ci(gstreamer): download SDK exclusively from S3 mirror on stable - #14870
Conversation
Upstream gstreamer.freedesktop.org packages can change or disappear out from under a stable release. Download GStreamer SDKs (CMake configure and install-dependencies scripts) solely from the QGroundControl S3 mirror, with integrity verified against the in-tree pinned checksums in .github/build-config.json.
curl.se refreshed the CA bundle upstream; the old pin fails every iOS configure. New hash verified against curl.se's published .sha256.
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## Stable_V5.1 #14870 +/- ##
==============================================
Coverage ? 32.82%
==============================================
Files ? 784
Lines ? 67689
Branches ? 31362
==============================================
Hits ? 22217
Misses ? 30534
Partials ? 14938
Flags with carried forward coverage won't be shown. Click here to find out more. Continue to review full report in Codecov by Harness.
🚀 New features to boost your workflow:
|
Build ResultsPlatform Status
All builds passed. Pre-commit
Pre-commit hooks: 2 passed, 75 failed, 7 skipped. Test Resultslinux-coverage-integration: 37 passed, 0 skipped Code CoverageCoverage: 69.6% No baseline available for comparison Artifact Sizes
Updated: 2026-08-15 18:52:46 UTC • Commit: 7ec3a2d • Triggered by: Android |
Problem
Stable builds pulled the GStreamer SDK from gstreamer.freedesktop.org, meaning upstream packages could change or disappear out from under a stable release.
Change
GStreamer SDK downloads (CMake configure for android/ios/macos/windows, plus the Windows/macOS install-dependencies scripts) now come exclusively from the QGroundControl S3 mirror (
dependencies/gstreamer/..., populated by mirror-gstreamer.yml). No public fallback..github/build-config.json(all 6 platform packages for 1.28.4 are pinned). The upstream.sha256sumsidecar is not mirrored, so the pin is the sole integrity source; a missing pin is a hard configure error by default (GStreamer_REQUIRE_CHECKSUM=ON).gstreamer_fetch_checksum,_gstreamer_download_sidecar) are left in place to avoid churn.Stable-branch-only change.