[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: tag2upload's support of pristine-tar missing and potential regression in upstream signature verification (Re: Include git commit id and git tree id in *.changes files when uploading?)



Hello,

On Sun 21 Dec 2025 at 05:49pm +01, Simon Josefsson wrote:

> Sean Whitton <spwhitton@spwhitton.name> writes:
>
>>> ... as tag2upload does not support including the upstream release tags
>>> and their signatures either.
>>
>> tag2upload does support including the usptream release tags -- indeed,
>> it relies upon doing so.  We archive them all in our append-only git
>> depository.
>
> I don't see any upstream git tags on browse.dgit.d.o, where are upstream
> tags stored?  How is the above achieved?

Oops.  You're right, while we convey the things *pointed to* by the
tags, we don't convey the tags themselves.  We got stuck on namespacing
issues; ideas would be welcome: #1106073.

-- 
Sean Whitton

Attachment: signature.asc
Description: PGP signature


Reply to: