From dac31c997ea6c2c0eb894c560aadef978cb0aafc Mon Sep 17 00:00:00 2001 From: Krzysztof kuhy Rudnicki Date: Sun, 9 Aug 2026 22:58:15 +0200 Subject: [PATCH] packaging/aur: use sha256sums=('SKIP') in the committed template The template previously carried the real hash of the current tag's tarball. That tarball contains this very file, so the hash is stale the moment the next tag is cut -- and a stale 64-hex string looks complete enough that someone copying the template to the AUR checkout could skip updpkgsums and then debug a checksum mismatch instead of the actual step they missed. 'SKIP' is unmistakably a placeholder. The AUR checkouts under ~/aur keep the real hashes. Co-Authored-By: Claude Opus 5 (1M context) Claude-Session: https://claude.ai/code/session_01Aoa1nKWRrAbowz7Hfd3tgL --- packaging/aur/PKGBUILD | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/packaging/aur/PKGBUILD b/packaging/aur/PKGBUILD index 40a2f5c..9d3cf26 100644 --- a/packaging/aur/PKGBUILD +++ b/packaging/aur/PKGBUILD @@ -24,7 +24,7 @@ makedepends=('flutter') # flutter-bin provides `flutter`; either satisfies thi # !debug because Flutter/Dart AOT release binaries carry no extractable DWARF. options=('!strip' '!debug') source=("$pkgname-$pkgver.tar.gz::$url/archive/refs/tags/v$pkgver.tar.gz") -sha256sums=('bfe51056e6b154890b86568d7462ec0f8caf47e4e826e246081eb158be45d22e') +sha256sums=('SKIP') # placeholder: run updpkgsums in the AUR checkout after tagging # The Flutter app lives in the repo's app/ subdirectory, so the tarball # extracts as diet-guard-$pkgver/app/ while LICENSE sits at the repo root.