<pre style='margin:0'>
Ryan Carsten Schmidt (ryandesign) pushed a commit to branch master
in repository macports-ports.

</pre>
<p><a href="https://github.com/macports/macports-ports/commit/2825d12e6e945e696b423449dcad702320875603">https://github.com/macports/macports-ports/commit/2825d12e6e945e696b423449dcad702320875603</a></p>
<pre style="white-space: pre; background: #F8F8F8">The following commit(s) were added to refs/heads/master by this push:
<span style='display:block; white-space:pre;color:#404040;'>     new 2825d12e6e9 xz: Update homepage, master_sites, livecheck
</span>2825d12e6e9 is described below

<span style='display:block; white-space:pre;color:#808000;'>commit 2825d12e6e945e696b423449dcad702320875603
</span>Author: Ryan Carsten Schmidt <ryandesign@macports.org>
AuthorDate: Sat Apr 20 23:06:10 2024 -0500

<span style='display:block; white-space:pre;color:#404040;'>    xz: Update homepage, master_sites, livecheck
</span>---
 archivers/xz/Portfile | 25 +++++++++++++------------
 1 file changed, 13 insertions(+), 12 deletions(-)

<span style='display:block; white-space:pre;color:#808080;'>diff --git a/archivers/xz/Portfile b/archivers/xz/Portfile
</span><span style='display:block; white-space:pre;color:#808080;'>index 9a8850cfde8..339fb56b10f 100644
</span><span style='display:block; white-space:pre;background:#e0e0ff;'>--- a/archivers/xz/Portfile
</span><span style='display:block; white-space:pre;background:#e0e0ff;'>+++ b/archivers/xz/Portfile
</span><span style='display:block; white-space:pre;background:#e0e0e0;'>@@ -2,15 +2,17 @@
</span> 
 PortSystem      1.0
 PortGroup       clang_dependency 1.0
<span style='display:block; white-space:pre;background:#e0ffe0;'>+PortGroup       github 1.0
</span> 
<span style='display:block; white-space:pre;background:#ffe0e0;'>-name            xz
</span> epoch           1
<span style='display:block; white-space:pre;background:#ffe0e0;'>-version         5.4.6
</span><span style='display:block; white-space:pre;background:#ffe0e0;'>-# DO NOT UPDATE past this version as upstream appears to be compromised and distributing malware.
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+github.setup    tukaani-project xz 5.4.6 v
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+# DO NOT UPDATE to version 5.6.x which contains malware.
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+# 5.8.0 and later are expected to be ok.
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+# https://tukaani.org/xz-backdoor/
</span> # https://lists.macports.org/pipermail/macports-dev/2024-March/045563.html
 # https://lists.debian.org/debian-security-announce/2024/msg00057.html
 # https://www.openwall.com/lists/oss-security/2024/03/29/4
<span style='display:block; white-space:pre;background:#ffe0e0;'>-# https://web.archive.org/web/20240330000954/https://github.com/tukaani-project/xz/issues/92
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+# https://github.com/tukaani-project/xz/issues/92
</span> checksums       rmd160  b520491a5cae36c5295859d51eee5573a5953a1f \
                 sha256  913851b274e8e1d31781ec949f1c23e8dbcf0ecf6e73a2436dc21769dd3e6f49 \
                 size    2181925
<span style='display:block; white-space:pre;background:#e0e0e0;'>@@ -27,11 +29,11 @@ XZ utils consist of a few relatively separate submodules: \
</span> \n* LZMA/XZ encoder/decoder command line tool similar to gzip/bzip2 \
 \n* Scripts to ease grepping, diffing and viewing (lz*grep, lzdiff/lzcmp, lzmore/lzless)
 
<span style='display:block; white-space:pre;background:#ffe0e0;'>-# Temporarily use archived copy because GitHub has disabled the official web site
</span><span style='display:block; white-space:pre;background:#ffe0e0;'>-homepage        https://web.archive.org/web/20240329165859/https://xz.tukaani.org/xz-utils/
</span><span style='display:block; white-space:pre;background:#ffe0e0;'>-#master_sites    sourceforge:project/lzmautils
</span><span style='display:block; white-space:pre;background:#ffe0e0;'>-# Temporarily use mirrored copy only, due to upstream compromise
</span><span style='display:block; white-space:pre;background:#ffe0e0;'>-master_sites    macports_distfiles
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+homepage        https://tukaani.org/xz/
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+github.tarball_from \
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+                releases
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+master_sites-append \
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+                sourceforge:project/lzmautils
</span> 
 use_bzip2       yes
 
<span style='display:block; white-space:pre;background:#e0e0e0;'>@@ -47,9 +49,8 @@ if {${subport} eq ${name}} {
</span>     # document that we always need legacy symlinks now that "lzmautils" refers here
     configure.args-append --enable-lzma-links
 
<span style='display:block; white-space:pre;background:#ffe0e0;'>-    livecheck.url   ${homepage}
</span><span style='display:block; white-space:pre;background:#ffe0e0;'>-    livecheck.type  regexm
</span><span style='display:block; white-space:pre;background:#ffe0e0;'>-    livecheck.regex xz-(\[0-9.a-z\]*)${extract.suffix}
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+    livecheck.url   https://api.github.com/repos/${github.author}/${github.project}/releases/latest
</span><span style='display:block; white-space:pre;background:#e0ffe0;'>+    livecheck.regex "\"tag_name\":\\s*\"${github.tag_prefix}(\[^\"\]+)\""
</span> } else {
     livecheck.type  none
 }
</pre><pre style='margin:0'>

</pre>