Bug#922557: marked as done (lintian: Make orig-tarball-missing-upstream-signature a "dsc" check)
Your message dated Sun, 24 Feb 2019 23:04:48 +0000
with message-id <E1gy2pE-0006ec-8t@fasolo.debian.org>
and subject line Bug#922557: fixed in lintian 2.8.0
has caused the Debian Bug report #922557,
regarding lintian: Make orig-tarball-missing-upstream-signature a "dsc" check
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)
--
922557: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=922557
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message ---
Package: lintian
Version: 2.7.0
Severity: wishlist
Hi!
I just noticed that I've sometimes been failing to include the orig
tarball signature file for some of the uploads after the first new
upstream release. Let me clarify with an example:
- Fetch upstream xfstt 1.9.3 orig.tar.xz and orig.tar.xz.asc.
- Build xfstt 1.9.3-1 source w/ orig.tar.xz.asc. (Good)
- Build xfstt 1.9.3-2 source w/o orig.tar.xz.asc. (Bad)
- Build xfstt 1.9.3-3 source w/o orig.tar.xz.asc. (Bad)
- Fetch upstream xfstt 1.10 orig.tar.xz and orig.tar.xz.asc.
- Build xfstt 1.10-1 source w/ orig.tar.xz.asc. (Good)
So, when building new revisions it seems I'm prone to forget to place
the orig.tar.xz.asc alongside the orig.tar.xz sometimes. :/
It would be nice to get a warning to avoid this. I imagine a tag
could be emitted whenever there is no «*.orig.tar.*.asc» (for each
«*.orig.tar.*») and either of the following holds:
- there is a debian/upstream/signing-key.asc file.
- there is pgpmode or pgpsigurlmangle in opts in debian/watch.
Thanks,
Guillem
--- End Message ---
--- Begin Message ---
Source: lintian
Source-Version: 2.8.0
We believe that the bug you reported is fixed in the latest version of
lintian, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 922557@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Chris Lamb <lamby@debian.org> (supplier of updated lintian package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Sun, 24 Feb 2019 22:13:53 +0000
Source: lintian
Binary: lintian
Architecture: source all
Version: 2.8.0
Distribution: unstable
Urgency: medium
Maintainer: Debian Lintian Maintainers <lintian-maint@debian.org>
Changed-By: Chris Lamb <lamby@debian.org>
Description:
lintian - Debian package checker
Closes: 921573 921814 922402 922511 922530 922534 922557 922737 922862 923060
Changes:
lintian (2.8.0) unstable; urgency=medium
.
[ Chris Lamb ]
* Emit an experimental warning for packages that ship a cron script
without an equivalent systemd .timer file. (Closes: #922862)
* Make orig-tarball-missing-upstream-signature a "dsc" check so it
also appears when running against non-.changes files. (Closes: #922557)
* Check all combinations of processables and binary package names in
order to avoid false-positives or unused override warnings in spelling
checks depending on whether a .deb or .dsc (etc.) is passed to Lintian.
(Closes: #921814)
* Prevent pkg-config-references-unknown-shared-library false positives:
- Ignoring entries such as -lfoo{install_suffix} as they are
interpolated at runtime by Autoconf. (Closes: #922511)
- Create an exception list and populating with shared
objects shipped by libc6-dev and libgcc1. (Closes: #922402)
- Manually add "gcc" as an exception.
* Use the source package name (not the package section) when checking for
uses-dpkg-database-directly exceptions. (Closes: #922530)
* Correct reference to mips64el architecture to ensure we emit
binary-from-other-architecture on this arch. Thanks to Helmut Grohne.
(Closes: #921573)
* Don't emit source-nmu-has-incorrect-version-number for uploads to
backports. (Closes: #923060)
* Ensure libpath-tiny-perl is installed regardless of nocheck build
profile as it is needed to generate the Pod documentation.
* Add dpatch to "nocheck" Build-Depends to avoid skipping tests
and then don't emit build-depends-on-obsolete-package for Lintian
itself as a result.
* Remove "nocheck" Build-Depends restriction for libcapture-tiny-perl and
specify it as a runtime dependency too.
* Don't emit source-contains-prebuilt-java-object against Lintian itself
as we ship a trivial HelloWorld.jar as a test fixture.
* Don't print "Offering to re-calibrate..." message if we aren't actually
about to offer.
.
[ Felix Lechner ]
* Ensure unpack loop stops when process succeeds after processable failed
to try and prevent Lintian from occasionally hanging. (Closes: #922737)
* Fix detection of security features in Portable Executable (PE)
binaries.
* Update recommendation in an update-menus long description that will not
trigger a check for full path names in maintainer scripts. (MR: !149)
* Interactively calibrate the expected tags in failing tests (MR: !145)
and use green and red terminal colors when adding or removing tags
during said calibration. (MR: !153)
* t/runtests:
* Split processing between scripts and tag tests.
* Split out test routines to process universal tags.
* Change options and arguments for stand-alone operation.
* Drop obsolete old-format-menu-file tag.
.
[ Guillem Jover ]
* Don't hardcode ".gz" in the output of the malformed-deb-archive tag's
extra information. (Closes: #922534)
.
[ Paul Wise ]
* Add several spelling corrections.
Checksums-Sha1:
e41f151b7d0c50d0ec3df67feb5bc51c0c37c4a1 3817 lintian_2.8.0.dsc
19b2d7937164c142606a799438054e92add725f6 1719272 lintian_2.8.0.tar.xz
a5a4b4ef5bf1a4407e7f1dd03bb52bbbb5ca1607 1192760 lintian_2.8.0_all.deb
96bfda9d2ec0b7f0d6e1bd22d8ea8717dbc148e1 18055 lintian_2.8.0_amd64.buildinfo
Checksums-Sha256:
21d76841e4f2a3330720d2bce4fa68829efff8baa7f7f853e0c4be8f23849b00 3817 lintian_2.8.0.dsc
4249424b08d1ef2663573eff8ca8bef0f6480be2beeb7076287ba92e32294985 1719272 lintian_2.8.0.tar.xz
ff967ef10c1433a61a608083d1faeef1ccc3f63af5f73e0a25c8513b4a126231 1192760 lintian_2.8.0_all.deb
1392584d1b8f0f63b90ec51580fe1f4e7a41a00248bf26b7403f8d356a0423d8 18055 lintian_2.8.0_amd64.buildinfo
Files:
43f0c2c3c3174846d315731de0e3a961 3817 devel optional lintian_2.8.0.dsc
94996aa299927526b1348a6aaeba8ea5 1719272 devel optional lintian_2.8.0.tar.xz
c398d9b5205988db7af1e581e48ac7e1 1192760 devel optional lintian_2.8.0_all.deb
6590f42ede02d28bb36b4c7d9d31ce97 18055 devel optional lintian_2.8.0_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=N8Ei
-----END PGP SIGNATURE-----
--- End Message ---
Reply to: