Closed infeo closed 1 month ago
The PKGBUILD
and .SRCINFO
files for the cryptomator
package have been updated to version 1.14.0_beta2
, marking a transition to a beta release. Notable enhancements include the introduction of version variables for JDK and JavaFX, updated source URLs for improved maintainability, and revised SHA256 checksums for security. The build process has been optimized with additional modules and Java options, enhancing functionality and integration with Linux systems.
Files | Change Summary |
---|---|
PKGBUILD , .SRCINFO |
Version updated to 1.14.0_beta2 , revision set to 1 , new variables _jdkver and _jfxver added, source URLs modified, SHA256 checksums revised, and new Java options integrated for improved functionality. |
PKGBUILD
file for the cryptomator
package, specifically updating the pkgrel
value and modifying the Maven build command, which may relate to the overall build process and package management in the main PR.cryptomator
package version from 1.12.3
to 1.13.0
, including changes to the JDK and JFX versions, which are directly relevant to the version updates in the main PR from 1.13.0
to 1.14.0_beta2
.π° In the land of code so bright,
A new version hops into sight,
With JDK and JavaFX in tow,
Cryptomator's ready to grow!
Bugs squashed, features anew,
Letβs celebrate this leap, hooray, woo! π
.SRCINFO
23-24: Detected a Generic API Key, potentially exposing access to various services and sensitive operations. (generic-api-key)
.SRCINFO (4)
`3-3`: **Version increment looks good.** The `pkgver` variable has been updated to `1.14.0`, indicating a minor version update for the `cryptomator` package. This change aligns with the overall version increment described in the PR objectives. --- `4-4`: **Release number reset is appropriate.** The `pkgrel` variable has been reset to `1`, which is a standard practice when updating the package version. This change aligns with the version increment and helps maintain a clean release cycle for the package. --- `21-22`: **Source URL updates are correct.** The `source` variables have been updated to point to the new version's tarball and signature files, ensuring that the correct files are fetched during package installation. The URLs have been updated consistently to match the new version number. --- `24-24`: **Checksum update is valid.** The `sha256sums` variable has been updated with a new checksum value corresponding to the new version's tarball. This change ensures the integrity and authenticity of the downloaded files during package installation. Regarding the static analysis hint from Gitleaks, it appears to be a false positive. The checksum value is not an API key but rather a unique identifier for the tarball. No further action is needed.Tools
Gitleaks
23-24: Detected a Generic API Key, potentially exposing access to various services and sensitive operations. (generic-api-key)PKGBUILD (7)
`7-7`: **LGTM!** The `pkgver` has been correctly updated to reflect the new version `1.14.0`. --- `8-8`: **LGTM!** The `pkgrel` has been correctly reset to `1` for the new package version. --- `16-17`: **LGTM!** Introducing `_jdkver` and `_jfxver` variables to store the JDK and JavaFX versions is a good practice. It improves maintainability and allows for easier updates in the future. --- `20-23`: **LGTM!** Updating the `source_x86_64` and `source_aarch64` arrays to use the `_jdkver` and `_jfxver` variables ensures that the correct binaries are pulled for the specified versions. This change is consistent with the introduction of the version variables. --- `25-30`: **LGTM!** The `sha256sums`, `sha256sums_x86_64`, and `sha256sums_aarch64` arrays have been properly updated with new checksums to match the new sources for the updated package version. This is crucial to ensure the integrity and security of the downloaded files. --- `56-56`: **Verify the impact of adding the `java.compiler` module.** Adding the `java.compiler` module to the `--add-modules` list may improve the functionality of the Cryptomator application. However, the exact impact depends on how the application uses this module. Please verify that including the `java.compiler` module does not introduce any unintended consequences or compatibility issues. --- `90-90`: **Verify the autostart behavior.** Adding the `--java-options "-Dcryptomator.integrationsLinux.autoStartCmd=\"cryptomator\""` flag suggests that this change enables automatic starting of the Cryptomator application on Linux systems. This can improve the user experience by eliminating the need for manual startup. Please verify that setting the `cryptomator.integrationsLinux.autoStartCmd` property to `"cryptomator"` results in the expected autostart behavior without any unintended consequences.
This PR updates the Cryptomator package to version 1.14.0
Changes so far: