Repository navigation
fix(packaging): pin and validate source recipe candidates - #4
Merged
Merged
Conversation
Owner
Author
|
The reviewed build/toolchain prerequisite #3 is now merged. This branch includes it at Please review the immutable source/version checks, preservation of Nix SRI and Cargo hashes, and the MacPorts locked crate/install-path changes. Nix, Conda-build and MacPorts package builds remain separate qualification gates; this PR prepares recipes and does not claim package publication. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
The source-package submission paths could relabel stale recipes for a different release and replace Nix's unpacked SRI hash with a compressed archive's hex digest. Pin the prepared Nix, Conda and MacPorts candidates to source
1868a6273174f58856af25ba6c45eb057d3bbfd0(package 0.1.0), retain source/dependency hashes together, and reject a requested ref or version that differs before external submission.The Nix and Conda recipes match the corrected upstream submissions in NixOS/nixpkgs#454087 and conda-forge/staged-recipes#31254. MacPorts includes corrected maintainer/dependency syntax, the target-triplet install path and all 573 locked registry crate checksums. The helper also preserves backup files and reports other publication workflows separately.
Validation at
1a9275499df57e2b1a8c07fa0f44c5bb92340320: four Python regression tests passed; all three recipe CLI checks passed; wrong-release rejection, workflow YAML and shell syntax were checked. The 2,676,867-byte source archive was independently verified against SHA-25609b19547e24e93ca1fe704485df1c4fa25464de635d617bae9eb7e4310596721, and the MacPorts crate list matches the pinned lockfile.These are prepared source recipes. Local Nix, Conda-build and MacPorts package builds were not run, and no package publication or upstream submission is triggered by this PR.