From: Norbert Pocs <norbertp@openssl.org>
Date: Thu, 4 Sep 2025 08:02:55 +0000 (+0200)
Subject: github/workflows: Replace deprecated apt-get --force-yes
X-Git-Tag: 4.0-PRE-CLANG-FORMAT-WEBKIT~534
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=7097c9aefd9108b1b04472c076240f3f9353ead0;p=thirdparty%2Fopenssl.git

github/workflows: Replace deprecated apt-get --force-yes

It is replaced by a few flags starting with '--allow-'. Currently:
--allow-unauthenticated
--allow-downgrades
--allow-remove-essential
--allow-change-held-packages

Signed-off-by: Norbert Pocs <norbertp@openssl.org>

Reviewed-by: Neil Horman <nhorman@openssl.org>
Reviewed-by: Paul Dale <ppzgs1@gmail.com>
(Merged from https://github.com/openssl/openssl/pull/28435)
---

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index f0dfe270744..3b3ca497bba 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -31,7 +31,7 @@ jobs:
     - name: install unifdef
       run: |
         sudo apt-get update
-        sudo apt-get -yq --no-install-suggests --no-install-recommends --force-yes install unifdef
+        sudo apt-get -yq --no-install-suggests --no-install-recommends --allow-unauthenticated --allow-downgrades --allow-remove-essential --allow-change-held-packages install unifdef
     - uses: actions/checkout@v4
       with:
         fetch-depth: 0
diff --git a/.github/workflows/cross-compiles.yml b/.github/workflows/cross-compiles.yml
index c6b758ec931..92f45dc01c1 100644
--- a/.github/workflows/cross-compiles.yml
+++ b/.github/workflows/cross-compiles.yml
@@ -165,7 +165,7 @@ jobs:
     - name: install packages
       run: |
         sudo apt-get update
-        sudo apt-get -yq --force-yes install \
+        sudo apt-get -yq --allow-unauthenticated --allow-downgrades --allow-remove-essential --allow-change-held-packages install \
             gcc-${{ matrix.platform.arch }} \
             ${{ matrix.platform.libs }}
     - uses: actions/checkout@v4
@@ -192,7 +192,7 @@ jobs:
 
     - name: install qemu
       if: matrix.platform.tests != 'none'
-      run: sudo apt-get -yq --force-yes install qemu-user
+      run: sudo apt-get -yq --allow-unauthenticated --allow-downgrades --allow-remove-essential --allow-change-held-packages install qemu-user
 
     - name: Set QEMU environment
       if: matrix.platform.qemucpu != ''
diff --git a/.github/workflows/fips-checksums.yml b/.github/workflows/fips-checksums.yml
index d286d78cb9f..be2b6c76727 100644
--- a/.github/workflows/fips-checksums.yml
+++ b/.github/workflows/fips-checksums.yml
@@ -18,7 +18,7 @@ jobs:
       - name: install unifdef
         run: |
             sudo apt-get update
-            sudo apt-get -yq --no-install-suggests --no-install-recommends --force-yes install unifdef
+            sudo apt-get -yq --no-install-suggests --no-install-recommends --allow-unauthenticated --allow-downgrades --allow-remove-essential --allow-change-held-packages install unifdef
       - name: create build dirs
         run: |
           mkdir ./build-pristine
diff --git a/.github/workflows/fuzz-checker.yml b/.github/workflows/fuzz-checker.yml
index b7e3cf51eed..7648785d5e2 100644
--- a/.github/workflows/fuzz-checker.yml
+++ b/.github/workflows/fuzz-checker.yml
@@ -47,7 +47,7 @@ jobs:
     - name: install packages
       run: |
         sudo apt-get update
-        sudo apt-get -yq --force-yes install ${{ matrix.fuzzy.install }}
+        sudo apt-get -yq --allow-unauthenticated --allow-downgrades --allow-remove-essential --allow-change-held-packages install ${{ matrix.fuzzy.install }}
     - name: Adjust ASLR for sanitizer
       run: |
         sudo cat /proc/sys/vm/mmap_rnd_bits
diff --git a/.github/workflows/riscv-more-cross-compiles.yml b/.github/workflows/riscv-more-cross-compiles.yml
index 3012e85854d..09049ae9356 100644
--- a/.github/workflows/riscv-more-cross-compiles.yml
+++ b/.github/workflows/riscv-more-cross-compiles.yml
@@ -191,7 +191,7 @@ jobs:
     - name: install packages
       run: |
         sudo apt-get update
-        sudo apt-get -yq --force-yes install \
+        sudo apt-get -yq --allow-unauthenticated --allow-downgrades --allow-remove-essential --allow-change-held-packages install \
             gcc-${{ matrix.platform.arch }} \
             ${{ matrix.platform.libs }}
     - uses: actions/checkout@v4
@@ -218,7 +218,7 @@ jobs:
 
