docs/manual/contribute.adoc: mention license file changes in commit message

It has been good practice for a while to describe the kind of change
in the commit message of any patch that changes license file
hashes. This is important so any substantial changes don't go
unnoticed. However it wasn't explicitly stated in the manual, fix
that.

Signed-off-by: Fiona Klute <fiona.klute@gmx.de>
Signed-off-by: Julien Olivain <ju.o@free.fr>
This commit is contained in:
Fiona Klute
2026-08-07 22:24:57 +02:00
committed by Julien Olivain
parent 187d329d1d
commit ef655b53dd

View File

@@ -283,16 +283,18 @@ the commit message body.
When you bump a package to a new version, you should also submit a When you bump a package to a new version, you should also submit a
separate patch for each package. Don't forget to update the +.hash+ separate patch for each package. Don't forget to update the +.hash+
file, or add it if it doesn't exist yet. Also don't forget to check if file, or add it if it doesn't exist yet. Also don't forget to check if
the +_LICENSE+ and +_LICENSE_FILES+ are still valid. The summary line the +_LICENSE+ and +_LICENSE_FILES+ are still valid. If the hash of a
should be something like +<packagename>: bump to version <new license file changed, please include a note in the commit message
version>+. If the new version only contains security updates compared about what changed, ideally with a link to the upstream commit. The
to the existing one, the summary should be +<packagename>: security summary line should be something like +<packagename>: bump to version
bump to version <new version>+ and the commit message body should show <new version>+. If the new version only contains security updates
the CVE numbers that are fixed. If some package patches can be removed compared to the existing one, the summary should be +<packagename>:
in the new version, it should be explained explicitly why they can be security bump to version <new version>+ and the commit message body
removed, preferably with the upstream commit ID. Also any other should show the CVE numbers that are fixed. If some package patches
required changes should be explained explicitly, like configure can be removed in the new version, it should be explained explicitly
options that no longer exist or are no longer needed. why they can be removed, preferably with the upstream commit ID. Also
any other required changes should be explained explicitly, like
configure options that no longer exist or are no longer needed.
If you are interested in getting notified of build failures and of If you are interested in getting notified of build failures and of
further changes in the packages you added or modified, please add further changes in the packages you added or modified, please add