radicle-cli-git

MEDIUM
maintainer intelfx 2 votes base radicle-git scanned 2026-08-20 21:12:41.539726
View on AUR
Why flagged

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:24 "heartwood::git+https://$_node/${_rid#rad:}.git"

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: Ivan Shapovalov <intelfx@intelfx.name>
2
3pkgbase=radicle-git
4pkgname=(radicle-{cli,node}-git)
5pkgver=1.10.1.r8.gea66c657d
6pkgrel=1
7pkgdesc="open source, peer-to-peer code collaboration stack built on Git"
8arch=('x86_64')
9license=('Apache-2.0 OR MIT')
10_node="seed.radicle.dev"
11_rid="rad:z3gqcJUoA1n9HaHKufZs5FCSGazv5"
12url="https://radicle.dev"
13depends=(
14 'glibc'
15 'libgcc' 'libgcc_s.so'
16 'libgit2' 'libgit2.so'
17)
18makedepends=(
19 'git'
20 'cargo'
21 'asciidoctor'
22)
23source=(
24 "heartwood::git+https://$_node/${_rid#rad:}.git"
25 "0001-build-work-around-sccache-do-not-read-SOURCE_DATE_EP.patch"
26 "radicle-node.system."{service,socket}
27 "radicle-node.user."{service,socket}
28 "radicle-node.dnssd"
29)
30b2sums=('SKIP'
31 '864190b259d2269ca412d11ca3998a2e35cdce72cd0b9127cda7788ad63ede1d8196a55aaf9df9b91805c6546d0dae81522dd2bb615aa787454687516e914086'
32 '14d3033ff232682b35d3f3a94436b86ad57f3be767e4681c18d1a8a4435968c31e0c36b5b617734035e75be144c99db7447be70741430962c614f0c17a59fecd'
33 'ef60f99e65177accd1b34447dab134ad26b576050ff15c9bfd6483bacaef801106a6ff5694383b7446b366818b1545c6506ccd6d1b153532b99b15361ddd8e41'
34 '18ade1de3d3195e8b4cfcb0c479d2f597b53cbb83bde559d69abd34587c8c45371c12e242621c92607c3202f2f4ee3fb21b462fc5150939f50744cc045baccff'
35 '46872e0bd50bbf1528321de5522a9af95227fe43f7880db50968cfd1572a719bd55b874f56f55cd5d4e653565504799d1e54ac16cabe29f65a08089985fdaa27'
36 '0276bce489e05115e7a63454aa0fa508d7bffba2add4249d1fcd449137104bc75882f5ff06077216fec5cbede5f2a1f8699e82bbc3fda3bf3b2354dfcf5dd0ac')
37
38pkgver() {
39 cd heartwood
40 git describe --long --tags | sed -r 's#releases/##; s/^v//; s/-rc\./rc/; s/[^-]*-g/r&/; s/-/./g'
41}
42
43prepare() {
44 cd heartwood
45
46 # work around sccache brokenness around $SOURCE_DATE_EPOCH
47 git apply -3 "$srcdir/0001-build-work-around-sccache-do-not-read-SOURCE_DATE_EP.patch"
48
49 cargo fetch --locked --target host-tuple
50}
51
52build() {
53 cd heartwood
54
55 # Some crates seem to hardcode or prefer clang; undo that
56 export CC="${CC-gcc}"
57 export CXX="${CXX-g++}"
58
59 # _Disable_ cross-toolchain LTO because we are using different toolchains
60 # for C/C++ and Rust code (i.e., LLVM LTO is incompatible with GCC LTO).
61 # In this project, C/C++ code is linked into Rust code. Therefore, apply
62 # a workaround to force generation of normal object code on C side:
63 CFLAGS+=" -ffat-lto-objects"
64 CXXFLAGS+=" -ffat-lto-objects"
65
66 export LIBGIT2_NO_VENDOR=1
67
68 export RADICLE_VERSION="$pkgver"
69 cargo build \
70 -p radicle-cli \
71 -p radicle-node \
72 -p radicle-remote-helper \
73 --frozen \
74 --release \
75 --bins \
76 # EOL
77
78 mkdir -p target/release/man
79 scripts/build-man-pages.sh target/release/man *.adoc
80}
81
82check() {
83 local _test_skips=(
84 # https://radicle.zulipchat.com/#narrow/stream/369277-heartwood/topic/Flaky.20tests/near/438352360
85 "tests::e2e::test_connection_crossing"
86 # https://radicle.zulipchat.com/#narrow/stream/369277-heartwood/topic/Clone.20Partial.20Fail.20Flake
87 rad_clone_partial_fail
88 # this test seems flaky
89 rad_init_sync_preferred
90 )
91
92 cd heartwood
93 (
94 # Ideally, we'd use `env -i`, but `cargo test` forces a recompilation
95 # if build flags don't match (+ we want to test what we ship anyway).
96 # As a stop-gap, unset variables that are known to break tests
97 # (and might have been set in makepkg.conf).
98 unset "${!GIT_@}"
99 # Tests fail with ENFILE, crank it up to eleven
100 ulimit -n hard
101 # Tests require the newly built tools, add them to $PATH
102 PATH="$PWD/target/release:$PATH"
103 cargo test \
104 --frozen \
105 -- \
106 "${_test_skips[@]/#/--skip=}" \
107 # EOL
108 )
109}
110
111package_radicle-node-git() {
112 pkgdesc+=" - node"
113 provides=('radicle-node')
114 conflicts=('radicle-node')
115
116 cd heartwood
117 install -Dm755 \
118 target/release/radicle-node \
119 -t "$pkgdir/usr/bin"
120
121 install -Dm644 \
122 target/release/man/radicle-node.1 \
123 -t "$pkgdir/usr/share/man/man1"
124
125 for _t in service socket; do
126 install -Dm644 \
127 "$srcdir/radicle-node.system.$_t" \
128 "$pkgdir/usr/lib/systemd/system/radicle-node.$_t"
129 install -Dm644 \
130 "$srcdir/radicle-node.user.$_t" \
131 "$pkgdir/usr/lib/systemd/user/radicle-node.$_t"
132 done
133 install -Dm644 \
134 "$srcdir/radicle-node.dnssd" \
135 -t "$pkgdir/usr/share/doc/$pkgname/systemd"
136
137 install -Dm644 \
138 LICENSE-MIT \
139 LICENSE-APACHE \
140 -t "$pkgdir/usr/share/licenses/$pkgname"
141}
142
143package_radicle-cli-git() {
144 pkgdesc+=" - cli"
145 provides=('radicle-cli')
146 conflicts=('radicle-cli')
147
148 cd heartwood
149
150 install -Dm755 \
151 target/release/rad \
152 target/release/git-remote-rad \
153 -t "$pkgdir/usr/bin"
154
155 install -Dm644 \
156 target/release/man/rad.1 \
157 target/release/man/rad-*.1 \
158 target/release/man/git-remote-rad.1 \
159 -t "$pkgdir/usr/share/man/man1"
160
161 # Completions
162 "${pkgdir}/usr/bin/rad" completion bash \
163 | install -Dm644 /dev/stdin "${pkgdir}/usr/share/bash-completion/completions/rad"
164 "${pkgdir}/usr/bin/rad" completion zsh \
165 | install -Dm644 /dev/stdin "${pkgdir}/usr/share/zsh/site-functions/_rad"
166 "${pkgdir}/usr/bin/rad" completion fish \
167 | install -Dm644 /dev/stdin "${pkgdir}/usr/share/fish/vendor_completions.d/rad.fish"
168
169 install -Dm644 \
170 LICENSE-MIT \
171 -t "$pkgdir/usr/share/licenses/$pkgname"
172}
173

