Join GitHub today
GitHub is home to over 28 million developers working together to host and review code, manage projects, and build software together.Sign up
unnecessary git clone when updating package commit sha #1620
Steps to reproduce:
This means whenever I want to update the dep, the entire git repository is cloned over the network again. That's not very good. :-(
I may use git submodules as a workaround, but it's not nice.
referenced this issue
May 13, 2016
Summary is that it's too computationally intensive to allow fetching specific SHAs, as it requires determining if it's accessible via a ref. Skipping the reachability check is considered to be a potential security issue and it's a non-default repo option.
We could have heuristics to determine if something looks like a tag, and do a shallow clone. Dunno if this complication is worth it.
It doesn't, actually. I made some changes towards doing this, but currently it just deletes the old repo and reclones.
At least changing things to use