You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Switch from xz to zst compression for official artifacts
I've always preferred ZSTD do XZ anyway, but the default Ubuntu runner
GitHub Actions used to use was so old that it did not have
a sufficiently new autotools release to have ZSTD support. Hence XZ was
always a compromise to get better compression without compatibility
problems. Times have changed, the upstream `xz-utils` project has been
backdoored, and ZSTD is available in Ubuntu LTS releases so we don't
have a problem auto-generating releases any more.
As-yet no evidence has surfaced that XZ compressed artifacts are
compromised, but since there are no blockers anyway switching seems like
a good plan to me.
Copy file name to clipboardexpand all lines: doc/INSTALL.md
+1-1
Original file line number
Diff line number
Diff line change
@@ -81,7 +81,7 @@ $ pkg install vcsh
81
81
82
82
First you’ll want a copy of the source code.
83
83
The easiest to use place to get this is the [latest release](https://github.com/RichiH/vcsh/releases/latest) posted on GitHub.
84
-
The souree distribution will have a name such as `vcsh-2.0.0.tar.xz`.
84
+
The souree distribution will have a name such as `vcsh-2.0.0.tar.zst`.
85
85
Note under each release GitHub also show two “Source code” links that will download a snapshot of the repository; this is **not** the file you want (unless you want to jump through extra hoops).
86
86
The official source release packages with the release version in the file names are the ones you want.
0 commit comments