig

Use a mirror for higher download bandwidth:
  https://www.gnu.org/order/ftp.html

Here are the SHA1 and SHA256 checksums:

  c6dc52cbda882c14fa5c3401d039901a0ba823fc  wget-1.21.4.tar.gz
  gVQvXO+4+qzDm7vGyC3tgOPkqIUFrnLqUd8nUlvN4Ew=  wget-1.21.4.tar.gz
  42384273c1937458c9db3766a5509afa636a2f00  wget-1.21.4.tar.lz
  NoNhml9Q7cvMsXIKeQBvo3v5uaJVqMW0gEi8PHqHS9k=  wget-1.21.4.tar.lz

Verify the base64 SHA256 checksum with cksum -a sha256 --check
from coreutils-9.2 or OpenBSD's cksum since 2007.

Use a .sig file to verify that the corresponding file (without the
.sig suffix) is intact.  First, be sure to download both the .sig file
and the corresponding tarball.  Then, run a command like this:

  gpg --verify wget-1.21.4.tar.gz.sig

The signature should match the fingerprint of the following key:

  pub   rsa4096 2015-10-14 [SC]
7845 120B 07CB D8D6 ECE5  FF2B 2A17 43ED A91A 35B6
  uid   Darshit Shah 
  uid   Darshit Shah 

If that command fails because you don't have the required public key,
or that public key has expired, try the following commands to retrieve
or refresh it, and then rerun the 'gpg --verify' command.

  gpg --locate-external-key g...@darnir.net

  gpg --recv-keys 64FF90AAE8C70AF9

  wget -q -O- 
'https://savannah.gnu.org/project/release-gpgkeys.php?group=wget=1' | 
gpg --import -

As a last resort to find the key, you can try the official GNU
keyring:

  wget -q https://ftp.gnu.org/gnu/gnu-keyring.gpg
  gpg --keyring gnu-keyring.gpg --verify wget-1.21.4.tar.gz.sig

This release was bootstrapped with the following tools:
  Autoconf 2.71
  Automake 1.16.5
  Gnulib v0.1-6178-gdfdf33a466

NEWS

* Noteworthy changes in release 1.21.4 (2023-05-11)

** Document --retry-on-host-error in help text

** Increase read buffer size to 64k. This should speed up downloads on gigabit 
and faster connections

** Update deprecated option '--html-extension' to '--adjust-extension' in 
documentation

** Update gnulib compatibility layer.
   Fixes HSTS test failures on i686. (Thanks to Andreas Enge for ponting it out)




Re: Test failures on i686-linux

2023-05-10 Thread Andreas Enge
Hello,

a quick reminder, it would be great if we could get a new wget1 release!

Thanks,

Andreas


Am Mon, Apr 17, 2023 at 09:18:33AM +0200 schrieb Darshit Shah:
> I'll try and make a new release this week. 
> 
> On Sun, Apr 16, 2023, at 20:51, Andreas Enge wrote:
> > Hi Tim,
> >
> > Am Sun, Apr 16, 2023 at 06:38:32PM +0200 schrieb Tim Rühsen:
> >> Hm, cb114... looks like it's the needed commit. Maybe also cherry-pick
> >> 27d3fcba3331a981bcb8807c663a16b8fa4ebeb3 (gnulib update).
> >
> > it looks like this is definitely needed. But integrating it into our build
> > system is tricky, since it is not just a matter of applying a patch to
> > the tarball. (Actually, it looks like the gnulib update is the only one
> > that is needed. When I run ./bootstrap with the new gnulib, then git
> > checkout v1.21.3, ./configure and make dist, I get a tarball that works
> > for us on i686.)
> >
> >> > Have you got an idea which other commit would be crucial? Or do you think
> >> > you could make a new release soonish?
> >> We should indeed make a release soon. Do you have some spare time @Darshit 
> >> ?
> >
> > That would indeed be most welcome! I would be happy to test a release
> > candidate. The one I got and put there:
> >https://www.multiprecision.org/wget-1.21.3.24-2b723.tar.lz
> > works with the core-updates branch of Guix on i686 and x86_64.
> >
> > Andreas