monzero-gui.git/Dockerfile.linux, branch mainMonzero desktop wallet graphical interface.
https://code.monzero.org/monzero-gui.git/atom?h=main2026-06-30T09:57:34ZMerge pull request #46142026-06-30T09:57:34Ztobtohttob@featherwallet.org2026-06-30T09:57:34Zurn:sha1:7184a4409b7813a7a19269ec984e0767916ceb8e
5564db6 Dockerfiles: pin Qt to a commit hash (Thomas)
ACKs: selsta
docker: update libgpg-error and libgcrypt repo2026-06-26T15:59:31Zselstaselsta@sent.at2026-06-26T15:53:17Zurn:sha1:2f61d868f60fa629501ea1994419bb17f40080afDockerfiles: pin Qt to a commit hash2026-06-23T11:43:02ZThomasthomas.giudici@proton.me2026-06-23T07:59:58Zurn:sha1:5564db6791008f9e6b950b03fd1b5b8052adec50
Qt was cloned with -b ${QT_VERSION} --depth 1 but, unlike every other
dependency in these files, never reset to a commit, so a moved upstream
tag would silently change the Qt source built into the release.
Pin the qt5 superproject to its v5.15.19-lts-lgpl commit and let it
resolve the submodules (git submodule update on linux/windows,
init-repository on android), so only the qt5 hash is hardcoded. qt5
records the exact submodule commits, and the relative .gitmodules URLs
keep the fetches on https.
Follow-up to #4613.
Dockerfiles: fetch dependencies over https instead of git:// / http://2026-06-22T09:33:02ZThomasthomas.giudici@proton.me2026-06-22T09:33:02Zurn:sha1:3c3f73c9fcebd01c59224090f9d8c036d7cc9cc5
The release Dockerfiles cloned Qt (code.qt.io) and libgpg-error/libgcrypt
(git.gnupg.org) over unauthenticated git://, and fetched libiconv
(ftp.gnu.org) over http://. Qt is tag-pinned only, so a MITM on its clone
could substitute source into the build. Switch them all to https, like
every other dependency in these files. The gnupg commit pins and the
libiconv sha256sum are unchanged.
docker: update Qt to 5.15.192026-05-19T16:38:15Zselstaselsta@sent.at2026-05-19T16:38:15Zurn:sha1:b9cee99194e5fbb1a0e389d65dcdf0ac796cb834docker: update Qt to 5.15.182026-01-31T15:54:29Zselstaselsta@sent.at2026-01-31T15:54:29Zurn:sha1:fe363d4dd81e9707aeb53451f09e50e81fe3271cDockerfile.linux: bump hidapi to 0.15.02025-11-22T22:52:40Ztobtohttob@featherwallet.org2025-11-22T22:52:40Zurn:sha1:d7a3a61bf4d61ce1d414b6cd024270d88fbbc43bdocker: update Qt to 5.15.172025-09-03T18:31:33Zselstaselsta@sent.at2025-09-03T18:31:33Zurn:sha1:0764fbad338a753ad9615a790f6ea08975bdbd3cDockerfile: update Linux base image to 18.042025-03-29T17:14:45Zselstaselsta@sent.at2025-03-29T16:02:33Zurn:sha1:b4b2ed3976418d1355886e422bdac53ef92651f5Merge pull request #44012025-02-24T18:04:36Ztobtohttob@featherwallet.org2025-02-24T18:04:36Zurn:sha1:45fe6e69913df98a49b86e1ffb79ad37f3c74342
8512de2b Dockerfile linux: fix boost download url (malinero)