Version 1.8.6 missing on downloads.arduino.cc, no signature for version 1.8.5 about arduinocore-avr

[M-Reimer]

The GPG signature part for 1.8.5 is already covered here: #458

So maybe take this as a reminder that, if you upload 1.8.6 to the download server, that you also create a GPG signature for the archive file.

[per1234]

Hi @M-Reimer.

the download is missing on "downloads.arduino.cc"

This is an incorrect conclusion. The platform archive file is present on downloads.arduino.cc. The problem is that it is under a different path on that domain compared to previous releases:

http://downloads.arduino.cc/cores/staging/avr-1.8.6.tar.bz2

You can find the URL of any of the platform archives by checking the package index:

https://downloads.arduino.cc/packages/package_index.json

        {
          "name": "Arduino AVR Boards",
          "architecture": "avr",
          "version": "1.8.6",
          "category": "Arduino",
          "help": {
            "online": "http://www.arduino.cc/en/Reference/HomePage"
          },
          "url": "http://downloads.arduino.cc/cores/staging/avr-1.8.6.tar.bz2",
          "archiveFileName": "avr-1.8.6.tar.bz2",
          "checksum": "SHA-256:ff1d17274b5a952f172074bd36c3924336baefded0232e10982f8999c2f7c3b6",
          "size": "7127080",

It is not clear to me whether this "staging" path was intended, since the directory name implies an ephemeral status that is not appropriate for releases in the production package index. So we can use this issue to track that question even though the actual situation is not quite as described in the initial report.

And while at it: The GPG signature for version 1.8.5 is missing. Can you perhaps sign the new 1.8.6 version?

Please open a dedicated issue about that. You can see from the previous report at #458 that tacking it on as an afterthought to another report that is only tangentially related doesn't get good results.