Files
Alexandru Ardelean f662de1b96 git-lfs: update to 3.7.1
Fixes symlink traversal vulnerability (CVE-2025-26625) that allowed
writing files outside the repository on checkout/pull.

Other changes since 3.5.1:
- Add --refetch option to force re-download of LFS objects
- Add --json and --dry-run options for fetch operations
- Improve .netrc handling on Windows and macOS root CA support
- Upgrade to Go 1.25 (requires Linux kernel 3.2+)

Signed-off-by: Alexandru Ardelean <alex@shruggie.ro>
2026-05-14 15:39:33 +03:00

48 lines
1.3 KiB
Makefile

#
# Copyright (C) 2020-2021 CZ.NIC, z. s. p. o. (https://www.nic.cz/)
#
# This is free software, licensed under the GNU General Public License v2.
# See /LICENSE for more information.
#
include $(TOPDIR)/rules.mk
PKG_NAME:=git-lfs
PKG_VERSION:=3.7.1
PKG_RELEASE:=1
PKG_SOURCE:=$(PKG_NAME)-v$(PKG_VERSION).tar.gz
PKG_SOURCE_URL:=https://github.com/git-lfs/git-lfs/releases/download/v$(PKG_VERSION)
PKG_HASH:=8f56058622edfea1d111e50e9844ef2f5ce670b2dbe4d55d48e765c943af4351
PKG_MAINTAINER:=Alexandru Ardelean <ardeleanalex@gmail.com>
PKG_LICENSE:=MIT
PKG_LICENSE_FILES:=LICENSE.md
PKG_BUILD_DEPENDS:=golang/host
PKG_BUILD_PARALLEL:=1
PKG_BUILD_FLAGS:=no-mips16
GO_PKG:=github.com/git-lfs/git-lfs
include $(INCLUDE_DIR)/package.mk
include ../../lang/golang/golang-package.mk
define Package/git-lfs
SECTION:=net
CATEGORY:=Network
TITLE:=Git Large File Storage
SUBMENU:=Version Control Systems
URL:=https://git-lfs.com
DEPENDS:=$(GO_ARCH_DEPENDS) +git
endef
define Package/git-lfs/description
Git Large File Storage (LFS) replaces large files such as audio samples,
videos, datasets, and graphics with text pointers inside Git, while storing
the file contents on a remote server like GitHub.com or GitHub Enterprise.
endef
$(eval $(call GoBinPackage,git-lfs))
$(eval $(call BuildPackage,git-lfs))