[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: golang-go.crypto 0.36.0 for trixie?



El 19/03/25 a las 01:10, Simon Josefsson escribió:
> > I am curious, and with my Salsa CI hat on, are you able to share how
> > do you build the rev deps on Salsa?
> 
> Simple example:
> 
> https://salsa.debian.org/jas/sigstore-go/-/blob/debian/latest/debian/salsa-ci.yml?ref_type=heads
> 
> The relevant part is including this template:
> 
> https://salsa.debian.org/jas/reverse-dependency-ci/-/raw/jas/my-rdep-ci/ci-template.yml
> 
> and then adding a job definition for each reverse dependency:
> 
> build-rdep-cosign:
>   variables:
>     REVERSE_DEP: cosign
>   extends: .rdep-build-definition
> 
> Of course, doing that manually is boring, so the advanced example is
> finding out the list of packages semi-automatically by adding the
> package to your fork of the reverse-dependency-ci project.  For
> example:
> 
> https://salsa.debian.org/jas/golang-github-sigstore-sigstore/-/blob/debian/sid/debian/salsa-ci.yml?ref_type=heads
> 
> Note how it includes this file:
> 
> https://jas.pages.debian.net/reverse-dependency-ci/golang-github-sigstore-sigstore.yml
> 
> That file is automatically generated by the pipeline of this project:
> 
> https://salsa.debian.org/jas/reverse-dependency-ci/
> 
> This has been a useful workflow for me for several years now.  Many
> thanks to Bernd Zeimetz who got this ball started.
> 
> Wrapping this up for standard inclusion into the Salsa pipeline is work
> in progress here - although I haven't had time to push this along.
> 
> https://salsa.debian.org/salsa-ci-team/pipeline/-/merge_requests/470

ACK, I am aware of this MR. rouca has also been working on rev deps
building, probably with a similar approach.

Happy to help, once I have some cycles available.


Back to the golang-go.crypto topic, from #debian-release:

<Sebastinas> santiago: It doesn't build a shared library, so no
transition. But the transition/toolchain freeze also states "Any change
which is large or disruptive, which requires coordination or has a
higher change of regressions is no longer appropriate at this time."
<Sebastinas> With 960 reverse dependendencies, it's too late IMHO

Sorry, I was unable to upload a newer version before.

Cheers,

 -- Santiago

Attachment: signature.asc
Description: PGP signature


Reply to: