[gDesklets] 0.35.4 tarball release breakage

[guenther <guenther rudersport de>]

Hey guys,

I have been redirected here from #gdesklets to discuss this issue.

I noticed someone uploaded a 0.35.4 tarball a *second* time. Different
tarball, but the very same version number than before. This seriously is
bad.

This just broke gDesklets inclusion in the GARNOME distribution, since
the version is the very same, but the md5sum changed. Doing this is bad
practice, and generally should never be done. Also, it ruins any trust
in the tarballs and their integrity.


FWIW, we've been there before. (IIRC the master tarball has been lost
last time due to a severe server outage and needed to be re-created.
However, the same version number should never have been used in the
first place.) You guys responded fast and restored the previous tarball
from an archive copy provided by the GARNOME team.

I would appreciate, if you can do this again. You can find the *correct*
0.35.4 bz2 tarball in my gnome.org home [1], md5sum verified. A new
tarball with the translation changes should be released as 0.35.4.1 or
maybe even 0.35.5.


BTW, since you guys are using GNOME infrastructure (SVN and bugzilla) it
is my understanding that you are entitled to using ftp.g.o for uploading
your releases, too.

  guenther


[1] http://www.gnome.org/~kbrae/

-- 
char *t="\10pse\0r\0dtu\0  ghno\x4e\xc8\x79\xf4\xab\x51\x8a\x10\xf4\xf4\xc4";
main(){ char h,m=h=*t++,*x=t+2*h,c,i,l=*x,s=0; for (i=0;i<l;i++){ i%8? c<<=1:
(c=*++x); c&128 && (s+=h); if (!(h>>=1)||!t[s+h]){ putchar(t[s]);h=m;s=0; }}}