GHA/linux: bump mbedTLS 3 to 3.6.5 (from 3.6.4), also verify hash
No binary (build failed)
—
(log yok)
| @@ -40,7 +40,8 @@ env: | |
| # renovate: datasource=github-tags depName=Mbed-TLS/mbedtls versioning=semver registryUrl=https://github.com | |
| MBEDTLS_VERSION: 4.0.0 | |
| # renovate: datasource=github-tags depName=Mbed-TLS/mbedtls versioning=semver:^3.0.0 registryUrl=https://github.com | |
| - | MBEDTLS_VERSION_PREV: 3.6.4 |
| + | MBEDTLS_VERSION_PREV: 3.6.5 |
| + | MBEDTLS_SHA256_PREV: 4a11f1777bb95bf4ad96721cac945a26e04bf19f57d905f241fe77ebeddf46d8 |
| # renovate: datasource=github-tags depName=awslabs/aws-lc versioning=semver registryUrl=https://github.com | |
| AWSLC_VERSION: 1.69.0 | |
| # renovate: datasource=github-tags depName=google/boringssl versioning=semver registryUrl=https://github.com | |
| @@ -677,14 +678,14 @@ jobs: | |
| cache-name: cache-mbedtls-prev | |
| with: | |
| path: ~/mbedtls-prev | |
| - | key: ${{ runner.os }}-build-${{ env.cache-name }}-${{ env.MBEDTLS_VERSION }} |
| + | key: ${{ runner.os }}-build-${{ env.cache-name }}-${{ env.MBEDTLS_VERSION_PREV }} |
| - name: 'build mbedtls (prev)' | |
| if: ${{ contains(matrix.build.install_steps, 'mbedtls-prev') && steps.cache-mbedtls-prev.outputs.cache-hit != 'true' }} | |
| run: | | |
| curl --disable --fail --silent --show-error --connect-timeout 15 --max-time 120 --retry 6 --retry-connrefused \ | |
| --location "https://github.com/Mbed-TLS/mbedtls/releases/download/mbedtls-${MBEDTLS_VERSION_PREV}/mbedtls-${MBEDTLS_VERSION_PREV}.tar.bz2" --output pkg.bin | |
| - | sha256sum pkg.bin && tar -xjf pkg.bin && rm -f pkg.bin |
| + | sha256sum pkg.bin | tee /dev/stderr | grep -qwF -- "${MBEDTLS_SHA256_PREV}" && tar -xjf pkg.bin && rm -f pkg.bin |
| cd "mbedtls-${MBEDTLS_VERSION_PREV}" | |
| ./scripts/config.py set MBEDTLS_THREADING_C | |
| ./scripts/config.py set MBEDTLS_THREADING_PTHREAD | |