Re: .gitmodules security

2022-02-11 Thread Vincent Lefevre
On 2022-02-11 05:05:45 -0500, Mike Frysinger wrote: > i'm not sure that's accurate. if you look at the history of the gnulib > submodule, it's updated maybe once a year. gnulib doesn't need to be > synced to its latest commit all the time to work. i think any automated > distro testing should be

Re: .gitmodules security

2022-02-11 Thread Mike Frysinger
On 07 Feb 2022 12:24, Vincent Lefevre wrote: > On 2022-02-07 05:43:11 -0500, Mike Frysinger wrote: > > On 07 Feb 2022 09:32, Vincent Lefevre wrote: > > > what is done on Debian (where the libtool uses the version from the > > > gnulib package, so that it is interesting to know the behavior with > >