Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

rockspec: Use HTTPS transport for fetching sources #494

Merged
merged 1 commit into from Nov 8, 2021

Conversation

pdesaulniers
Copy link
Member

@pdesaulniers pdesaulniers commented Nov 6, 2021

GitHub are dropping support for the unencrypted git:// protocol: https://github.blog/2021-09-01-improving-git-protocol-security-github/

When installing tl through luarocks, this would cause issues such as:

$ luarocks --dev install tl

Cloning into 'tl'...

fatal: remote error: 
  The unauthenticated git protocol on port 9418 is no longer supported.

Please see https://github.blog/2021-09-01-improving-git-protocol-security-github/ for more information.

To fix the issue, this PR sets the source to an HTTPS URL, instead of a git:// URL.

Related: teal-language/teal-types#29

GitHub are turning off the unencrypted Git protocol: https://github.blog/2021-09-01-improving-git-protocol-security-github/

When installing tl through luarocks, this would cause issues such as:

```
luarocks install tl
Cloning into 'tl'...

fatal: remote error: 
  The unauthenticated git protocol on port 9418 is no longer supported.

Please see https://github.blog/2021-09-01-improving-git-protocol-security-github/ for more information.
```

To fix the issue, we set the source to an HTTPS URL, instead of a git:// URL.
@github-actions
Copy link

github-actions bot commented Nov 6, 2021

Teal Playground URL: https://494--teal-playground.netlify.app

@hishamhm hishamhm merged commit afb648b into master Nov 8, 2021
@hishamhm hishamhm deleted the rockspec-https-source branch November 8, 2021 10:46
@hishamhm
Copy link
Member

hishamhm commented Nov 8, 2021

@pdesaulniers Ooh, thanks for the heads up! This is likely to cause issues to a lot of existing rockspecs in the luarocks.org ecosystem; I think I should probably add a special case for this to auto-convert it and push a new LuaRocks release to make this Github switch smooth to all users.

hishamhm added a commit to luarocks/luarocks that referenced this pull request Nov 8, 2021
This avoids having to fix every rockspec that uses github.com.

See https://github.blog/2021-09-01-improving-git-protocol-security-github/

For more context, see:
teal-language/tl#494
@hishamhm
Copy link
Member

hishamhm commented Nov 9, 2021

I also released LuaRocks 3.8.0, which autoconverts git://github.com to git+https://github.com

ochaton pushed a commit to ochaton/luarocks that referenced this pull request Jun 14, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants