• drspod@lemmy.mlEnglish
    2·
    20 days ago

    Thanks for the reply.

    Currently, most packages are built from git HEAD on alpine:edge or debian-unstable build containers. So if the fix for this affected libwebp is shipped to the images that the build containers are based on (likely because we use edge/unstable images), then any affected packages would also automatically receive this fix.

    How often do packages get rebuilt? Is it only when there’s a new version? The problem in that case would be that a package that is no longer developed (or has very long release cycles) would not receive the fix.

    • Ajam@lemmy.worldOPEnglish
      5·
      20 days ago

      How often do packages get rebuilt? Is it only when there’s a new version?

      Yes, only if there’s a new version.

      The problem in that case would be that a package that is no longer developed (or has very long release cycles) would not receive the fix.

      We specifically mark these kinds of packages as outdated (even deprecated) if they are older than 90 days

      Currently, the stats:

      This will improve if we can get more builders, currently we use the free CI provided by github actions