From 5df10c04cd4ffe223f346b8bd9e5cd80dedbfe34 Mon Sep 17 00:00:00 2001 From: "Adam J. Stewart" Date: Wed, 23 Mar 2022 02:50:00 -0500 Subject: Use stable URLs and `?full_index=1` for all github patches (#29239) The number of commit characters in patch files fetched from GitHub can change, so we should use `full_index=1` to enforce full commit hashes (and a stable patch `sha256`). Similarly, URLs for branches like `master` don't give us stable patch files, because branches are moving targets. Use specific tags or commits for those. - [x] update all github patch URLs to use `full_index=1` - [x] don't use `master` or other branches for patches - [x] add an audit check and a test for `?full_index=1` Co-authored-by: Todd Gamblin --- var/spack/repos/builtin/packages/boost/package.py | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) (limited to 'var/spack/repos/builtin/packages/boost/package.py') diff --git a/var/spack/repos/builtin/packages/boost/package.py b/var/spack/repos/builtin/packages/boost/package.py index d84695418e..83b2012d3d 100644 --- a/var/spack/repos/builtin/packages/boost/package.py +++ b/var/spack/repos/builtin/packages/boost/package.py @@ -308,14 +308,14 @@ class Boost(Package): # Fix float128 support when building with CUDA and Cray compiler # See https://github.com/boostorg/config/pull/378 - patch("https://github.com/boostorg/config/commit/fee1ad07968386b6d547f089311b7a2c1bf7fa55.patch", - sha256="3b159d65a0d3d2df2a21c6bf56ffaba943fce92d2d41d628b2c4d2e924e0f421", + patch("https://github.com/boostorg/config/commit/fee1ad07968386b6d547f089311b7a2c1bf7fa55.patch?full_index=1", + sha256="666eec8cfb0f71a87443ab27d179a9771bda32bcb8ff5e16afa3767f7b7f1e70", when="@:1.76%cce", level=2) # Fix building with Intel compilers - patch("https://github.com/bfgroup/b2/commit/23212066f0f20358db54568bb16b3fe1d76f88ce.patch", - sha256="93f4aad8f88d1437e50d95a2d066390ef3753b99ef5de24f7a46bc083bd6df06", + patch("https://github.com/bfgroup/b2/commit/23212066f0f20358db54568bb16b3fe1d76f88ce.patch?full_index=1", + sha256="4849671f9df4b8f3c962130d7f6d44eba3b20d113e84f9faade75e6469e90310", when="@1.77.0", working_dir="tools/build") -- cgit v1.2.3-60-g2f50