| Git Clone URL: | https://aur.archlinux.org/palemoon.git (read-only, click to copy) |
|---|---|
| Package Base: | palemoon |
| Description: | Open source web browser based on Firefox focusing on efficiency. |
| Upstream URL: | https://www.palemoon.org/ |
| Keywords: | browser goanna web |
| Licenses: | MPL-2.0 |
| Submitter: | artiom |
| Maintainer: | WorMzy |
| Last Packager: | WorMzy |
| Votes: | 141 |
| Popularity: | 0.126050 |
| First Submitted: | 2014-06-05 10:54 (UTC) |
| Last Updated: | 2024-11-05 20:54 (UTC) |
Presently fails to configure/build due to certain warnings becoming errors as of GCC 14, since autoconf 2.13 (pinned) and cairo 1.10.28 (included) do not account for these changes.
I was able to build successfully by adding export CFLAGS="${CFLAGS} -Wno-implicit-int -Wno-incompatible-pointer-types -Wno-int-conversion" to the PKGBUILD's build().
Happily, all the key-signing business seems to be resolved now, with "33.1.0"!
@saburouta: I emailed Moonchild directly (using the email associated with the regular signing key), my account on the forums has long since been purged for inactivity. If you check the new key, you'll see it was signed by the regular signing key on April 1st, shortly before I pushed the update to this package.
@WorMzy Yes, that is what I was responding to. Where did this communication take place? Was this by email? Is this on the palemoon forums? I just found older threads related to similar but distinct situations.
@saburouta: see that last comment before your own.
That does not seem to be Moonchild's key. Where is it confirmed?
After checking the PM forums, it seems his key is still '3DAD 8CD1 0719 7488 D2A2 A0BD 4048 1E7B 8FCF 9CEC'. Which is not the one you provided.
Sorry for the delay. Moonchild has confirmed the key is valid, and has signed the new key with the release key, which is good enough for me. Apparently this key wasn't meant to be used for signing the release commit, so the usual key will probably be used next time.
Note that a new key has been used to sign the commit for v33.0.2: B615CD133D438D85, this hasn't been documented anywhere (AFAICS) on the official palemoon website or forums, and the commits look suspicious in the commit listings on the repo: https://repo.palemoon.org/MoonchildProductions/Pale-Moon/commits/branch/release
I'm uncomfortable updating this package until I've had some sort of clarification that this new key is legit, so I've reached out to the main developer of Palemoon for clarification. Note that the official binaries are still signed by 40481E7B8FCF9CEC, so I'm relatively confident that the new key is fine and just hasn't been announced.
Pinned Comments
WorMzy commented on 2021-03-02 16:19 (UTC) (edited on 2022-08-03 21:12 (UTC) by WorMzy)
The following key is used to sign release commits:
40481E7B8FCF9CEC
Import it into your keyring however you want.
https://wiki.archlinux.org/index.php/GnuPG#Import_a_public_key