vhaudiquet
e1668d5d80
The Ubuntu development series (stonking) Sources.gz no longer ships a Checksums-Sha256 field, only Checksums-Sha512 and the legacy Files (MD5) field. The package_info parser only read Checksums-Sha256, so the file list ended up empty and fetch_orig_tarball panicked on Option::unwrap() when looking for the orig tarball. - Add a ChecksumAlgo enum (Md5/Sha256/Sha512) to FileEntry, replacing the hardcoded sha256 field, and parse the strongest available checksum field (Sha256 > Sha512 > MD5). - Make download_file_checksum verify against the correct algorithm instead of always using SHA-256. - Replace the unwrap() on the orig tarball search with a proper error listing the available files, so future regressions fail clearly instead of panicking. - Add md-5 dependency for MD5 verification.
40 lines
857 B
TOML
40 lines
857 B
TOML
[package]
|
|
name = "pkh"
|
|
version = "0.1.0"
|
|
edition = "2024"
|
|
authors = ["vhaudiquet"]
|
|
|
|
[dependencies]
|
|
clap = { version = "4.5.51", features = ["cargo"] }
|
|
cmd_lib = "2.0.0"
|
|
flate2 = "1.1.5"
|
|
serde = { version = "1.0.228", features = ["derive"] }
|
|
libc = "0.2"
|
|
csv = "1.3.0"
|
|
reqwest = { version = "0.12.9", features = ["blocking", "json", "stream"] }
|
|
git2 = "0.20.2"
|
|
regex = "1"
|
|
chrono = "0.4"
|
|
tokio = { version = "1.41.1", features = ["full"] }
|
|
sha2 = "0.10.8"
|
|
md-5 = "0.10"
|
|
hex = "0.4.3"
|
|
log = "0.4.28"
|
|
indicatif = "0.18.3"
|
|
indicatif-log-bridge = "0.2.3"
|
|
env_logger = "0.11.8"
|
|
futures-util = { version = "0.3.31", features = ["tokio-io"] }
|
|
tar = "0.4"
|
|
xz2 = "0.1"
|
|
serde_json = "1.0.145"
|
|
directories = "6.0.0"
|
|
ssh2 = "0.9.5"
|
|
gpgme = "0.11"
|
|
serde_yaml = "0.9"
|
|
lazy_static = "1.4.0"
|
|
|
|
[dev-dependencies]
|
|
test-log = "0.2.19"
|
|
serial_test = "3.3.1"
|
|
tempfile = "3.10.1"
|