Stop depending on savannah cgit#526
Conversation
jian-lin
commented
Dec 13, 2025
jian-lin
commented
- Update Emacs repo url on savannah
- Replace git:// with https:// for Emacs savannah url
- Stop depending on savannah cgit
|
related to this error message? was just looking for related issues |
|
@acid-bong Yes, that error was fixed in #524 |
|
FYI, I have been reliably mirroring savannah repositories from cgit over the git protocol using this workflow: https://github.com/elpa-mirrors/automation/blob/master/.github/workflows/mirror.yml. Security doesn't look like an issue to the user. |
|
@akirak Sorry, I am a bit confused what you are conveying here. Could you make it more explicit? |
|
@jian-lin No, it's fine. I meant cloning from a git url like git://cgit.git.savannah.gnu.org/emacs/elpa.git/ could be reliable if it directly accesses cgit, but that wouldn't be necessary. Sorry for bothering you. |
|
@akirak I see, thanks. BTW, it seems this url
|
It seems that they have changed the official clone URLs. See the comment by LIN, Jian (@jian-lin): nix-community/emacs-overlay#526 (comment)
https:// is more secure[1] than git://. [1]: https://git-scm.com/book/ms/v2/Git-on-the-Server-The-Protocols
Savannah disables their cgit snapshot service again. We have migrated[1] away from savannah cgit snapshot. To be more future-proofing, this patch removes our last dependency of savannah cgit. The last dependency of savannah cgit is to fetch atom feeds from it to get the latest commit and the date of the latest commit. Now we get those info using "git ls-remote" and "nix-prefetch-git". [1]: 8b221ef
jian-lin
force-pushed
the
pr/atom->git-ls-remote
branch
from
1b68102 to
9429698
Compare
|
resolved conflicts |
3 participants
