Release process bug: absolute path in blender-2.91.2.sha256 #85004

New Issue

Rabit · 2021-01-23T23:46:05+01:00

Rabit commented

2021-01-23 23:46:05 +01:00

Hello folks,

Not sure if this bugtracker supports blender infrastructure bugs, but I found that the lack of automation of the release process makes such errors possible:

> curl https://download.blender.org/release/Blender2.91/blender-2.91.0.sha256

1753d27f833ea263d4431329e952fac01f8e8760711e14a21cedec2e09887adf  blender-2.91.0-linux64.tar.xz
d080a17f6b335dd25871edf1100839cddf76d270e72c5bb6cb1ddbd60b848d88  blender-2.91.0-macOS.dmg
3c951581b0f34a243a7f6c13743b779590eb9a55d1db25238f31336f2d08e29b  blender-2.91.0-windows64.msi
74c0e22b3515ec29683279509f760b59b57f285ab3a70447f5f3c7b1c8f6554b  blender-2.91.0-windows64.zip

vs

> curl https://download.blender.org/release/Blender2.91/blender-2.91.2.sha256

8f1e1e8852750e1038579336c7461c1a5492da973ce188e1e5cae99b2f796a23  /home/blender/Downloads/blender-2.91.2-linux64.tar.xz
269ae25c10b55d33d311bd6d6519e5b2d5670a607dee0cdefe59afcc16fbc9b6  /home/blender/Downloads/blender-2.91.2-macOS.dmg
60dbc4fde64e0844f2fd37ac3a16faff62cc55d0807fb3424435a91298ec6e76  /home/blender/Downloads/blender-2.91.2-windows64.msi
52582e09379c36bd7a26d99ec72cbbe2d1d200773e63e73f57ebfc1c1a5918c4  /home/blender/Downloads/blender-2.91.2-windows64.zip

That makes hard to rely on the interface in my CI scripts for BlendNet addon, so could it be somehow fixed? I think relative path works just fine for sha256/md5 files.

And it will be really great if the process could be automated - because manual release process always a potential huge concern from human error and security perspective.

Thank you

Hello folks, Not sure if this bugtracker supports blender infrastructure bugs, but I found that the lack of automation of the release process makes such errors possible: ``` > curl https://download.blender.org/release/Blender2.91/blender-2.91.0.sha256 1753d27f833ea263d4431329e952fac01f8e8760711e14a21cedec2e09887adf blender-2.91.0-linux64.tar.xz d080a17f6b335dd25871edf1100839cddf76d270e72c5bb6cb1ddbd60b848d88 blender-2.91.0-macOS.dmg 3c951581b0f34a243a7f6c13743b779590eb9a55d1db25238f31336f2d08e29b blender-2.91.0-windows64.msi 74c0e22b3515ec29683279509f760b59b57f285ab3a70447f5f3c7b1c8f6554b blender-2.91.0-windows64.zip ``` vs ``` > curl https://download.blender.org/release/Blender2.91/blender-2.91.2.sha256 8f1e1e8852750e1038579336c7461c1a5492da973ce188e1e5cae99b2f796a23 /home/blender/Downloads/blender-2.91.2-linux64.tar.xz 269ae25c10b55d33d311bd6d6519e5b2d5670a607dee0cdefe59afcc16fbc9b6 /home/blender/Downloads/blender-2.91.2-macOS.dmg 60dbc4fde64e0844f2fd37ac3a16faff62cc55d0807fb3424435a91298ec6e76 /home/blender/Downloads/blender-2.91.2-windows64.msi 52582e09379c36bd7a26d99ec72cbbe2d1d200773e63e73f57ebfc1c1a5918c4 /home/blender/Downloads/blender-2.91.2-windows64.zip ``` That makes hard to rely on the interface in my CI scripts for BlendNet addon, so could it be somehow fixed? I think relative path works just fine for sha256/md5 files. And it will be really great if the process could be automated - because manual release process always a potential huge concern from human error and security perspective. Thank you

Rabit commented

2021-01-23 23:46:05 +01:00

Added subscriber: @Rabit

Evan Wilson commented

2021-01-24 11:13:47 +01:00

Added subscriber: @EAW

Evan Wilson commented

2021-01-24 11:13:47 +01:00

Changed status from 'Needs Triage' to: 'Confirmed'

Evan Wilson commented

2021-01-24 11:13:47 +01:00

Confirmed by checking files located at:
https://download.blender.org/release/Blender2.91/

Confirmed by checking files located at: https://download.blender.org/release/Blender2.91/

Evan Wilson commented

2021-01-24 19:31:20 +01:00

Added subscribers: @Jeroen-Bakker, @ponderz

Evan Wilson commented

2021-01-24 19:31:20 +01:00

@ponderz is this something for you? Or @Jeroen-Bakker?

James Monteath commented

2021-05-19 09:58:11 +02:00

This was fixed few days after this issue was posted

curl https://download.blender.org/release/Blender2.91/blender-2.91.2.sha256
8f1e1e8852750e1038579336c7461c1a5492da973ce188e1e5cae99b2f796a23  blender-2.91.2-linux64.tar.xz
269ae25c10b55d33d311bd6d6519e5b2d5670a607dee0cdefe59afcc16fbc9b6  blender-2.91.2-macOS.dmg
60dbc4fde64e0844f2fd37ac3a16faff62cc55d0807fb3424435a91298ec6e76  blender-2.91.2-windows64.msi
52582e09379c36bd7a26d99ec72cbbe2d1d200773e63e73f57ebfc1c1a5918c4  blender-2.91.2-windows64.zip

This was fixed few days after this issue was posted ``` curl https://download.blender.org/release/Blender2.91/blender-2.91.2.sha256 8f1e1e8852750e1038579336c7461c1a5492da973ce188e1e5cae99b2f796a23 blender-2.91.2-linux64.tar.xz 269ae25c10b55d33d311bd6d6519e5b2d5670a607dee0cdefe59afcc16fbc9b6 blender-2.91.2-macOS.dmg 60dbc4fde64e0844f2fd37ac3a16faff62cc55d0807fb3424435a91298ec6e76 blender-2.91.2-windows64.msi 52582e09379c36bd7a26d99ec72cbbe2d1d200773e63e73f57ebfc1c1a5918c4 blender-2.91.2-windows64.zip ```

James Monteath commented

2021-05-19 15:54:18 +02:00

Changed status from 'Confirmed' to: 'Resolved'

James Monteath closed this issue

2021-05-19 15:54:18 +02:00

This repo is archived. You cannot comment on issues.