     - name: install qemu
       if: matrix.platform.tests != 'none'
-      run: sudo apt-get -yq --force-yes install qemu-user
+      run: sudo apt-get -yq --allow-unauthenticated --allow-downgrades --allow-remove-essential --allow-change-held-packages install qemu-user
 
     - name: Set QEMU environment
       if: matrix.platform.qemucpu != ''
diff --git a/.github/workflows/run-checker-daily.yml b/.github/workflows/run-checker-daily.yml
index bef1e8aacfe..fa7ff696832 100644
--- a/.github/workflows/run-checker-daily.yml
+++ b/.github/workflows/run-checker-daily.yml
@@ -197,7 +197,7 @@ jobs:
     - name: install brotli
       run: |
         sudo apt-get update
-        sudo apt-get -yq --no-install-suggests --no-install-recommends --force-yes install brotli libbrotli1 libbrotli-dev
+        sudo apt-get -yq --no-install-suggests --no-install-recommends --allow-unauthenticated --allow-downgrades --allow-remove-essential --allow-change-held-packages install brotli libbrotli1 libbrotli-dev
     - name: checkout openssl
       uses: actions/checkout@v4
     - name: checkout fuzz/corpora submodule
@@ -219,7 +219,7 @@ jobs:
     - name: install zstd
       run: |
         sudo apt-get update
-        sudo apt-get -yq --no-install-suggests --no-install-recommends --force-yes install zstd libzstd1 libzstd-dev
+        sudo apt-get -yq --no-install-suggests --no-install-recommends --allow-unauthenticated --allow-downgrades --allow-remove-essential --allow-change-held-packages install zstd libzstd1 libzstd-dev
     - name: checkout openssl
       uses: actions/checkout@v4
     - name: checkout fuzz/corpora submodule
@@ -241,8 +241,8 @@ jobs:
     - name: install brotli and zstd
       run: |
         sudo apt-get update
-        sudo apt-get -yq --no-install-suggests --no-install-recommends --force-yes install brotli libbrotli1 libbrotli-dev
-        sudo apt-get -yq --no-install-suggests --no-install-recommends --force-yes install zstd libzstd1 libzstd-dev
+        sudo apt-get -yq --no-install-suggests --no-install-recommends --allow-unauthenticated --allow-downgrades --allow-remove-essential --allow-change-held-packages install brotli libbrotli1 libbrotli-dev
+        sudo apt-get -yq --no-install-suggests --no-install-recommends --allow-unauthenticated --allow-downgrades --allow-remove-essential --allow-change-held-packages install zstd libzstd1 libzstd-dev
     - name: checkout openssl
       uses: actions/checkout@v4
     - name: checkout fuzz/corpora submodule
@@ -286,7 +286,7 @@ jobs:
     - name: install brotli
       run: |
         sudo apt-get update
-        sudo apt-get -yq --no-install-suggests --no-install-recommends --force-yes install brotli libbrotli1 libbrotli-dev
+        sudo apt-get -yq --no-install-suggests --no-install-recommends --allow-unauthenticated --allow-downgrades --allow-remove-essential --allow-change-held-packages install brotli libbrotli1 libbrotli-dev
     - name: checkout openssl
       uses: actions/checkout@v4
     - name: checkout fuzz/corpora submodule
@@ -312,7 +312,7 @@ jobs:
     - name: install zstd
       run: |
         sudo apt-get update
-        sudo apt-get -yq --no-install-suggests --no-install-recommends --force-yes install zstd libzstd1 libzstd-dev
+        sudo apt-get -yq --no-install-suggests --no-install-recommends --allow-unauthenticated --allow-downgrades --allow-remove-essential --allow-change-held-packages install zstd libzstd1 libzstd-dev
     - name: checkout openssl
       uses: actions/checkout@v4
     - name: checkout fuzz/corpora submodule