Hi all,
we have recently cleaned up parts of the developer wiki a bit and moved
the list of internal projects to a more prominent location:
https://wiki.archlinux.org/title/Getting_involved#Software_projects
As you can see, we have quite a few projects and some of them would be
happy about more
ohai!
I released a new tool called updlockfiles that attempts to help manage
dependency lockfiles like Cargo.lock, composer.lock, go.mod and friends.
Hopefully this helps with reproducible builds in Arch Linux, but also if
you want to manage your own downstream lockfile to override vulnerable
hello,
multiple people in Arch Linux noticed the output of our `git archive`
command doesn't match the tarball served by github anymore.
First I suspected an update in our gzip package until I found this line
in the git 2.38.0 release notes:
> * Teach "git archive" to (optionally and then b
