Accepted lintian 2.5.98~bpo9+1 (source all) into stretch-backports
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Tue, 28 Aug 2018 16:40:30 +0300
Source: lintian
Binary: lintian
Built-For-Profiles: nocheck
Architecture: source all
Version: 2.5.98~bpo9+1
Distribution: stretch-backports
Urgency: medium
Maintainer: Debian Lintian Maintainers <lintian-maint@debian.org>
Changed-By: Peter Pentchev <roam@debian.org>
Description:
lintian - Debian package checker
Closes: 513544 646192 833608 834607 872611 886036 896133 898809 899192 899214 900122 900213 900268 900670 901075 901228 901274 901581 902919 902926 903103 903307 903435 903470 903690 904140 904414 904420 904522 904623 904817 904852 904886 904936 904985 905030 905258 905423 905467 905469 905635 905843 905881 906155 906722 906957 907261 907276
Changes:
lintian (2.5.98~bpo9+1) stretch-backports; urgency=medium
.
* Rebuild for stretch-backports.
.
lintian (2.5.98) unstable; urgency=medium
.
* Summary of tag changes:
+ Added:
- debian-rules-passes-version-info-to-dh_shlibdeps
- multi-arch-same-package-calls-pycompile
.
.
* checks/rules.pm:
+ [CL] Apply patch from Peter Pentchev to fix false-positives for
missing Build-Depends on debhelper when using debhelper-compat
commands. (Closes: #907261)
* checks/scripts.{desc,pm}:
+ [CL] Warn about Multi-Arch: same packages that use pycompile or
py3compile in their maintainer scripts. (Closes: #907276)
+ [CL] Expand the description to explain why we emit
wrong-path-for-interpreter for #!/usr/bin/env perl.
* checks/source-changelog.pm:
+ [FL] Fix false positives in version parsing, especially
when some components are "0". (Closes: #906957)
.
* data/rules/rules-should-not-use:
+ [CL] Check for packages that pass -V to dh_shlibdeps instead of
dh_makeshlibs. (Closes: #906722)
* data/standards-version/release-dates:
+ [CL] Add 4.2.1 as a known Standards-Version.
.
lintian (2.5.97) unstable; urgency=medium
.
* Summary of tag changes:
+ Added:
- debian-changelog-version-requires-debian-revision
- maintainer-script-needs-depends-on-xfonts-utils
- malformed-debian-changelog-version
- missing-call-to-update-fonts
- upload-has-backports-version-number
+ Renamed:
- native-package-with-dash-version ->
hyphen-in-native-debian-changelog-version
- non-native-package-with-native-version ->
hyphen-in-upstream-part-of-debian-changelog-version
.
* checks/changes-file.{desc,pm}:
+ [CL] Apply patch from Julien Cristau (with test) to warn about
uploads that have a version containing "~bpo" but their target
distribution is not *-backports. (Closes: #906155)
* checks/scripts.{desc,pm}:
+ [CL] Check for packages that contain X11 fonts but do not run
update-fonts-* in their postinst or depend on xfonts-utils.
(Closes: #905881)
* checks/source-changelog.{desc.pm}:
+ [FL] Rework, centralise and improve version parsing.
(Closes: #886036)
.
* data/common/dh_addons:
+ [NT] Refresh data.
* data/debhelper/dh_{commands,packages}:
+ [NT] Refresh data.
* data/spelling/corrections:
+ [PW] Add a number of corrections.
* data/testsuite/known-restrictions:
+ [CL] Re-add "allow-stderr" accidentally dropped in 0cb688fb.
(Closes: #905843)
.
* private/refresh-debhelper-data:
+ [NT] Add debhelper-compat an alternative to debhelper in
the data files.
.
* t/scripts/01-critic/runner.pl:
+ [CL] Bump perltidy test dependencies to prevent a failing build in
backports, etc.
.
lintian (2.5.96) unstable; urgency=medium
.
* Summary of tag changes:
+ Added:
- incomplete-creative-commons-license
- maintainer-script-should-not-use-dpkg-database-directly
+ Removed:
- no-upstream-changelog
+ Renamed:
- package-contains-upstream-install-documentation ->
package-contains-upstream-installation-documentation
.
* checks/changelog-file.{desc,pm}:
+ [CL] Drop no-upstream-changelog; it is rarely actionable and simply
introduces unnecessary noise and/or requiring an override. It had
additionally been disabled in the Ubuntu profile since 2011.
(Closes: #513544, #646192)
* checks/cruft.desc:
+ [CL] Tidy the description of the license-problem-cc-by-nc-sa and
license-problem-non-free-img-lenna tags.
* checks/files.{desc,pm}:
+ [BR] Improve package-contains-documentation-outside-usr-share-doc
by checking if README includes 'this directory' (Closes: #904852)
+ [CL] Rename package-contains-upstream-install-documentation tag to
package-contains-upstream-installation-documentation.
* checks/source-copyright.{desc,pm}:
+ [CL] Check for Creative Commons license texts that use the incomplete
"human-readable" summary. (Closes: #903470)
.
* data/scripts/maintainer-script-bad-command:
+ [CL] Warn about packages that directly query the dpkg database in
their maintainer scripts. Thanks, Guillem Jover! (Closes: #905469)
* data/spelling/corrections:
+ [PW] Add a number of corrections.
.
lintian (2.5.95) unstable; urgency=medium
.
* Summary of tag changes:
+ Added:
- debhelper-compat-virtual-relation
- depends-on-python2-and-python3
- no-op-testsuite
- r-package-not-arch-all
- source-only-upload-to-non-free-without-autobuild
.
* checks/debhelper.{desc,pm}:
+ [CL] Support "debhelper-compat (= X)" build-dependency as a
replacement for "debhelper (>= X~)". (Closes: #904886)
* checks/changes-file.{desc,pm}:
+ [CL] Detect source-only uploads to non-free uploads that will not be
autobuilt by default. (Closes: #905467)
* checks/control-file.desc:
+ [AB] Fix duplicate word "the" in tag description.
* checks/cruft.pm:
+ [CL] Don't emit mentions-deprecated-usr-lib-perl5-directory for
debian/*.install files as they are used as source directories.
(Closes: #905635)
* checks/fields.{desc.pm}:
+ [CL] Warn about R packages incorrectly set to "Architecture:
any". (Closes: #904985)
* checks/files.{desc,pm}:
+ [CL] Whitelist files in /usr/share/doc and /usr/share/locale for the
missing-depends-on-sensible-utils tag and update testsuite to match.
(Closes: #904936)
+ [CL] Add Suggests and Pre-Depends as potential relations with the
sensible-utils package. Thanks to Guillem Jover for the idea.
* checks/python.{desc,pm}:
+ [CL] Check for Python packages that have a relation on both Python 2
and Python 3. (Closes: #904817)
* checks/testsuite.{desc,pm}:
+ [CL] Warn about packages that have a single, no-op autopkgtest.
(Closes: #905030)
+ [CL] Move list of known fields, "Restriction" fields and testsuites
to files under data/testsuite/.
+ [CL] Improve the long description of the
testsuite-autopkgtest-missing tag; in particular, reference that
autopkgtest results now influence migration from unstable to testing.
.
* data/debhelper/filename-config-files:
+ [NT] Add mime and sharedmimeinfo as known debhelper config files.
* data/scripts/interpreters:
+ [CL] Prevent ruby-script-but-no-ruby-dep false positives by also
accepting ruby:any as a dependency. Thanks to Marc Dequènes for the
bug report. (Closes: #905258)
* data/spelling/corrections:
+ [PW] Add a number of corrections.
* data/standards-version/release-dates:
+ [CL] Add 4.2.0 as a known Standards-Version.
* data/testsuite/known-restrictions:
+ [CL] Add "flaky" and "skippable" to the list of known Restrictions in
testsuite definitions. Thanks to Rebecca N. Palmer.
(Closes: #904623)
.
* lib/Lintian/Collect/Package.pm:
+ [CL] Don't assume that "tar -tv" output always includes a time.
(Closes: #905423)
.
* debian/rules:
+ [CL] Apply a patch from Felix Lechner which fixes a typo which was
preventing the 'runtests' target relying on test descriptions.
.
lintian (2.5.94) unstable; urgency=medium
.
* Summary of tag changes:
+ Added:
- spelling-error-in-rules-requires-root
+ Renamed:
- missing-depends-on-sensible-utils =>
script-needs-depends-on-sensible-utils
.
* checks/control-file.desc:
+ [CL] Raise the severity of the debian-control-has-empty-field tag
from "P:" to "I:" and explicitly test the "whitespace" cases.
(Closes: #904420)
+ [CL] Warn about mispellings of Rules-Requires-Root. Thanks to Axel
Beckert for the idea. (Closes: #904522)
* checks/cruft.{desc,pm}:
+ [CL] Correctly warn about packages using sensible-utils without a
relationship by checking all files instead of just maintainer
scripts. Thanks to Guillem Jover. (Closes: #872611)
* checks/scripts.pm:
+ [CL] Policy 10.4 states that Perl scripts must use /usr/bin/perl
directly and not via /usr/bin/env, etc. (Closes: #904414)
.
* data/scripts/interpreters:
+ [CL] Add the Julia language as a known interpreter via
#!/usr/bin/julia. (Closes: #904140)
* data/spelling/corrections:
+ [PW] Add a number of corrections.
.
lintian (2.5.93) unstable; urgency=medium
.
* Summary of tag changes:
+ Added:
- vcs-field-mismatch
.
* checks/cruft.pm:
+ [CL] Don't emit r-data-without-readme-source by checking that .rda
(etc.) files aren't actually R data files. (Closes: #903435)
* checks/fields.{desc,pm}:
+ [CL] Add support and update tests for the "Vcs-Git: uri [subdir]"
syntax. (Closes: #903103)
+ [CL] Check for mismatched Vcs-* fields. (Closes: #903690)
* checks/gir.pm:
+ [CL] Apply patch from Simon McVittie to don't warn about wrong
section for "oldlibs".
.
* data/spelling/corrections:
+ [PW] Add a number of corrections.
.
* lib/Lintian/Collect/Package.pm:
+ [CL] Support parsing the filename component of tar -tvf output when
delimited by multiple spaces (not just a single one) to prevent
source-contains-empty-directory false positives. (Closes: #903307)
.
lintian (2.5.92) unstable; urgency=medium
.
The "Policy 4.1.5" release.
.
* Summary of tag changes:
+ Added:
- font-outside-font-dir
- package-contains-documentation-outside-usr-share-doc
- package-contains-eslint-config-file
- package-contains-npm-ignore-file
.
* checks/files.{desc,pm}:
+ [BR] Detect ESLint config files installed in the tree. ESLint is
pluggable linting utility for JavaScript. This kind of files belong
to source not to installed package.
+ [BR] Detect .woff, .woff2 and .eot files as fonts.
+ [BR] Detect installed fonts outside /usr/share/fonts.
+ [BR] Detect .npmignore files installed in the tree. These files
help npm the Node.js package manager to keep files
out of npm package.
+ [BR] Detect documentation files outside /usr/share/doc.
(Closes: #901274)
+ [CL] Apply patches from Jonathan Dowland (jmtd) to ignore
rel="edituri" and rel="copyright" URIs when checking external URIs
embedded in HTML files. (Closes: #902919)
+ [CL] Policy 4.1.5 adopts FHS 3.0 so permit files/dirs in
/usr/libexec. (Closes: #834607)
.
* data/files/{js-libraries,privacy-breaker-websites}:
+ [CL] Replace references to an unknown "libjs-normalize.css" package
with node-normalize.css package. Thanks to Lumin for the report.
(Closes: #902926)
* data/spelling/corrections:
+ [CL] Drop non-hyphenated versions of "re-enable" and "re-enabled";
these are seemingly legitimate. See
<https://github.com/systemd/systemd/pull/9321> for the background and
further discussion.
+ [PW] Add a number of corrections.
* data/standards-version/release-dates:
+ [CL] Add 4.1.5 as a known Standards-Version.
.
* debian/rules:
+ [CL] Don't install /usr/share/lintian/data/README; it's not very
useful at runtime and avoids a
package-contains-documentation-outside-usr-share-doc warning.
.
* t/scripts/spellintian.t:
+ [PW] Differentiate between no-op corrections and case sensitive
corrections.
+ [CL] Bump test count.
.
lintian (2.5.91) unstable; urgency=medium
.
* checks/rules.desc:
+ [CL] Replace DH_BUILD_MAINT_OPTIONS with DEB_BUILD_MAINT_OPTIONS
in tag description. Thanks to Drew Parsons for the report.
(Closes: #901581)
* checks/rules.{pm,desc}, data/*:
+ [CL] Also permit "python2" and suffixed variants as substitutes for
"python" (etc.) to avoid false-positives in the
missing-dep-for-interpreter, missing-build-dependency-for-dh-addon
and missing-python-build-dependency tags. (Closes: #901075)
.
* data/spelling/corrections:
+ [PW] Add a number of corrections.
.
lintian (2.5.90) unstable; urgency=medium
.
* checks/binaries.pm:
+ [CL] Ignore .debuginfo files under /usr/lib/jvm to prevent false-
positives in shared-lib-without-dependency-information.
(Closes: #900268)
* checks/cruft.pm:
+ [BR] Ignore HTML bold tags (eg. <b>) during license checking.
* checks/fields.{desc,pm}:
+ [CL] Move invalid-version-number-for-derivative to a "source" type
check so we have access to $info->native to prevent false-positives
when checking derivative versions.
* checks/systemd.pm:
+ [CL] Don't use potentially-undefined value in invalid .service files.
* checks/version-substvars.pm:
+ [CL] Fix a false-positives in version-substvar-for-external-package
when the "external" package is actually a "Provides" in the current
source package. (Closes: #833608)
.
* data/*:
+ [CL] Update and expand the documentation of
derivative-{changed-by,versions} to match the implementation.
* data/fields/obsolete-packages:
+ [BR] Detect obsolete Adobe Flash packages.
* data/files/js-libraries:
+ [BR] Detect libjs-jquery-ui, a set of user interface interactions,
effects, widgets, and themes built on top of the jQuery Javascript
library.
* data/scripts/interpreters:
+ [CL] Avoid #!/usr/bin/r false-positives when checking the
missing-dep-for-interpreter tag as r-cran-littler also "Provides"
this package. (Closes: #901228)
* data/spelling/corrections:
+ [PW] Add a number of corrections.
* data/spelling/corrections-multiword:
+ [CL] Drop "some system" from the list of multiword spelling
corrections. (Closes: #900670)
.
* helpers/coll/objdump-info-helper:
+ [CL] Ignore low ASCII characters in ELF headers such as RPATH and
SONAME to avoid false-positives in, for example, Go libraries.
(Closes: #898809)
.
* vendors/pureos/main/data/fields/derivative-fields:
+ [CL] Update the Vcs-* checks for PureOS now that repo structure has
introduced sub-groups.
.
lintian (2.5.89) unstable; urgency=medium
.
* Summary of tag changes:
+ Added:
- embedded-script-includes-copyright-statement
- source-contains-browserified-javascript
.
* checks/cruft.pm:
+ [BR] Detect minified Javascript in HTML files.
+ [BR] Detect browserified Javascript.
+ [BR] Detect scripts in HTML files that include copyright statements.
* checks/debhelper.pm:
+ [CL] Specifically check for missing "auto" in (for example)
"override_dh_build". Thanks to Mattia Rizzolo for the idea.
(Closes: #900213)
* checks/files.pm:
+ [BR] Detect privacy breaches in HTML5 files.
* checks/group-checks.pm:
+ [CL] Prevent false-positives when checking debug-package-for-multi-
arch-same-pkg-not-coinstallable by ignoring Python "debug" packages.
(Closes: #900122)
* checks/source-copyright.pm:
+ [CL] Update references from <https://dep.debian.net> to
<https://dep-team.pages.debian.net>.
.
* data/obsolete-sites/obsolete-sites:
+ [PW] Add search.cpan.org to the list of obsolete sites; it has been
replaced by metacpan.org.
* data/spelling/corrections:
+ [PW] Add a number of corrections.
.
* vendors/pureos/main/data/fields/derivative-fields:
+ [CL] Update the Vcs-* checks for PureOS now that code has moved to a
GitLab instance.
.
lintian (2.5.88) unstable; urgency=medium
.
* checks/application-not-library.desc:
+ [CL] Update references to pkg-perl's homepages since the Salsa
migration.
* checks/control-file.desc:
+ [CL] Update references to Go team's homepages for the Salsa move.
* checks/elpa.desc:
+ [CL] Apply patch from Sean Whitton to update references to
emacsen-team's website since the move from Alioth to Salsa.
Thank! (Closes: #899214)
* checks/fields.pm:
+ [CL] Really don't warn about binary packages "depending" on toolchain
packages via Conflicts/Breaks relations. Thanks to Guillem Jover.
(Closes: #896133)
* checks/files.pm:
+ [CL] Only warn about (eg.) "/usr/include/util.h" and
"/usr/include/<multiarch-dir>/util.h" when checking for overly
generic header names. (Closes: #899192)
.
* data/spelling/corrections:
+ [PW] Add a number of corrections.
+ [EB] Add some more corrections.
Checksums-Sha1:
a5d0d9966f081d459746a05519c22b30a1699d9f 3539 lintian_2.5.98~bpo9+1.dsc
6ab2617d438f7b04e207befca01ceb3e23e347fb 1582796 lintian_2.5.98~bpo9+1.tar.xz
fab63de1bf1da6c87a3434723971d67409352111 1133946 lintian_2.5.98~bpo9+1_all.deb
cca7e4d73f44b51280d47d2b40d1be3b6bab6b81 8648 lintian_2.5.98~bpo9+1_amd64.buildinfo
Checksums-Sha256:
16772d13858112f3b53d8dd7a3e063f3543b7e63d78d3a31f98c46d863cc5c80 3539 lintian_2.5.98~bpo9+1.dsc
5fbbc9d078dcefd1e14ca3842034ffc42910f09381d8ea8504c6295229747c8e 1582796 lintian_2.5.98~bpo9+1.tar.xz
d76d151ba4b2b95dc2429c2213ea71e4537ac3d9a61faaff0876f4337910e3d3 1133946 lintian_2.5.98~bpo9+1_all.deb
15b00aba911fae8a636b1615d7c863858192452a3b5739843543ffe538a6fc8e 8648 lintian_2.5.98~bpo9+1_amd64.buildinfo
Files:
fb780e15261963c769663f2883186938 3539 devel optional lintian_2.5.98~bpo9+1.dsc
99f7e7070f906e86f206b429c895e82b 1582796 devel optional lintian_2.5.98~bpo9+1.tar.xz
75d9858527c8b63f7baa1c10a35cbe0d 1133946 devel optional lintian_2.5.98~bpo9+1_all.deb
ca101d9ff6e38cf33ecf758c395488c1 8648 devel optional lintian_2.5.98~bpo9+1_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=YluC
-----END PGP SIGNATURE-----
Reply to: