No shas in the repo manifest - #134
Merged
Merged
Conversation
The Flatpak manifest pinned files that live at moving targets: the tarball at the dev release, the metadata on main. A hash of something that moves goes stale by definition, which is where the run of "Renew sha256" commits came from. Nobody was doing anything wrong; the arrangement could not be won. Every source now points at the file beside it, so the manifest carries no urls and no hashes at all. The only sha256 left belongs to zenity, which is a GNOME release that never moves. There is nothing to renew by hand any more, and a local build is: build Linux, drop the tarball in flatpak/, run flatpak-builder. Flathub builds from its own repository and cannot reach those paths, so scripts/flathub_manifest.py rewrites every source to a url on the tag with the hashes computed from the files that tag serves. The release job generates it, checks the tag really serves what it pins, and attaches it to the release. A tag never moves, so that copy stays correct, and the x-checker-data blocks let Flathub's own updater carry it to the next version. The build no longer rewrites four sources into a temporary manifest either. It copies the tarball next to the manifest and builds from the checkout. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
No description provided.