Changes since previous scan

--- PKGBUILD @ 2026-06-19 22:34
+++ PKGBUILD @ 2026-08-20 21:12
@@ -2,20 +2,17 @@
pkgbase=radicle-git
pkgname=(radicle-{cli,node}-git)
-pkgver=1.9.1.r3.g0a03f1c84
+pkgver=1.10.1.r8.gea66c657d
pkgrel=1
pkgdesc="open source, peer-to-peer code collaboration stack built on Git"
arch=('x86_64')
license=('Apache-2.0 OR MIT')
-_node="seed.radicle.xyz"
+_node="seed.radicle.dev"
_rid="rad:z3gqcJUoA1n9HaHKufZs5FCSGazv5"
-url="https://radicle.xyz"
+url="https://radicle.dev"
depends=(
'glibc'
- 'libgcc'
- 'zlib'
- 'git'
- 'openssh'
+ 'libgcc' 'libgcc_s.so'
'libgit2' 'libgit2.so'
)
makedepends=(
@@ -26,18 +23,12 @@
source=(
"heartwood::git+https://$_node/${_rid#rad:}.git"
"0001-build-work-around-sccache-do-not-read-SOURCE_DATE_EP.patch"
- "0002-git-ref-format-fix-macros-for-debug_assertions.patch"
- "0003-git-ref-format-support-tests-with-debug_assertions.patch"
- "0004-node-fix-test_node_announcement_validate-for-debug_a.patch"
"radicle-node.system."{service,socket}
"radicle-node.user."{service,socket}
"radicle-node.dnssd"
)
b2sums=('SKIP'
'864190b259d2269ca412d11ca3998a2e35cdce72cd0b9127cda7788ad63ede1d8196a55aaf9df9b91805c6546d0dae81522dd2bb615aa787454687516e914086'
- 'd18c36af0f661c740698c059a6916dc115ff0dd099577bc68e3d760b34acf3128de9c4c6f3cb3f4b5d3f7da18fbc7afd84f361d693d21583686b6a83cca1c478'
- '203efd965ca599db187dfc42f72a493b9444bdaf37a3b813cc9b850685c82625496c24647172101a2e6ce77c4f6a4cf5453b53874039ed4ebbcfd80e907fe05a'
- '3f3c841b97ab25637b1ce3369455a40af3c0bb50d5e34a15e348c7d558a7ed9b87902371682c828fbd05673e4da54284556f10425595dedca5494b81a897c235'
'14d3033ff232682b35d3f3a94436b86ad57f3be767e4681c18d1a8a4435968c31e0c36b5b617734035e75be144c99db7447be70741430962c614f0c17a59fecd'
'ef60f99e65177accd1b34447dab134ad26b576050ff15c9bfd6483bacaef801106a6ff5694383b7446b366818b1545c6506ccd6d1b153532b99b15361ddd8e41'
'18ade1de3d3195e8b4cfcb0c479d2f597b53cbb83bde559d69abd34587c8c45371c12e242621c92607c3202f2f4ee3fb21b462fc5150939f50744cc045baccff'
@@ -54,13 +45,8 @@
# work around sccache brokenness around $SOURCE_DATE_EPOCH
git apply -3 "$srcdir/0001-build-work-around-sccache-do-not-read-SOURCE_DATE_EP.patch"
- # fix git-ref-format macros in release mode
- git apply -3 "$srcdir/0002-git-ref-format-fix-macros-for-debug_assertions.patch"
- # fix tests in release mode
- git apply -3 "$srcdir/0003-git-ref-format-support-tests-with-debug_assertions.patch"
- git apply -3 "$srcdir/0004-node-fix-test_node_announcement_validate-for-debug_a.patch"
- cargo fetch --locked --target "$(rustc --print host-tuple)"
+ cargo fetch --locked --target host-tuple
}
build() {
@@ -91,15 +77,16 @@
mkdir -p target/release/man
scripts/build-man-pages.sh target/release/man *.adoc
-
- # XXX: tests rebuild and overwrite some of the binaries
- cp -a target/release -T target/dist
}
check() {
local _test_skips=(
- # flaky test
+ # https://radicle.zulipchat.com/#narrow/stream/369277-heartwood/topic/Flaky.20tests/near/438352360
+ "tests::e2e::test_connection_crossing"
+ # https://radicle.zulipchat.com/#narrow/stream/369277-heartwood/topic/Clone.20Partial.20Fail.20Flake
rad_clone_partial_fail
+ # this test seems flaky
+ rad_init_sync_preferred
)
cd heartwood
@@ -128,11 +115,11 @@
cd heartwood
install -Dm755 \
- target/dist/radicle-node \
+ target/release/radicle-node \
-t "$pkgdir/usr/bin"
install -Dm644 \
- target/dist/man/radicle-node.1 \
+ target/release/man/radicle-node.1 \
-t "$pkgdir/usr/share/man/man1"
for _t in service socket; do
@@ -161,15 +148,23 @@
cd heartwood
install -Dm755 \
- target/dist/rad \
- target/dist/git-remote-rad \
+ target/release/rad \
+ target/release/git-remote-rad \
-t "$pkgdir/usr/bin"
install -Dm644 \
- target/dist/man/rad.1 \
- target/dist/man/rad-*.1 \
- target/dist/man/git-remote-rad.1 \
+ target/release/man/rad.1 \
+ target/release/man/rad-*.1 \
+ target/release/man/git-remote-rad.1 \
-t "$pkgdir/usr/share/man/man1"
+
+ # Completions
+ "${pkgdir}/usr/bin/rad" completion bash \
+ | install -Dm644 /dev/stdin "${pkgdir}/usr/share/bash-completion/completions/rad"
+ "${pkgdir}/usr/bin/rad" completion zsh \
+ | install -Dm644 /dev/stdin "${pkgdir}/usr/share/zsh/site-functions/_rad"
+ "${pkgdir}/usr/bin/rad" completion fish \
+ | install -Dm644 /dev/stdin "${pkgdir}/usr/share/fish/vendor_completions.d/rad.fish"
install -Dm644 \
LICENSE-MIT \

Scan history

Scanned at (UTC)SeverityRules
2026-08-20 21:12:41 Medium 1
2026-06-19 22:34:54 Clean 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion