mirror of
https://github.com/cypht-org/cypht.git
synced 2026-04-25 13:05:53 +03:00
[GH-ISSUE #1122] Bundle composer vendor dependencies with released tarballs to support reproducible build system packaging #578
Labels
No labels
2fa
I18N
PGP
Security
Security
account
advanced_search
advanced_search
announcement
api_login
authentication
awaiting feedback
blocker
bug
bug
bug
calendar
config
contacts
core
core
devops
docker
docs
duplicate
dynamic_login
enhancement
epic
feature
feeds
framework
github
github
gmail_contacts
good first issue
help wanted
history
history
imap
imap_folders
inline_message
installation
keyboard_shortcuts
keyboard_shortcuts
ldap_contacts
mobile
need-ssh-access
new module set
nux
pop3
profiles
pull-request
question
refactor
release
research
saved_searches
smtp
strategic
tags
tests
themes
website
wordpress
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference
starred/cypht#578
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @amessina on GitHub (Jul 16, 2024).
Original GitHub issue: https://github.com/cypht-org/cypht/issues/1122
Originally assigned to: @Shadow243 on GitHub.
🚀 Feature
Bundling composer vendor dependencies with released tarballs supports build system (like Koji) packaging that doesn't enable network connections. This is in support of reproducible builds.
@marclaporte commented on GitHub (Jul 17, 2024):
Related: https://github.com/cypht-org/cypht/issues/597
@marclaporte commented on GitHub (Jul 22, 2024):
@kroky what do you think?
@kroky commented on GitHub (Jul 23, 2024):
Yes, +1 for bundling the vendor packages with the release tarballs.
@Shadow243 commented on GitHub (Aug 15, 2024):
It seams like the GITHUB_TOKEN provided by GitHub Actions has limited permissions by default. I'l review it and create a new one with right access permission.
@Shadow243 commented on GitHub (Jan 4, 2025):
@marclaporte @kroky @amessina Can we close this since the PR is already merged ?
@marclaporte commented on GitHub (Jan 5, 2025):
Is it done?
@Shadow243 commented on GitHub (Jan 5, 2025):
since the last release we have cypht.tar.gz which is added to the release and which contains the vendor folder already with the dependencies
https://github.com/cypht-org/cypht/pull/1142
I just checked, the token has expired since like a week. I will have to renew that