[prev in list] [next in list] [prev in thread] [next in thread] 

List:       kde-devel
Subject:    Re: Should we stop distributing source tarballs?
From:       Sune Vuorela <nospam () vuorela ! dk>
Date:       2024-04-04 11:26:57
Message-ID: uum2q1$rhr$1 () ciao ! gmane ! io
[Download RAW message or body]

On 2024-04-04, Ben Cooksley <bcooksley@kde.org> wrote:
>> I do also think it is nice if we get someone else to verify that the
>> tarball we ship actually matches the tag. I think some people in
>> distributions have already started looking into verifying that.
>>
>
> Hopefully they'll be gentle with tooling that does this?

I have only seen 'starting to look into it', not actually yet figuring
out what to do with it.

But as an approximation, I would expect

'does the tarball content match the tag?'

'can we easily and automatically explain the difference?'

'does it use autotools?'

'can autogenerated docs and stuff be moved to build time instead?'

and other such things that might flag it differently and probably for
manual inspections.

I think we have stopped injecting translations at tarball creation time
and our tarballs should actually match the git tags?

/Sune

[prev in list] [next in list] [prev in thread] [next in thread] 

Configure | About | News | Add a list | Sponsored by KoreLogic