mirror of
https://github.com/flatpak/flatpak.git
synced 2026-01-30 02:21:17 -05:00
36c8fdb4a4
To allow staged deployment of collection-ID-based repositories, introduce the code to update a local repository configuration to add a collection ID to it, based on updated metadata from the remote (as is currently supported for other configuration keys). As a security measure, this only allows updating the collection ID from an empty to a non-empty value. We do not allow collection IDs to be renamed (or a malicious repository owner could bypass the user’s manual verification of the collection ID by changing it after the user has configured an unrelated remote). The idea is that most repositories should remain without collection IDs for now, and use this mechanism to set their collection IDs in future, once the functionality is more stable. Signed-off-by: Philip Withnall <withnall@endlessm.com>