https://bugzilla.redhat.com/show_bug.cgi?id=1002166 --- Comment #3 from gil cattaneo <puntogil@xxxxxxxxx> --- (In reply to Gerard Ryan from comment #2) > I'm not sure if the new Github "releases" feature makes it unnecessary (not > sure how it works), but consider using the full commit hash to refer to the > sources, as advised here, for immutability and uniqueness: > > https://fedoraproject.org/wiki/Packaging:SourceURL#Github These advices should be used for those repository which don't used newer Git(hub) features. For immutability and uniqueness of the source archive, should be more than enough to use the available archives in https://github.com/carrotsearch/junit-benchmarks/releases or https://github.com/$OWNER/$PROJECT/releases (instead of https://github.com/$OWNER/$PROJECT/tags) -- You are receiving this mail because: You are on the CC list for the bug. You are always notified about changes to this product and component _______________________________________________ package-review mailing list package-review@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/package-review