New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Update GitHub generated Download URL for maximum compatibility. #157

Closed

tdruez opened this issue Jul 4, 2024 · 0 comments

Assignees

Collaborator

tdruez commented Jul 4, 2024

From aboutcode-org/dejacode#141

>>> from packageurl.contrib import purl2url
>>> purl = "pkg:github/StonyShi/reactor-netty-jersey@ac525d91ff1724395640531df08e3e4eabef207d"
>>> purl2url.get_download_url(purl)
'https://github.com/stonyshi/reactor-netty-jersey/archive/refs/tags/ac525d91ff1724395640531df08e3e4eabef207d.tar.gz'

The extra refs/tags is fine when the version is a git tag but it is problematic when using a commit ref.

As mentioned in aboutcode-org/dejacode#141 (comment) the URL without the refs/tags works for both tags and commits.

The text was updated successfully, but these errors were encountered:

tdruez self-assigned this

tdruez added a commit that referenced this issue


          Update GitHub generated Download URL for maximum compatibility #157

aa217f1

Signed-off-by: tdruez <tdruez@nexb.com>

tdruez closed this as completed

tdruez mentioned this issue

BUG: Add Package constructs incorrect download URL from a GitHub purl aboutcode-org/dejacode#141

Closed

netbsd-srcmastr pushed a commit to NetBSD/pkgsrc that referenced this issue


          py-packageurl: update to 0.15.2.

e14d50c

0.15.2 (2024-07-04)
-------------------

- Update GitHub generated Download URL for maximum compatibility.
  package-url/packageurl-python#157

andrewpollock pushed a commit to google/osv.dev that referenced this issue


          chore(deps): lock file maintenance api (#2379)

53238a6

[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Type | Update | Change | Age | Adoption | Passing |
Confidence |
|---|---|---|---|---|---|---|---|
|  |  | lockFileMaintenance | All locks refreshed |  |  |  |  |
| [grpcio-health-checking](https://grpc.io) | dependencies | minor |
`==1.62.2` -> `==1.64.1` |
[![age](https://developer.mend.io/api/mc/badges/age/pypi/grpcio-health-checking/1.64.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/pypi/grpcio-health-checking/1.64.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/pypi/grpcio-health-checking/1.62.2/1.64.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/pypi/grpcio-health-checking/1.62.2/1.64.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
| grpcio-health-checking | packages | minor | `==1.62.2` -> `==1.64.1` |
[![age](https://developer.mend.io/api/mc/badges/age/pypi/grpcio-health-checking/1.64.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/pypi/grpcio-health-checking/1.64.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/pypi/grpcio-health-checking/1.62.2/1.64.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/pypi/grpcio-health-checking/1.62.2/1.64.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
| [grpcio-reflection](https://grpc.io) | dependencies | minor |
`==1.62.2` -> `==1.64.1` |
[![age](https://developer.mend.io/api/mc/badges/age/pypi/grpcio-reflection/1.64.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/pypi/grpcio-reflection/1.64.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/pypi/grpcio-reflection/1.62.2/1.64.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/pypi/grpcio-reflection/1.62.2/1.64.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
| grpcio-reflection | packages | minor | `==1.62.2` -> `==1.64.1` |
[![age](https://developer.mend.io/api/mc/badges/age/pypi/grpcio-reflection/1.64.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/pypi/grpcio-reflection/1.64.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/pypi/grpcio-reflection/1.62.2/1.64.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/pypi/grpcio-reflection/1.62.2/1.64.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
| [grpcio-tools](https://grpc.io) | dev-dependencies | minor | `1.62.2`
-> `1.64.1` |
[![age](https://developer.mend.io/api/mc/badges/age/pypi/grpcio-tools/1.64.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/pypi/grpcio-tools/1.64.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/pypi/grpcio-tools/1.62.2/1.64.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/pypi/grpcio-tools/1.62.2/1.64.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
|
[packageurl-python](https://github.com/package-url/packageurl-python)
| dependencies | patch | `==0.15.1` -> `==0.15.4` |
[![age](https://developer.mend.io/api/mc/badges/age/pypi/packageurl-python/0.15.4?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/pypi/packageurl-python/0.15.4?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/pypi/packageurl-python/0.15.1/0.15.4?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/pypi/packageurl-python/0.15.1/0.15.4?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
| packageurl-python | packages | patch | `==0.15.1` -> `==0.15.4` |
[![age](https://developer.mend.io/api/mc/badges/age/pypi/packageurl-python/0.15.4?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/pypi/packageurl-python/0.15.4?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/pypi/packageurl-python/0.15.1/0.15.4?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/pypi/packageurl-python/0.15.1/0.15.4?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|

🔧 This Pull Request updates lock files to use the latest dependency
versions.

---

### Release Notes

<details>
<summary>package-url/packageurl-python (packageurl-python)</summary>

###
[`v0.15.4`](https://github.com/package-url/packageurl-python/blob/HEAD/CHANGELOG.rst#0154-2024-07-15)

[Compare
Source](https://github.com/package-url/packageurl-python/compare/v0.15.3...v0.15.4)

- Add `with_package_url`, `without_package_url`, and
`order_by_package_url` to the
    `PackageURLQuerySetMixin` contrib class.

###
[`v0.15.3`](https://github.com/package-url/packageurl-python/blob/HEAD/CHANGELOG.rst#0153-2024-07-09)

[Compare
Source](https://github.com/package-url/packageurl-python/compare/v0.15.2...v0.15.3)

-   Add support for namespace in `build_npm_download_url`.

###
[`v0.15.2`](https://github.com/package-url/packageurl-python/blob/HEAD/CHANGELOG.rst#0152-2024-07-04)

[Compare
Source](https://github.com/package-url/packageurl-python/compare/v0.15.1...v0.15.2)

-   Update GitHub generated Download URL for maximum compatibility.

[package-url/packageurl-python#157

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "before 6am on wednesday" in timezone
Australia/Sydney, Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config help](https://github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log
[here](https://developer.mend.io/github/google/osv.dev).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy40MjUuMSIsInVwZGF0ZWRJblZlciI6IjM3LjQzMS40IiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbImRlcGVuZGVuY2llcyJdfQ==-->

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment