apt, branch 2.9.14Debians commandline package managerhttps://git.kalnischkies.de/apt/atom?h=2.9.142024-11-22T16:17:41ZRelease 2.9.142024-11-22T16:17:41ZJulian Andres Klodejulian.klode@canonical.com2024-11-22T16:17:11Zurn:sha1:1a03ebc11982f052259a6b677ebc520f8d47cb81
Oh well I accidentally committed everything from my work email
today but I'm off today ...
apt-key: Prefer gpgv-sq if it exists2024-11-22T16:13:14ZJulian Andres Klodejulian.klode@canonical.com2024-07-30T04:13:18Zurn:sha1:49bde10bd544876c4d901cac5616264874cd1af5
This allows you to test out gpgv-sq by just installing it, which
is nice.
Merge branch 'fix/partialfilemirror' into 'main'2024-11-22T16:12:34ZJulian Andres Klodejak@debian.org2024-11-22T16:12:34Zurn:sha1:1818699c1bc8a5be2d6542fe3212f26af7fa912a
Support uncompressed indexes from partial file:/ mirrors
See merge request apt-team/apt!235Merge branch 'test-gpgv-sq' into 'main'2024-11-22T16:09:41ZJulian Andres Klodejak@debian.org2024-11-22T16:09:41Zurn:sha1:f9069c2498f74c09b4a4d7da8bb677756b371dae
Test gpgv-sq
See merge request apt-team/apt!403test: Ensure we test both gpgv-g10code and gpgv-sq2024-11-22T15:44:02ZJulian Andres Klodejulian.klode@canonical.com2024-11-22T15:20:05Zurn:sha1:e983d98c4fcd952ffcbc010b185455913c8af650test: Accept empty output from gpgv/apt-key2024-11-22T15:44:02ZJulian Andres Klodejulian.klode@canonical.com2024-11-21T19:10:47Zurn:sha1:de3f663d823f9c185514af69296d011e22161479
Our internal code always generates ENODATA for empty output and
this is checked by the previous commit, so this is entirely safe.
test-releasefile-verification: Test empty/invalid signatures2024-11-22T15:44:02ZJulian Andres Klodejulian.klode@canonical.com2024-11-21T19:01:57Zurn:sha1:d2e34a441bad904798bf62fb850d4fb5b1b90656Accept BADSIG instead of EXPSIG for expired signatures2024-11-22T15:20:36ZJulian Andres Klodejulian.klode@canonical.com2024-11-21T17:51:10Zurn:sha1:222301d7a36a09db80a8832cd16db41f7946a9ea
Sequioa emits KEYEXPIRED + BADSIG instead of EXPSIG + VALIDSIG
test-releasefile-verification: Fix signature time2024-11-22T15:20:36ZJulian Andres Klodejulian.klode@canonical.com2024-11-21T17:49:28Zurn:sha1:27012a496a9da78f26e9e412a7118dbe00e5c1ec
The key was only generated in 2010 and only bound in 2016,
so we cannot have signatures from before then, so update
the key accordingly, and change the default expiry to 2017.
Merge branch 'fix/warnings' into 'main'2024-11-22T14:07:42ZJulian Andres Klodejak@debian.org2024-11-22T14:07:42Zurn:sha1:b3c8a3cbb0f51d9cf704ca6a1c050fb50a0fb22d
Fix a small bunch of compile-time warnings
See merge request apt-team/apt!404