git » nextcloud-client.git » commit 6885936

go back to verify signed tags

author Chih-Hsuan Yen
2020-09-26 04:48:25 UTC
committer Chih-Hsuan Yen
2020-09-26 04:48:25 UTC
parent c7e5cd88ee509183ccd241cdc1c91d7f4317a03b

go back to verify signed tags

Upstream prefers verify signed tags [1], and for version 3.0.2, the tagged
commit is signed by GitHub's key.

[1] https://github.com/nextcloud/desktop/issues/2185#issuecomment-682148515

PKGBUILD +4 -3

diff --git a/PKGBUILD b/PKGBUILD
index 0d85628..2c7c2ca 100644
--- a/PKGBUILD
+++ b/PKGBUILD
@@ -5,8 +5,9 @@
 pkgname=nextcloud-client
 # Upstream does not provide signed tarballs (yet)
 # https://github.com/nextcloud/desktop/issues/236#issuecomment-540538247
-pkgver=3.0.1
-_commit=0a62628f8a8d92527240435c74c4fb9ffaa46e53
+pkgver=3.0.2
+# Updated by https://git.archlinux.org/users/eschwartz/pacman.git/patch/?id=d8e7dfb71f562ecc491772ecec29a322822ad7d3
+frozen_revision=(068ad89d8d1a7133f9f645b07fbc21fc619726f2)
 pkgrel=1
 pkgdesc='Nextcloud desktop client'
 arch=(x86_64)
@@ -21,7 +22,7 @@ optdepends=(
   'python-nautilus: integration with Nautilus'
   'python-caja: integration with Caja'
 )
-source=("$pkgname::git+https://github.com/nextcloud/desktop.git?signed#commit=$_commit")
+source=("$pkgname::git+https://github.com/nextcloud/desktop.git?signed#tag=v$pkgver")
 validpgpkeys=(
   A26B951528EA1BA1678C7AE5D406C75CEE1A36D6  # one of keys controlled by github.com/camilasan
   42E775EAA3E47F9E0D5CDB0E00819E3BF4177B28  # controlled by github.com/misch7