Bruno Haible via Gnulib discussion list writes:
> Note that some Debian packages are based on git checkouts as well (e.g. [1]),
> for example when there hasn't been a release for a long time. I guess that
> your proposal is supposed to improve the situation for such packages
> as well?
Alas I th
Simon Josefsson wrote:
> My primary goal is to have something stronger than a HTTPS URL to
> Savannah as a trust anchor for how to retrieve gnulib. PGP signatures
> on a serialized file, like a tarball or git bundle, is stronger.
There's something I don't understand here. Can you please explain?
Although Emacs uses some Gnulib modules, it doesn't use translations or
the gettext function so it won't use the "gnulib" translation domain.
Also, Emacs developers prefer using less Gnulib code when possible.
With that in mind, I see that some recent changes would add
m4/gnulib-i18n.m4 and m4
Simon Josefsson wrote:
> >> 1) If savannah is offline or compromised, having widely mirrored
> >> known-good offline copies of the entire gnulib repository is nice.
> >>
> >> 2) Output of 'git clone' is not serialized or use a stable format, so
I'm revisiting this before an upcoming release. Jim and Paul was in
favor of this, but I'm trying to address some of Bruno's concerns below.
Bruno Haible writes:
> Hi Simon,
>
>> including the commit hash provide some additional information that may
>> be useful further down the line
>
> That i
Bruno Haible via Gnulib discussion list writes:
> OK, clearly there are different preferences. So, let me restore the
> previous behaviour through a command-line option: --cksum-checksums.
Thank you! I pushed the attached patch to make it possible to use it
from cfg.mk like this:
announce_gen_
Simon Josefsson wrote:
> > 3) Two weeks later, we collect the updated translations of the "gnulib"
> > domain and publish them at
> > ftp.gnu.org:gnu/gnulib/gnulib-l10n-DATE.tar.gz.
> >
> > 4) Then I notify the various distros of this new package and ask
> > them to include it in their d
Bruno Haible via Gnulib discussion list writes:
>> What would this tarball contain? Just the translations?
>
> Just the POT file and the then-current translations. Try yourself:
> $ make gnulib-l10n-release
That seems to require gettext 0.23, so I didn't get a final tarball to
look at.
> Sim
27;git clone' is not serialized or use a stable format, so a
> 'tar cfz gnulib-20241210.tar.gz gnulib/' works poorly.
>
> 3) It would add PGP-style authentication and integrity checking of the
> repository. Currently we only offer HTTPS only against Savannah and the
> W
Hi! What do you think about publishing
ftp://ftp.gnu.org/gnu/gnulib/gnulib-20241210-bundle
ftp://ftp.gnu.org/gnu/gnulib/gnulib-20241210-bundle.sig
Which would be a Git bundle of the gnulib git repository.
Read about Git bundles here:
https://git-scm.com/docs/git-bundle
It would be created
b repository is nice.
>>
>> 2) Output of 'git clone' is not serialized or use a stable format, so a
>> 'tar cfz gnulib-20241210.tar.gz gnulib/' works poorly.
>>
>> 3) It would add PGP-style authentication and integrity checking of the
>> rep
Simon Josefsson wrote:
> I'm wondering if maybe those
> translations shouldn't be a separate Debian package if they are not
> sharing any of the source code.
Note that Debian already has a number of pure localization packages [1]:
aegisub-l10n
cflow-l10n
chromium-l10n
cinnamon-l10n
compton-conf-l
Bruno Haible via Gnulib discussion list writes:
> The timeline of steps of various actors, in their regular pace, should
> be as follows:
Thanks for this writeup!
> 3) Two weeks later, we collect the updated translations of the "gnulib"
> domain and publish them at ftp.gnu.org:gnu/gnulib/g
Simon Josefsson wrote:
> > https://packages.debian.org/bookworm/cinnamon-l10n
> > https://packages.debian.org/bookworm/menu-l10n
> > https://packages.debian.org/bookworm/psi-l10n
> > https://packages.debian.org/bookworm/qt6-translations-l10n
> >
> > So, whatever problems you see for gnulib-l10n mu
tis 2024-12-10 klockan 12:24 +0100 skrev Bruno Haible:
> Simon Josefsson wrote:
> > > > What would this tarball contain? Just the translations?
> > >
> > > Just the POT file and the then-current translations. Try
> > > yourself:
> > > $ make gnulib-l10n-release
> >
> > That seems to require ge
Simon Josefsson wrote:
> >> What would this tarball contain? Just the translations?
> >
> > Just the POT file and the then-current translations. Try yourself:
> > $ make gnulib-l10n-release
>
> That seems to require gettext 0.23, so I didn't get a final tarball to
> look at.
With a 1-liner loc
> * lib/openat-die.c (_): Likewise.
The change to openat-die.c triggers a new warning in gzip, from the gcc 13
options
-Wformat -Wformat-security
Since this package's "make distcheck" enables -Werror, it even triggers an
error:
$ make distcheck
...
CC libgzip_a-openat-die.o
opena
17 matches
Mail list logo
