From bcd416e286b0fc9cfc3c31e6b6a0baed77d4fb04 Mon Sep 17 00:00:00 2001 From: "Michael C. Ferguson" Date: Mon, 28 Sep 2026 23:55:02 -0500 Subject: [PATCH] itsalive: refresh the cargo6 hash for 1aa4d83; run lint on package/itsalive #210 bumped ITSALIVE_VERSION without the hand-derived hash. lint.yml's pin gate never ran on the PR: its paths filter listed package/azcopy/** but not package/itsalive/**, and build.yml doesn't build the installer. Hash from the recipe in itsalive.hash (make O=output-installer itsalive-source). LICENSE unchanged; vendored set is still just libc. Co-Authored-By: Claude Opus 5.5 --- .github/workflows/lint.yml | 4 ++++ package/itsalive/itsalive.hash | 2 +- 2 files changed, 5 insertions(+), 1 deletion(-) diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml index 0f3d66b..f05f69c 100644 --- a/.github/workflows/lint.yml +++ b/.github/workflows/lint.yml @@ -46,6 +46,8 @@ on: # package/azcopy: azcopy-profile.sh is shellchecked below, and the whole # directory feeds the version/hash consistency gate. - 'package/azcopy/**' + # package/itsalive: feeds the version/hash gate; #210 bypassed it. + - 'package/itsalive/**' - 'install.sh' - 'uninstall.sh' pull_request: @@ -56,6 +58,8 @@ on: # package/azcopy: azcopy-profile.sh is shellchecked below, and the whole # directory feeds the version/hash consistency gate. - 'package/azcopy/**' + # package/itsalive: feeds the version/hash gate; #210 bypassed it. + - 'package/itsalive/**' - 'install.sh' - 'uninstall.sh' workflow_dispatch: diff --git a/package/itsalive/itsalive.hash b/package/itsalive/itsalive.hash index c015397..677fb5c 100644 --- a/package/itsalive/itsalive.hash +++ b/package/itsalive/itsalive.hash @@ -57,7 +57,7 @@ # 2026.08 and host-rust-bin 1.97.1. That build also measured what itsalive.mk's # point 2 claims: `file` on the installed binary reports "ELF 32-bit LSB # executable, ARM, EABI5 ... statically linked, stripped", 444,964 bytes. -sha256 29941ab81ae2fd75cd5d7696937841165f7586ce5b8ef93c588b51564f1825e8 itsalive-ac13a064672e0408f2ad1055d64f60ec726deffb-cargo6.tar.gz +sha256 cc31af9df0acfab2058113d64cc7e3ac116603f6f576def80cd1aca9d32fe53a itsalive-1aa4d830b05633a2a11882bf0ed4a4e7df5231ab-cargo6.tar.gz # LICENSE at the tree root: the GPL-3.0 text. Unaffected by the vendoring # above, so unlike the tarball this IS an ordinary `sha256sum` of a file you # can fetch and check.