Source Mage code commit list

[Thomas Orgis <thomas-forum AT orgis.org>]

Sorry, I have to object to the x264 change.

Am Sun, 20 Mar 2016 01:43:16 +0000
schrieb Florian Franzmann <scm AT sourcemage.org>: 

> commit 4c127d930bb3c020a72015c9f142987278de0841
> Author: Florian Franzmann <siflfran AT hawo.stw.uni-erlangen.de>
> Commit: Florian Franzmann <siflfran AT hawo.stw.uni-erlangen.de>
> 
>     video-libs/x264: use yesterday's daily tarball
> 

> diff --git a/video-libs/x264/DETAILS b/video-libs/x264/DETAILS
> index 16e19a7..9069254 100755
> --- a/video-libs/x264/DETAILS
> +++ b/video-libs/x264/DETAILS
> @@ -1,8 +1,9 @@
>             SPELL=x264
> -#        VERSION="$(date --date='1 day ago' +%Y%m%d)"-2245
> -         VERSION=20141218-2245
> +        VERSION="$(date --date='1 day ago' +%Y%m%d)"-2245
> +#         VERSION=20160318-2245
>            SOURCE=$SPELL-snapshot-$VERSION.tar.bz2
>     SOURCE_URL[0]=ftp://ftp.videolan.org/pub/videolan/x264/snapshots/$SOURCE
> +#     
> SOURCE_HASH=sha512:0ec91bf34e89b0917acc805d649c4a33f67a4653b854640ca72364788f13c7c9c39941fe77e953cd36861b4fe640afec9a8f91b22c5ffeadfcabe4cfb72889b3
>     SOURCE_IGNORE=volatile

Please use the actual snapshot from yesterday (as in 20160319, for
example). The SOURCE_HASH field is there for a reason. We need definite
tested versions of stuff. If there is no stable upstream, we mirror a
snapshot. At least that's what I do. We have the official sourcemage
mirror for sources (although I forgot right now how we actually upload
to that one) and at least Vlad's and my source mirror servers.

If you really want always the latest x264, the spell needs an SCM
option. If you disagree, we should discuss this among the project and
hopefully settle the question for good. My dream is to have some source
validation (hash or sig) for every default version for every spell in
the grimoire.

Is there a special hard reason why you want to disable our source
verification for a more up-to-date x264?


Alrighty then,

Thomas

Attachment: pgpBEqoMrLIMM.pgp
Description: Digitale Signatur von OpenPGP