hackage-server

hackage-server copied to clipboard

We keep a record for each download instead of summarizing. On the live instance this counts feature is especially slow to persist and initialize -- we should improve it to...

gbaz

Changelog support should be documented

1

Apparently hackage has special support for Changelog files (in multiple formats?), which can be included directly in uploaded package tarballs. I can't find any documentation for this feature. https://hackage.haskell.org/upload doesn't...

mauke

Bumps [actions/cache](https://github.com/actions/cache) from 4 to 5. Release notes Sourced from actions/cache's releases. v5.0.0 [!IMPORTANT] actions/cache@v5 runs on the Node.js 24 runtime and requires a minimum Actions Runner version of 2.327.1....

dependabot[bot]

Uploading my package to Hackage failed due to `mhs-options`: https://github.com/hspec/hspec/actions/runs/20167421952/job/57894166588 This is a blocker for me as without these options my package does not build with MicroHs. Also note that...

sol

Clean up warnings

1

`hackage-server` builds with lots of warnings. They mostly fall in a few categories: - Derived `Typeable` instances - Partial functions like `head` and `tail` which warn in recent versions of...

spencerjanssen

Accept all known-good `quick-jump.min.js` and `quick-jump.css` hashes. This function also partitions the check by path: only the js or css hash list is checked (whichever is relevant). A modest refactor...

frasertweedale

Is there a way for a package to detect that it's building on hackage?

19

We have a package (https://github.com/Copilot-Language/copilot/tree/master/copilot-bluespec) that cannot be tested on hackage because `bsc` (bluespec) is not included. We could disable tests by default, but I'm wondering if there's a way...

ivanperez-keera

Trusted Publishing

3

Support for [Trusted Publishing](https://repos.openssf.org/trusted-publishers-for-all-package-repositories) has become quite common among major package repositories, for example: * [PyPI](https://docs.pypi.org/trusted-publishers/) * [npm](https://docs.npmjs.com/trusted-publishers) * [crates.io](https://crates.io/docs/trusted-publishing) The benefits are well described in [Why Trusted Publishers](https://repos.openssf.org/trusted-publishers-for-all-package-repositories#why-trusted-publishers). For...

spencerjanssen

Change license acceptance criteria

1

- allow license exceptions by default – specific ones can be added to a reject list (fixes #1440) - allow `+` licenses - report the portion of the license that...

sellout

License check rejects FOSS license (in SPDX format)

4

I tried submitting a package with the license set to `AGPL-3.0-only WITH Universal-FOSS-exception-1.0 OR LicenseRef-commercial` and got the error “This server does not accept packages with 'license' field set to...

sellout