Hello! Thanks for this release. It seems that the key used to sign the archive is no longer the one from the automake group. Is it intentional ?
All the best, Valentin Lefebvre Linux Distribution Engineer - packager Member of System Boot and Init team SUSE Software Solutions Germany GmbH 56100 Lorient, France On Tue, May 27, 2025 at 11:10 PM Karl Berry <k...@freefriends.org> wrote: > This is to announce automake-1.18, a stable release. > See the NEWS below for a brief summary of changes. > > Download here (checksum and signature info below): > https://ftp.gnu.org/gnu/automake/automake-1.18.tar.gz (2.3MB) > https://ftp.gnu.org/gnu/automake/automake-1.18.tar.xz (1.6MB) > > Use a mirror for higher download bandwidth: > https://ftpmirror.gnu.org/gnu/automake > > Please report bugs and problems to <bug-autom...@gnu.org> > (instead of replying to this mail), > and send general comments and feedback to <automake@gnu.org>, > and patches to <automake-patc...@gnu.org>. > > There have been 69 commits by 12 people in the 46 weeks since 1.17. > > Thanks to everyone who has contributed! > The following people contributed changes to this release: > > Bogdan (1) > Bruno Haible (4) > Collin Funk (3) > Eric Gallager (1) > Gavin Smith (1) > Jim Meyering (1) > Jose Marchesi (4) > Kamila Szewczyk (1) > Karl Berry (33) > Paul Eggert (3) > Reuben Thomas (2) > Richard Hansen (15) > > Karl > [on behalf of the automake developers] > > ============================================================================= > New in 1.18 (2025-05-25): > > * New features added > > - Default tar format is now ustar, mainly to support longer filenames; > the tar-v7 and other explicit options to force a particular tar > format are unchanged and still override the default. (bug#74847) > > - The mdate-sh auxiliary script generally used with Texinfo now uses > SOURCE_DATE_EPOCH, if set, instead of the source file's mtime. > (bug#77805) > > - New option dist-bzip3 for bzip3 compression of distributions. > (bug#73795) > > - New option --stderr-prefix for tap-driver.sh, to prefix each line of > stderr from a test script with a given string. (bug#72536) > > - Support for Algol 68 added, based on the GNU Algol 68 compiler. > (bug#75807) > > * Bugs fixed > > - Do not make Perl warnings fatal, per Perl's recommendation. > (https://lists.gnu.org/archive/html/automake/2025-01/msg00003.html) > > - Avoid Perl 5.41.8+ precedence warning for use of !!. > (https://lists.gnu.org/archive/html/automake/2025-01/msg00000.html) > > - a Perl path containing whitespace now emits a warning instead of > an error, so ./configure PERL='/usr/bin/env perl' can work. (bug#74453) > > - The py-compile script once again does nothing (successfully) if the > PYTHON environment variable is set to ":", or anything that isn't a > Python interpreter (according to $PYTHON -V). Exception: if PYTHON > is set to "false", do nothing but exit unsuccessfully, also to match > previous behavior. (bug#74434) > > - The no-dist-built-sources Automake option now operates (hopefully) as > intended, i.e., omits the dependency on $(BUILT_SOURCES) for the > distdir target. (bug#69908) > > - Only warn about install.sh being found, instead of it being a fatal > error. (bug#19964) > > - The compile script is more robust to Windows configurations; > specifically, avoids double-path translation on MSYS. (bug#75939) > > - The test infrastructure sets the CONFIG_SITE environment variable to > /dev/null, to avoid the local system's Autoconf site defaults from > breaking the test environment. (bug#76622) > > - AM_SILENT_RULES once again always ends with a newline. (bug#72267) > > - AM_SANITY_CHECK now outputs "no" on failure, so that a complete line > is written to stdout before the error message is written to stderr. > (bug#76448) > > * Miscellaneous changes > > - Only require the presence of an ABOUT-NLS file at the 'gnits' > strictness level. > (https://lists.gnu.org/archive/html/automake/2024-10/msg00006.html) > > ================================================================== > Here is the GNU automake home page: > https://gnu.org/s/automake/ > > Here are the compressed sources: > https://ftp.gnu.org/gnu/automake/automake-1.18.tar.gz (2.3MB) > https://ftp.gnu.org/gnu/automake/automake-1.18.tar.xz (1.6MB) > > Here are the GPG detached signatures: > https://ftp.gnu.org/gnu/automake/automake-1.18.tar.gz.sig > https://ftp.gnu.org/gnu/automake/automake-1.18.tar.xz.sig > > Use a mirror for higher download bandwidth: > https://ftpmirror.gnu.org/gnu/automake > > Here are the SHA1 and SHA256 checksums: > File: automake-1.18.tar.gz > SHA1 sum: fda71ecf3137f7d4b025598735deab0c0614076a > SHA256 sum: > 63eac3aba49887316010050e48c7f9812b9da41badfc22b4ba1ca776d616c6d1 > > File: automake-1.18.tar.xz > SHA1 sum: df1d926aeb397c48fb99f96933f83023368b0375 > SHA256 sum: > 514993fc8c39f4db0dc9791e09a0719fc2616cebe4d5b81d68ddf1a00d05c5f5 > > Use a .sig file to verify that the corresponding file (without the > .sig suffix) is intact. First, be sure to download both the .sig file > and the corresponding tarball. Then, run a command like this: > gpg --verify automake-1.18.tar.gz.sig > > announce-gen: NEWS: no matching lines for '1.18' > The signature should match the fingerprint of the following key: > pub rsa2048 2012-06-12 [SC] > 17D3 311B 14BC 0F24 8267 BF02 0716 748A 30D1 55AD > uid Karl Berry <k...@freefriends.org> > > If that command fails because you don't have the required public key, > or that public key has expired, try the following commands to retrieve > or refresh it, and then rerun the 'gpg --verify' command. > gpg --recv-keys 0x17D3311B14BC0F248267BF020716748A30D155AD > > As a last resort to find the key, you can try the official GNU > keyring: > wget -q https://ftp.gnu.org/gnu/gnu-keyring.gpg > gpg --keyring gnu-keyring.gpg --verify automake-1.18.tar.gz.sig > > This release is based on the automake git repository, available as > git clone https://git.savannah.gnu.org/git/automake.git > with commit ec906293ae853da0b5135a66a6facd34c7acf367 tagged as v1.18. > > For a summary of changes and contributors, see: > https://git.sv.gnu.org/gitweb/?p=automake.git;a=shortlog;h=v1.18 > > or run this command from a git-cloned automake directory: > git shortlog v1.17..v1.18 > >
