<div dir="ltr"><div class="gmail_extra"><div class="gmail_quote">On Tue, Jun 23, 2015 at 8:11 AM, Remi Collet <span dir="ltr">&lt;<a href="mailto:Fedora@famillecollet.com" target="_blank">Fedora@famillecollet.com</a>&gt;</span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><span class="">Le 18/04/2015 22:28, Dave Johansen a écrit :<br>
&gt; What&#39;s the right way to handle github URLs? Currently,<br>
<br>
</span>I think Guidelines are clear.<br>
<a href="https://fedoraproject.org/wiki/Packaging:SourceURL?rd=Packaging/SourceURL#Github" rel="noreferrer" target="_blank">https://fedoraproject.org/wiki/Packaging:SourceURL?rd=Packaging/SourceURL#Github</a><br>
<br>
&quot;For a number of reasons (immutability, availability,<br>
uniqueness), you must use the full commit revision hash<br>
when referring to the sources.&quot;<br>
<span class=""><br>
&gt; I&#39;m working on the<br>
&gt; spec file for breathe and the URL is<br>
&gt; <a href="https://github.com/michaeljones/breathe/archive/v4.0.0.tar.gz" rel="noreferrer" target="_blank">https://github.com/michaeljones/breathe/archive/v4.0.0.tar.gz</a> and the<br>
<br>
</span>AFAIK, this is NOT immutable (upstream can delete/update tag) so not valid.<span class=""></span><br></blockquote><div><br></div><div>I believe it&#39;s true that the tag can be deleted or changed, which could cause problems with reproducability. I changed the above URL to use the hash of the commit and that gives the same results but with the guarantee of being reproducible. For the sake of documentation, here&#39;s the updated lines from the .spec:<br><br>%global owner michaeljones<br>%global commit0 aa95a879dccd63cfac5156bd9a303d41ea1d2490<br><br>Name:           breathe<br>Source0:        <a href="https://github.com/%{owner}/%{name}/archive/%{name}-%{commit0}.tar.gz">https://github.com/%{owner}/%{name}/archive/%{name}-%{commit0}.tar.gz</a><br><br>%setup -qn %{name}-%{commit0}<br></div></div></div></div>