Arch Linux User Repository

Package is rewritten to build from source.

Signature of commit is checked by pgp. So you could encounter LocalCDN git repo ... FAILED (unknown public key 8F6DE3D614FCFD7A) error on the first build.
Public key is provided within the package and can be added into keyring using: gpg --import keys/pgp/*.asc or gpg --keyserver keys.openpgp.org --recv-keys 3F59043BE267E1B1177688AC8F6DE3D614FCFD7A

👍

Package is rewritten to build from source.

Signature of commit is checked by pgp. So you could encounter LocalCDN git repo ... FAILED (unknown public key 8F6DE3D614FCFD7A) error on the first build.
Public key is provided within the package and can be added into keyring using: gpg --import keys/pgp/*.asc or gpg --keyserver keys.openpgp.org --recv-keys 3F59043BE267E1B1177688AC8F6DE3D614FCFD7A

URL https://addons.mozilla.org/addon/localcdn-fork-of-decentraleyes.

Why does this use a pre-compiled .xpi if it isn't a -bin package?

In addition, the extension shouldn't be downloaded as extension.xpi, as this can cause issues, just download it with the original name.

Why not building it from source?

You can use https://archlinux.org/packages/community/any/web-ext/

@dr460nf1r3 Any reason not to include the patch that @eugene proposed?

I would propose to apply following changes:

• Correct license type
• Change source to project's releases page on codeberg.org
• Do not extract extension files

patch:

index 1b4c997..52712bc 100644
--- a/PKGBUILD
+++ b/PKGBUILD
@@ -1,17 +1,18 @@
 # Maintainer: dr460nf1r3 <dr460nf1r3 at garudalinux dot org>

 pkgname=firefox-extension-localcdn
-pkgver=2.6.30
+pkgver=2.6.32
 pkgrel=1
 pkgdesc='LocalCDN addon for Firefox'
 arch=('any')
 url='https://addons.mozilla.org/de/firefox/addon/localcdn-fork-of-decentraleyes/'
-license=('GPLV3')
+license=('GPL3')
 depends=('firefox')
 groups=('firefox-addons')
-source=("extension.xpi::https://addons.mozilla.org/firefox/downloads/file/3973471/localcdn_fork_of_decentraleyes-${pkgver}.xpi")
-md5sums=('119459ee75f5a18e593d0a72dfc6ff9f')
+source=("extension-$pkgver.xpi::https://codeberg.org/attachments/a5f2abee-81fb-4d42-ad24-3a6b4ae83221")
+noextract=("extension-$pkgver.xpi")
+md5sums=('042e389c60d2868c2097c034377ed9c9')

 package() {
-  install -Dm644 extension.xpi "${pkgdir}/usr/lib/firefox/browser/extensions/{b86e4813-687a-43e6-ab65-0bde4ab75758}.xpi"
+  install -Dm644 "extension-$pkgver.xpi" "${pkgdir}/usr/lib/firefox/browser/extensions/{b86e4813-687a-43e6-ab65-0bde4ab75758}.xpi"
 }

It's the same issue as a few months ago where you changed the package filename, but didn't change the download directory and checksum, so it installs the previous version. That's why the checksums were the same.

Changing the filename to the new package version doesn't actually give you the new extension file, unfortunately. Firefox is showing "Version 2.6.25" instead.

Please change the source to: https://addons.mozilla.org/firefox/downloads/file/3955239/localcdn_fork_of_decentraleyes-2.6.28.xpi

Notice source's URL directory (/3955239) changes with every version.

The md5sum is not the same as the file has and it wasnt the first time according to the last comment here. updpkgsum is helpful for this task but (if I remember correctly) skips files that are already downloaded. As the filename does not change its "already downloaded". For this reason I stopped renaming the source file and use one with the pkgver (and arch when not any) for my AUR packages. That way tooling will update the m5sums.

I hope this can be fixed so its less errorprone in the future!

How was this updated without changing the md5sum value?