Commit Graph
5 Commits
Author SHA1 Message Date
Asger Weirsøe 4338c8c034 Read the tarball host from a secret, not a variable
Run logs of a public repository are public, and Gitea prints variables in
them in clear text; only secrets are masked.

Claude-Session: https://claude.ai/code/session_01GGe7kUhooMFuzY6GaDb2w9
2026-10-01 17:46:00 +02:00
Asger Weirsøe c809ec8b77 Take the tarball host address from a repository variable
The upload steps named the web host by its internal address. It now comes
from the TARBALLZ_TARGET repository variable, so the public workflow carries
no infrastructure details.

Claude-Session: https://claude.ai/code/session_01GGe7kUhooMFuzY6GaDb2w9
2026-10-01 17:25:00 +02:00
Asger Weirsøe 90cb90349e Obfuscate the maintainer address, and allow PKGBUILD-only releases
The Maintainer line uses the usual AUR form (asger at weircon dot dk)
instead of a raw address that spam crawlers harvest. The AUR workflow
can now also be started by hand with a version and pkgrel, so a fix to
the PKGBUILD alone can be published without a new upstream release.

Claude-Session: https://claude.ai/code/session_012LCTmU2ewo8tnM1dByYAoG
2026-09-30 21:23:34 +02:00
Asger Weirsøe 11b52f03a3 Mirror the released PKGBUILD to the tarballz index
Claude-Session: https://claude.ai/code/session_012LCTmU2ewo8tnM1dByYAoG
2026-09-30 17:10:01 +02:00
Asger Weirsøe 8bbf7b8fbe AUR release 1 2026-05-20 18:54:29 +02:00