Source Mage code commit list

[Thomas Orgis <scm AT sourcemage.org>]

GIT changes to master grimoire by Thomas Orgis <sobukus AT sourcemage.org>:

 ftp/wget/DETAILS |   13 +++++++++----
 ftp/wget/HISTORY |    5 +++++
 2 files changed, 14 insertions(+), 4 deletions(-)

New commits:
commit c5fb98a5da8d88656d3aaec1e7d911fe59a97c97
Author: Thomas Orgis <sobukus AT sourcemage.org>
Commit: Thomas Orgis <sobukus AT sourcemage.org>

    wget: un-break build by switching to hash
    
    The key used to sign wget is quickly expiring, even if we'd import the
    one with the extended expiration. This is just too fragile, especially
    for one spell that all casts rely on.

diff --git a/ftp/wget/DETAILS b/ftp/wget/DETAILS
index 329ccb6..bbe9fb3 100755
--- a/ftp/wget/DETAILS
+++ b/ftp/wget/DETAILS
@@ -4,10 +4,15 @@
   SECURITY_PATCH=6
           SOURCE=$SPELL-$VERSION.tar.gz
    SOURCE_URL[0]=$GNU_URL/$SPELL/$SOURCE
-         SOURCE2=$SOURCE.sig
-  SOURCE2_URL[0]=${SOURCE_URL[0]}.sig
-      SOURCE_GPG=gnu.gpg:$SOURCE.sig:UPSTREAM_KEY
-  SOURCE2_IGNORE=signature
+     
SOURCE_HASH=sha512:572aa54717e51a9eb9959e127c7afb696645088f32ff7df2cfe9d243957e34ee235e98988fa94649df023d2e3d62b6973e8c9f2eb92beba820dd96d5de2a950d
+# Disabled GPG checking, as concerned keys are quickly expired and we lack
+# any management of that situation in the grimoire.
+#         SOURCE2=$SOURCE.sig
+#  SOURCE2_URL[0]=${SOURCE_URL[0]}.sig
+#      SOURCE_GPG=gnu.gpg:$SOURCE.sig:UPSTREAM_KEY
+#  SOURCE2_IGNORE=signature
+# If you ever re-activate gpg, better do that:
+#    
SOURCE2_HASH=7f819dc43a466682ace38e8537698e3c7c3919203f77373bdaea1b63ead40c4d3663590209dfeb6187d98edd00e30848a3abd5735795fb47878924f1d9b2ee10d
 SOURCE_DIRECTORY="$BUILD_DIRECTORY/$SPELL-$VERSION"
         DOC_DIRS=""
         WEB_SITE=https://www.gnu.org/software/wget/
diff --git a/ftp/wget/HISTORY b/ftp/wget/HISTORY
index 04ff6e6..3999f3d 100644
--- a/ftp/wget/HISTORY
+++ b/ftp/wget/HISTORY
@@ -1,3 +1,8 @@
+2024-10-03 Thomas Orgis <sobukus AT sourcemage.org>
+       * DETAILS: switched to hash because of expired key,
+         did check signature with newly received key before that,
+         that key also expiring soon
+
 2024-03-11 Treeve Jelbert <treeve AT sourcemage.org>
        * DETAILS: version 1.24.5