Skip to content

Conversation

@hoyosjs
Copy link
Member

@hoyosjs hoyosjs commented Nov 5, 2025

When doing de-dupe of signing files, when a file is first found in a container with different permissions from other entries or where permissions aren't preserved by the format. When repackaging pkg, use the one that's in the container itself. This didn't affect tarballs since the stream contents are replaced, but the entry is preserved (on macOS). A better way to do this for future archival patterns is to append this data to the ZipPart and not to the ZipData, as the latter is the cached entry and not the part representing the data in the original archive.

@hoyosjs hoyosjs requested a review from mmitche November 5, 2025 21:11
@hoyosjs hoyosjs merged commit 987d1a7 into dotnet:release/10.0 Nov 5, 2025
10 checks passed
@hoyosjs
Copy link
Member Author

hoyosjs commented Nov 5, 2025

/backport to main

@github-actions
Copy link
Contributor

github-actions bot commented Nov 5, 2025

Started backporting to main (link to workflow run)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants