Arch Linux User Repository

You are probably right about the signature:

gpg --verify leafpad-0.8.19.tar.gz.sig 
gpg: assuming signed data in 'leafpad-0.8.19.tar.gz'
gpg: Signature made Mon 12 Dec 2022 11:01:56 AM CET
gpg:                using RSA key 05B80A3FFAF8FED36ADC7A31EE109F4A0F184934
gpg: Good signature from "Tarot Osuji <tarot@sdf.org>" [unknown]
gpg: WARNING: This key is not certified with a trusted signature!
gpg:          There is no indication that the signature belongs to the owner.
Primary key fingerprint: 05B8 0A3F FAF8 FED3 6ADC  7A31 EE10 9F4A 0F18 4934
[build@euronuc leafpad]$ gpg --verify leafpad-0.8.19.tar.gz.sig ^C
[build@euronuc leafpad]$ gpg --refresh 05B80A3FFAF8FED36ADC7A31EE109F4A0F184934
gpg: refreshing 1 key from hkps://keyserver.ubuntu.com
gpg: keyserver refresh failed: No data

The PGP key are in the subdirectory keys/pgp and can be imported

... And what is that supposed to be protecting us from, that the SHA signature in PKGBUILD doesn't do better? Not to mention that the package is now impossible to install automatically. It feels like the signature should just be dropped from this package.

Pulled in the patches from github and added them on top of 0.8.9, making the patching transparent. This has the same overall effect on the code as just using the git repo at the current revision, I'm aware of that. :-)

https://github.com/tarot231/leafpad has not a single tag or release marked. I reckon, this is the original author there. I see a fix in translations which I can pull in manually.

Rebasing the package on the git repo is an idea for fixes, you are right. But first there must be an idea which commit fits to the last release from 2022 (0.8.19).

The PGP key are in the subdirectory keys/pgp and can be imported with gpg --import < keys/pgp/05B80A3FFAF8FED36ADC7A31EE109F4A0F184934.asc. This is not a reason to flag a package out-of-date IMHO.

Why should I change leafpad to leafpad-git, wouldn't that just be a new package?

"# Maintainer: Aaron Griffin aaron@archlinux.org

Contributor: Link Dupont link@subpop.net

FINAL VERSION, behebt pkgver- und Autotools-Fehler.

pkgname=leafpad-git pkgver=0.8.19.r0.g555c82c pkgrel=1 pkgdesc='A notepad clone for GTK+ 2.0 (Git version)' arch=('x86_64') url='https://github.com/tarot231/leafpad' license=('GPL-2.0-or-later') depends=('gtk2')

HINZUGEFÜGT: autoconf, automake zum Generieren von ./configure

makedepends=('intltool' 'git' 'autoconf' 'automake')

source=('leafpad::git+https://github.com/tarot231/leafpad.git')

sha256sums=('SKIP')

prepare() { cd "${srcdir}/leafpad" }

pkgver() { cd "$srcdir/leafpad"

# Holt Datum und Commit-Hash für die Versionsnummer local ver=$(git log -1 --format="%cd" --date=format:"%Y%m%d") local hash=$(git rev-parse --short HEAD)

printf "0.8.19.r%s.g%s" "${ver}" "${hash}" }

build() { cd "${srcdir}/leafpad"

# NEUER SCHRITT: Generiert das fehlende ./configure Skript # Dies muss vor ./configure ausgeführt werden. autoreconf -fiv

./configure \ --prefix=/usr \ --enable-chooser make }

package() { cd "${srcdir}/leafpad"

make DESTDIR="${pkgdir}" install

echo 'StartupNotify=true' >> "${pkgdir}/usr/share/applications/leafpad.desktop" }"

Maintainer: Aaron Griffin aaron@archlinux.org

Contributor: Link Dupont link@subpop.net

pkgname=leafpad-git pkgver=0.8.19.r0.g555c82c # Dies wird später durch makepkg aktualisiert pkgrel=1 pkgdesc='A notepad clone for GTK+ 2.0 (Git version)' arch=('x86_64') url='https://github.com/tarot231/leafpad' license=('GPL-2.0-or-later') depends=('gtk2') makedepends=('intltool' 'git') # 'git' als makedepend hinzugefügt

Verwende die Git-URL als Quelle

source=('git+https://github.com/tarot231/leafpad.git' '0001-fix-format-security-error-from-gcc.patch')

sha256sums sind für Git-Quellen nicht notwendig

sha256sums=('SKIP' '2b99426837e0a78077931e33bbfac280b238e0d170366c09e62bf98770e837dc')

Die Funktion pkgver() extrahiert die korrekte Versionsnummer aus dem Git-Repo

pkgver() { cd "$srcdir/leafpad" # Setze die pkgver auf das letzte Tag plus r<commit-count>.<git-hash> git describe --long --tags | sed 's/([^-]*-)g/r\1&/;s/-/./g' }

prepare() { cd "${srcdir}/leafpad"

patch -Np1 < ../0001-fix-format-security-error-from-gcc.patch }

build() { cd "${srcdir}/leafpad"

./configure \ --prefix=/usr \ --enable-chooser make }

package() { cd "${srcdir}/leafpad"

make DESTDIR="${pkgdir}" install echo 'StartupNotify=true' >> "${pkgdir}/usr/share/applications/leafpad.desktop" }