-
-
Notifications
You must be signed in to change notification settings - Fork 12.5k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
dashing: fix sha256 sum of testdata #47842
Conversation
Looks like this just failed to checkout master branch to merge? 🤔
|
It would be good to have your base branch up to date (so that you dont have merge branch issue). Thanks again for pushing go 1.13.5 forward. |
Hmm, I think I did some mistakes in my fork setup. 😞 |
Oh, great the forumla has other build errors. |
Looks like they're removing dependencies for glide and moving go modules like everyone should. ;) |
Let's hope this gets merged quickly. |
@iwittkau the removal of glide and replacement with go modules got merged can we trigger this jenkins build again. |
@BrewTestBot test this please |
We need to update dashing to the latest version as well. |
Why did the shasum change? Does upstream ruby know about this? |
Good point, didn't really think about it. Seems like documenting-ruby.org and ruby-doc.org are unofficial community efforts? |
Maybe because of https://www.ruby-lang.org/en/news/2019/10/01/webrick-regexp-digestauth-dos-cve-2019-16201/ docs for 2.5.0 got rebuild? |
Whatever it is, please make sure it was intentional |
Mentioned it in technosophos/dashing#54, we still need a new version of dashing anyway. |
@SMillerDev the ruby doc is just a resource to test against not part of the actual program and will be thrown away after the build... as far as a security concern i dont think this is one. Actually do we even need to be checksum this file - isn't it a little overkill in this context? The site doesn't provide hash to compare against https://ruby-doc.org/downloads/ so no way of knowing either when something changes or gets updated or fixed. |
I see what it does and why it's not a big security issue, but it might be better to validate and/or pick a stable resource all the same. |
Closing this because the whole dashing formula needs to be updated:
Fixing the sha sum might speed up #47510, but I don't know how to verify the changed sha sum. |
brew install --build-from-source <formula>
, where<formula>
is the name of the formula you're submitting?brew test <formula>
, where<formula>
is the name of the formula you're submitting?brew audit --strict <formula>
(after doingbrew install <formula>
)?related to #47510