Ability to skip gpg verification #8
Merged
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
kroleg
force-pushed
the
ability-to-skip-gpg
branch
from
65528f0 to
fbabe09
Compare
- latest versions 1.22.20 - 1.22.22 don't have .asc signature file which makes it impossible to install these versions
- needed to split tar and gpg deps to allow to skip gpg
- got [ -z ${MISE_YARN_SKIP_GPG+false} ] idea from https://stackoverflow.com/a/13864829/832965
kroleg
force-pushed
the
ability-to-skip-gpg
branch
from
fbabe09 to
ec9ab08
Compare
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Latest v1 releases (
1.22.22,1.22.21,1.22.20) don't have signature files (.asc) which makes it impossible to install these versions (gpg signature verification doesn't pass). They say "we're working on fixing this" but issue persists since Nov 14, 2023 (release of 1.22.20)There is also an issue in original repo twuni#33
evidence
skipping gpg verification (curl)
skipping gpg verification (wget with --no-verbose added only for test to shorten output)
gpg still required if no env var set
latest version install fails without flag (curl)
latest version install fails without flag (wget with --no-verbose added only for test to shorten output)
