Re: [ANN] Clojars policy change

2013-05-14 Thread Phil Hagelberg
Phil Hagelberg writes: > I've rolled this back briefly due to a bug surrounding deploying > SNAPSHOT versions over scp. The bug is fixed, and the fix is deployed. -Phil pgpRuN5qASLVY.pgp Description: PGP signature

Re: [ANN] Clojars policy change

2013-05-13 Thread Phil Hagelberg
Zack Maril writes: > Is the policy for SNAPSHOT artifacts still that you can overwrite as much > and as often as you want? Technically no, but effectively yes. Any version ending in "-SNAPSHOT" is automatically translated into a timestamped version upon deploy or resolution. So "0.5.0-SNAPSHOT"

Re: [ANN] Clojars policy change

2013-05-13 Thread Zack Maril
Is the policy for SNAPSHOT artifacts still that you can overwrite as much and as often as you want? -Zack On Tuesday, May 14, 2013 3:30:19 AM UTC+4, Phil Hagelberg wrote: > > > Phil Hagelberg writes: > > > In the aftermath of the recent Linode intrusion[1][2], we determined > > that Clojars' po

Re: [ANN] Clojars policy change

2013-05-13 Thread Phil Hagelberg
Phil Hagelberg writes: > In the aftermath of the recent Linode intrusion[1][2], we determined > that Clojars' policy of allowing artifacts to be overwritten[3] makes it > much more difficult to detect an attack than it would be if artifacts > were immutable like they are in most other repositorie

[ANN] Clojars policy change

2013-05-13 Thread Phil Hagelberg
Hello everyone. In the aftermath of the recent Linode intrusion[1][2], we determined that Clojars' policy of allowing artifacts to be overwritten[3] makes it much more difficult to detect an attack than it would be if artifacts were immutable like they are in most other repositories. While overw