From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.io!.POSTED.blaine.gmane.org!not-for-mail From: Stefan Kangas Newsgroups: gmane.emacs.bugs Subject: bug#66414: GNU ELPA: Require signed tags to release new package versions Date: Tue, 10 Oct 2023 11:28:58 +0000 Message-ID: References: Mime-Version: 1.0 Content-Type: text/plain; charset="UTF-8" Injection-Info: ciao.gmane.io; posting-host="blaine.gmane.org:116.202.254.214"; logging-data="29906"; mail-complaints-to="usenet@ciao.gmane.io" Cc: 66414@debbugs.gnu.org, philipk@posteo.net, yantar92@posteo.net To: Stefan Monnier Original-X-From: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane-mx.org@gnu.org Tue Oct 10 13:30:19 2023 Return-path: Envelope-to: geb-bug-gnu-emacs@m.gmane-mx.org Original-Received: from lists.gnu.org ([209.51.188.17]) by ciao.gmane.io with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1qqAwN-0007bn-1P for geb-bug-gnu-emacs@m.gmane-mx.org; Tue, 10 Oct 2023 13:30:19 +0200 Original-Received: from localhost ([::1] helo=lists1p.gnu.org) by lists.gnu.org with esmtp (Exim 4.90_1) (envelope-from ) id 1qqAw8-0000MF-Gu; Tue, 10 Oct 2023 07:30:04 -0400 Original-Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1qqAvs-0000Dh-RA for bug-gnu-emacs@gnu.org; Tue, 10 Oct 2023 07:29:52 -0400 Original-Received: from debbugs.gnu.org ([2001:470:142:5::43]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1qqAvm-0000ZU-LF for bug-gnu-emacs@gnu.org; Tue, 10 Oct 2023 07:29:42 -0400 Original-Received: from Debian-debbugs by debbugs.gnu.org with local (Exim 4.84_2) (envelope-from ) id 1qqAw6-00036D-77 for bug-gnu-emacs@gnu.org; Tue, 10 Oct 2023 07:30:02 -0400 X-Loop: help-debbugs@gnu.org Resent-From: Stefan Kangas Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Tue, 10 Oct 2023 11:30:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 66414 X-GNU-PR-Package: emacs Original-Received: via spool by 66414-submit@debbugs.gnu.org id=B66414.169693736911841 (code B ref 66414); Tue, 10 Oct 2023 11:30:02 +0000 Original-Received: (at 66414) by debbugs.gnu.org; 10 Oct 2023 11:29:29 +0000 Original-Received: from localhost ([127.0.0.1]:34124 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1qqAvZ-00034v-Fw for submit@debbugs.gnu.org; Tue, 10 Oct 2023 07:29:29 -0400 Original-Received: from mail-lj1-x22b.google.com ([2a00:1450:4864:20::22b]:59671) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1qqAvV-00034g-LJ for 66414@debbugs.gnu.org; Tue, 10 Oct 2023 07:29:27 -0400 Original-Received: by mail-lj1-x22b.google.com with SMTP id 38308e7fff4ca-2c007d6159aso65924011fa.3 for <66414@debbugs.gnu.org>; Tue, 10 Oct 2023 04:29:04 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1696937339; x=1697542139; darn=debbugs.gnu.org; h=cc:to:subject:message-id:date:mime-version:references:in-reply-to :from:from:to:cc:subject:date:message-id:reply-to; bh=5jCb4t2PTcDle7lE9nt2PpreZ/I+r1krT6W2rPVouWs=; b=HnyqO2nZpjhWcBeoXyBf6X4zUpFoKBSaDJxSSM//oHP35wkqHrMMdoG5iFPnSWEP35 bUgCXbKMeu33Zy2BUayuplm3SzFxMWY+kqFfmLfh3nmGQ3Wvtr8JPL3ccZviDFhQWhrH Vg+slA1Nkn6OZ5mBc9ARRIxCS1UkARSxpwK18+107yI13HJIOgQliZl2I3EIwL0qoVSn FhxXzS6CAyj2qc6FAq0FvYC8gbeEiKC+erompba1ke2CubsatlPj+H8+J/vuKFZYzXlf uH2qL84T1oxmMMwHv9NLanOaHMQh2yVWNq5fspGtFUXbYnUNq+ZFJpOiwJEy7Suo/E72 d7ig== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1696937339; x=1697542139; h=cc:to:subject:message-id:date:mime-version:references:in-reply-to :from:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to; bh=5jCb4t2PTcDle7lE9nt2PpreZ/I+r1krT6W2rPVouWs=; b=MATQXyJ/JBA+B6lCt2xE4UUFqQ6VnQwXWC6I9UlSKWSWZThO4KjKbybEdWxZpBHcIx 2lnj8DTtFrdVunHUY3lUNRyo+cC1hHqOlkeM8GX5AxB9iS+5zNLDRI5Ve+1Ql5GWUr/4 KOnzhTN9wddKEvDB8Etr4E7l4WyQJDXOU9YNVtKPmdULhjUB+MPsbtsrUNxYJ2DU2GQ6 Jx6x12KXr8O/teYRlYfSzAy+E7v6xf4Dhu5lJrMKYmmlutfMeSGS0dR9htN5+VbVQGEs 0iJnB3e2Fk7fpnvSRGyqk2teannGHbhze6No3QWDesLoZV7WtkodLpMP459ntUFAi1MW 2OxQ== X-Gm-Message-State: AOJu0YzobseoCZ0MRdhFm7ymLrDb1KXNgj3clgWMDjX0azx+PHvfHapp eZoyKKGXZtt9IttAe2VSYjN+OxmNMQIJrou3Fls2lFX4wK4= X-Google-Smtp-Source: AGHT+IFrw3GN+iaHjq+sDR2g3v4qOvue8jWIi2kLUu9pGB/eQZe6xqfA6dYKpAZPyiCIwqfTtQsQc/nZYBeH7uVODYU= X-Received: by 2002:a2e:9d8f:0:b0:2bf:9664:b761 with SMTP id c15-20020a2e9d8f000000b002bf9664b761mr13204303ljj.53.1696937338552; Tue, 10 Oct 2023 04:28:58 -0700 (PDT) Original-Received: from 753933720722 named unknown by gmailapi.google.com with HTTPREST; Tue, 10 Oct 2023 11:28:58 +0000 In-Reply-To: X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list X-BeenThere: bug-gnu-emacs@gnu.org List-Id: "Bug reports for GNU Emacs, the Swiss army knife of text editors" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane-mx.org@gnu.org Original-Sender: bug-gnu-emacs-bounces+geb-bug-gnu-emacs=m.gmane-mx.org@gnu.org Xref: news.gmane.io gmane.emacs.bugs:272195 Archived-At: Stefan Monnier writes: > The (Non)GNU ELPA tarballs are built from `elpa.git` and `nongnu.git`, > not from the upstream repositories, and currently those do not > contain upstream tags. > > And since those repos contain many packages, the upstream tags need to > be renamed or moved to a different namespace to avoid conflicts between > tag names in different packages. I'm starting to wonder if Philip's idea to use signed git commits might work better for our purposes. Would signed tags give us something that signed commits wouldn't?