Skip to content

Commit a46a8b9

Browse files
committed
Switch from xz to zst compression for official artifacts
I've always preferred ZSTD do XZ anyway, but the default Ubuntu runner GitHub Actions used to use was so old that it did not have a sufficiently new autotools release to have ZSTD support. Hence XZ was always a compromise to get better compression without compatibility problems. Times have changed, the upstream `xz-utils` project has been backdoored, and ZSTD is available in Ubuntu LTS releases so we don't have a problem auto-generating releases any more. As-yet no evidence has surfaced that XZ compressed artifacts are compromised, but since there are no blockers anyway switching seems like a good plan to me.
1 parent 86b95ed commit a46a8b9

File tree

3 files changed

+3
-3
lines changed

3 files changed

+3
-3
lines changed

.github/workflows/release.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -41,8 +41,8 @@ jobs:
4141
prerelease: ${{ env.PRERELEASE }}
4242
body_path: changelog-HEAD
4343
files: |
44+
vcsh-${{ env.VERSION }}.tar.zst
4445
vcsh-${{ env.VERSION }}.zip
45-
vcsh-${{ env.VERSION }}.tar.xz
4646
4747
deploy-standalone:
4848
runs-on: ubuntu-latest

configure.ac

+1-1
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@ AC_PREREQ([2.69])
22
AC_INIT([vcsh], [m4_esyscmd(build-aux/git-version-gen .tarball-version)])
33
AC_CONFIG_AUX_DIR([build-aux])
44
AC_CONFIG_MACRO_DIR([build-aux])
5-
AM_INIT_AUTOMAKE([foreign tar-pax dist-xz dist-zip no-dist-gzip color-tests])
5+
AM_INIT_AUTOMAKE([foreign tar-pax dist-zstd dist-zip no-dist-gzip color-tests])
66
AM_SILENT_RULES([yes])
77

88
AM_CONDITIONAL([IS_SDIST],

doc/INSTALL.md

+1-1
Original file line numberDiff line numberDiff line change
@@ -81,7 +81,7 @@ $ pkg install vcsh
8181

8282
First you’ll want a copy of the source code.
8383
The easiest to use place to get this is the [latest release](https://github.com/RichiH/vcsh/releases/latest) posted on GitHub.
84-
The souree distribution will have a name such as `vcsh-2.0.0.tar.xz`.
84+
The souree distribution will have a name such as `vcsh-2.0.0.tar.zst`.
8585
Note under each release GitHub also show two “Source code” links that will download a snapshot of the repository; this is **not** the file you want (unless you want to jump through extra hoops).
8686
The official source release packages with the release version in the file names are the ones you want.
8787

0 commit comments

Comments
 (0)