https://bugzilla.redhat.com/show_bug.cgi?id=1002166 --- Comment #4 from Gerard Ryan <gerard@xxxxxxx> --- (In reply to gil cattaneo from comment #3) > (In reply to Gerard Ryan from comment #2) > > I'm not sure if the new Github "releases" feature makes it unnecessary (not > > sure how it works), but consider using the full commit hash to refer to the > > sources, as advised here, for immutability and uniqueness: > > > > https://fedoraproject.org/wiki/Packaging:SourceURL#Github > > These advices should be used for those repository which don't used newer > Git(hub) features. > For immutability and uniqueness of the source archive, should be more than > enough to use the available archives in > > https://github.com/carrotsearch/junit-benchmarks/releases > or > https://github.com/$OWNER/$PROJECT/releases (instead of > https://github.com/$OWNER/$PROJECT/tags) Ah yeah, I had a feeling that that might be the case but wasn't sure. fedora-review+ btw. Thanks for packaging! :) -- You are receiving this mail because: You are on the CC list for the bug. You are always notified about changes to this product and component _______________________________________________ package-review mailing list package-review@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/package-review