sources: add support for source checksum
Metadata
Current evaluation
Merged in #26 via bff37166, adding file checksum verification for the source-checksum part property.
Resolution: closed resolved
Reason: PR #26 was merged into the mainline by commit bff37166. Implementation commit 255e7808 added checksum parsing and verification for downloaded file sources.
Evaluated by: mr-cal-bot
No scores available.
Issue body
Add support to computing file checksum to validate the source-checksum
part property.
Signed-off-by: Claudio Matsuoka <claudio.matsuoka@canonical.com>
- [x] Have you signed the [CLA](http://www.ubuntu.com/legal/contributors/)?
-----
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| stealth/space-bunny-alpha | — | closed resolved | Merged in #26 via bff37166, adding file checksum verification for the source-checksum part property. | |
| stealth/space-bunny-alpha | — | closed resolved | Merged PR #26, adding file-checksum computation to validate part sources’ source-checksum property. | |
| qwen/qwen3.6-35b-a3b | — | — | Merged: adds file checksum computation to validate the source-checksum part property. Approved by two reviewers and passed CI checks. | |
| qwen3.6-35b-a3b-mtp-q6 | — | — | Merged maintainer Claudio Matsuoka's changes to compute file checksums for validating the source-checksum part property. The feature was integrated into the codebase without additional review comments or revisions. |
Update history
No update history recorded yet.
Related work
-
Related To:
canonical/craft-parts#1683
(confidence 95%)
Later improved the checksum-mismatch error message.
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #980 sources: add optional "source-checksum" property | snapcraft | merged | PR #980 merged as commit 3e9c4d381, adding the optional source-checksum property to verify integrity of tar, zip, deb and rpm sources, with algorithm/digest errors plus unit and integration tests. | |
| #619 Add source-checksum option | snapcraft | closed | Closed as inactive after review; source-checksum support was later delivered by merged PR #980 in commit 3e9c4d381. |