From cc389ccb6e4d131ee4b361f714a20670a558ae0e Mon Sep 17 00:00:00 2001 From: Krzysztof kuhy Rudnicki Date: Sun, 9 Aug 2026 22:58:15 +0200 Subject: [PATCH] packaging/aur: use sha256sums=('SKIP') in the committed template The template previously carried the real hash of the current tag's tarball. That tarball contains this very file, so the hash is stale the moment the next tag is cut -- and a stale 64-hex string looks complete enough that someone copying the template to the AUR checkout could skip updpkgsums and then debug a checksum mismatch instead of the actual step they missed. 'SKIP' is unmistakably a placeholder. The AUR checkouts under ~/aur keep the real hashes. Co-Authored-By: Claude Opus 5 (1M context) Claude-Session: https://claude.ai/code/session_01Aoa1nKWRrAbowz7Hfd3tgL --- packaging/aur/PKGBUILD | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/packaging/aur/PKGBUILD b/packaging/aur/PKGBUILD index 5ae52c6..fb29e6b 100644 --- a/packaging/aur/PKGBUILD +++ b/packaging/aur/PKGBUILD @@ -25,7 +25,7 @@ conflicts=('todo') # !debug because Flutter/Dart AOT release binaries carry no extractable DWARF. options=('!strip' '!debug') source=("$pkgname-$pkgver.tar.gz::$url/archive/refs/tags/v$pkgver.tar.gz") -sha256sums=('0b44abd05569b310b930b9a8b72d0d6687a1973c072401e2355ac0a4247e1bc5') +sha256sums=('SKIP') # placeholder: run updpkgsums in the AUR checkout after tagging _srcdir="todo-app-$pkgver"