mirror of
https://github.com/zed-industries/zed.git
synced 2026-10-21 22:31:05 +00:00
original uri https://github.com/zed-industries/zed
https://zed.dev
544780422a
Some checks are pending
Congratsbot / check-author (push) Waiting to run
Congratsbot / congrats (push) Blocked by required conditions
deploy_nightly_docs / deploy_docs (push) Waiting to run
run_tests / orchestrate (push) Waiting to run
run_tests / check_style (push) Waiting to run
run_tests / clippy_windows (push) Blocked by required conditions
run_tests / clippy_linux (push) Blocked by required conditions
run_tests / clippy_mac (push) Blocked by required conditions
run_tests / clippy_mac_x86_64 (push) Blocked by required conditions
run_tests / run_tests_windows (push) Blocked by required conditions
run_tests / run_tests_linux (push) Blocked by required conditions
run_tests / run_tests_mac (push) Blocked by required conditions
run_tests / miri_scheduler (push) Blocked by required conditions
run_tests / doctests (push) Blocked by required conditions
run_tests / check_workspace_binaries (push) Blocked by required conditions
run_tests / check_wasm (push) Blocked by required conditions
run_tests / check_dependencies (push) Blocked by required conditions
run_tests / check_docs (push) Blocked by required conditions
run_tests / check_licenses (push) Blocked by required conditions
run_tests / check_scripts (push) Blocked by required conditions
run_tests / check_remote_server_linux_x86_64 (push) Blocked by required conditions
run_tests / check_remote_server_mac_aarch64 (push) Blocked by required conditions
run_tests / check_remote_server_windows_x86_64 (push) Blocked by required conditions
run_tests / check_postgres_and_protobuf_migrations (push) Blocked by required conditions
run_tests / extension_tests (push) Blocked by required conditions
run_tests / tests_pass (push) Blocked by required conditions
## Summary Add an HTTP fallback for the Ubuntu toolchain PPA used by `script/linux` on Ubuntu 20.04. The [Linux ARM64 release job](https://github.com/zed-industries/zed/actions/runs/39623264964/job/119388744726) failed because Launchpad's HTTPS frontend returned HTTP 503 for package downloads. The official HTTP endpoints served the same packages successfully. Use APT's native `mirror+file` transport with explicit priorities: prefer Canonical's HTTPS endpoint, and use Canonical's HTTP endpoint only when a fetch fails. This handles both repository indexes and package archives without custom retry logic. Other repositories and distro setup paths are unchanged. ## Security tradeoff This is an accepted availability workaround, not a security-equivalent replacement for HTTPS. The signing key is still fetched over HTTPS, and APT signature and package-hash verification remain enabled. HTTP fallback permits network observers to see requests and attackers to replay or freeze previously signed repository contents. This PPA has no `Valid-Until` field. It does not permit arbitrary package modification without a verification failure. ## Testing - `bash -n script/linux` — passed. - `nix shell nixpkgs#shellcheck -c ./script/shellcheck-scripts error` — passed. - Temporary integration harness using Ubuntu 20.04 / APT 2.0.10 and a signed local repository, exercising the mirror-generation commands extracted from `script/linux`: - Healthy HTTPS serves all requests without contacting HTTP. - HTTP 503 on the primary repository index falls back successfully. - HTTP 503 on a package download falls back successfully, even after indexes were fetched over HTTPS. - Both endpoints failing produces a nonzero exit. - Tampered signed metadata is rejected. - Tampered package contents are rejected. - Downloaded all seven failing ARM64 packages across Canonical's official HTTP endpoints and verified their hashes against repository metadata; verified the signed `InRelease` and package-index hash. - No full dependency installation or CI rerun performed. The temporary integration harness is not committed. Release Notes: - N/A |
||
|---|---|---|
| .agents/skills | ||
| .cargo | ||
| .cloudflare | ||
| .config | ||
| .factory | ||
| .github | ||
| .wezel | ||
| .zed | ||
| assets | ||
| ci | ||
| crates | ||
| docs | ||
| extensions | ||
| legal | ||
| nix | ||
| script | ||
| tooling | ||
| .git-blame-ignore-revs | ||
| .gitattributes | ||
| .gitignore | ||
| .mailmap | ||
| .prettierrc | ||
| .rules | ||
| AGENTS.md | ||
| Cargo.lock | ||
| Cargo.toml | ||
| CLAUDE.md | ||
| clippy.toml | ||
| CODE_OF_CONDUCT.md | ||
| compose.yml | ||
| CONTRIBUTING.md | ||
| corgi.toml | ||
| default.nix | ||
| Dockerfile-collab | ||
| Dockerfile-collab.dockerignore | ||
| Dockerfile-cross.dockerignore | ||
| Dockerfile-distros | ||
| Dockerfile-distros.dockerignore | ||
| flake.lock | ||
| flake.nix | ||
| GEMINI.md | ||
| LICENSE-APACHE | ||
| LICENSE-GPL | ||
| Procfile | ||
| Procfile.web | ||
| README.md | ||
| rust-toolchain.toml | ||
| rustfmt.toml | ||
| shell.nix | ||
Zed
Welcome to Zed, a high-performance, multiplayer code editor from the creators of Atom and Tree-sitter.
Installation
On macOS, Linux, and Windows you can download Zed directly or install Zed via your local package manager (macOS/Linux/Windows).
Other platforms are not yet available:
- Web (tracking discussion)
Developing Zed
Contributing
See CONTRIBUTING.md for ways you can contribute to Zed.
Also... we're hiring! Check out our jobs page for open roles.
Licensing
Zed source code is licensed primarily under GPL-3.0-or-later, with Apache-2.0 components where marked.
License information for third party dependencies must be correctly provided for CI to pass.
We use cargo-about to automatically comply with open source licenses. If CI is failing, check the following:
- Is it showing a
no license specifiederror for a crate you've created? If so, addpublish = falseunder[package]in your crate's Cargo.toml. - Is the error
failed to satisfy license requirementsfor a dependency? If so, first determine what license the project has and whether this system is sufficient to comply with this license's requirements. If you're unsure, ask a lawyer. Once you've verified that this system is acceptable add the license's SPDX identifier to theacceptedarray inscript/licenses/zed-licenses.toml. - Is
cargo-aboutunable to find the license for a dependency? If so, add a clarification field at the end ofscript/licenses/zed-licenses.toml, as specified in the cargo-about book.
Sponsorship
Zed is developed by Zed Industries, Inc., a for-profit company.
If you’d like to financially support the project, you can do so via GitHub Sponsors. Sponsorships go directly to Zed Industries and are used as general company revenue. There are no perks or entitlements associated with sponsorship.