Will Bond

You should not be bundling Package Control with Sublime Text. There is a reason Sublime HQ doesn't ship Package Control by default, and that is because it opts people in...

Just for the record, the signature file lives at https://packagecontrol.io/Package%20Control.sublime-package.sig. It is an ECDSA signature. The public key is maintained in the Sublime Text release in the `Packages/Default.sublime-package/install_package_control.py` file.

Hmm, so I just tested a manually-triggered upgrade of a package after manually setting the version numbers down on the main package and one of its dependencies. This is what...

Were any of your dependencies installed via git or hg? If so, there was a bug where a dependency installed via VCS would not go through the normal upgrade process.

This sounds like a great idea, I'll definitely get this out there the next time I work on the site.

Nothing has been done here. I'd be happy to have a PR to review.

Personally I don't think this is a project I'd be interested in tackling, and my time is severely limited for open source these days, the majority of which goes into...

Do you have any sort of security software running on your machine? It seems odd that curl would work fine from the command line, but not when launched by the...

Don't do that, unless you want packages from 3 years ago.

@elsagong Please open a new new issue and be sure to include a debug log.