GNU bug report logs - #66414
GNU ELPA: Require signed tags to release new package versions

Previous Next

Full log

View this message in rfc822 format

From: Stefan Kangas <stefankangas <at> gmail.com>
To: Stefan Monnier <monnier <at> iro.umontreal.ca>
Cc: 66414 <at> debbugs.gnu.org, philipk <at> posteo.net, yantar92 <at> posteo.net
Subject: bug#66414: GNU ELPA: Require signed tags to release new package versions
Date: Tue, 10 Oct 2023 11:28:58 +0000

Stefan Monnier <monnier <at> iro.umontreal.ca> writes:

> The (Non)GNU ELPA tarballs are built from `elpa.git` and `nongnu.git`,
> not from the upstream repositories, and currently those do not
> contain upstream tags.
>
> And since those repos contain many packages, the upstream tags need to
> be renamed or moved to a different namespace to avoid conflicts between
> tag names in different packages.

I'm starting to wonder if Philip's idea to use signed git commits might
work better for our purposes.

Would signed tags give us something that signed commits wouldn't?

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.