Bug#1116706: UDD: upstream watch gets incorrect uscan status

[Lucas Nussbaum <lucas@debian.org>]

Hi,

On 30/09/25 at 08:42 -0400, Milan Kupcevic wrote:
> Package: qa.debian.org
> User: qa.debian.org@packages.debian.org
> Usertags: udd
> 
> UDD upstream watch gets incorrect uscan status:
> 
>  $ curl https://udd.debian.org/cgi-bin/upstream-status.json.cgi | jq '.[] | select(.package == "osg-certificates")'
>  [...]
>  {
>    "debian-mangled-uversion": "1.137+~1.137+~25258.4d4352d",
>    "debian-uversion": "1.137+dfsg+~1.137+~25258.4d4352d",
>    "package": "osg-certificates",
>    "status": "newer package available",
>    "upstream-url": "https://api.github.com/repos/opensciencegrid/osg-certificates/tarball/refs/tags/v1.137.igtf.1.137";,
>    "upstream-version": "1.137.igtf.1.137+~1.137+~25258.4d4352d",
>    "warnings": null,
>    "errors": null
>  }
> 
> Nevertheless, running uscan on a command line gets correct upstream status:
> 
>  $ dget https://deb.debian.org/debian/pool/main/o/osg-certificates/osg-certificates_1.137+dfsg+~1.137+~25258.4d4352d-1.dsc
>  [...]
>  $ uscan --pasv --dehs --no-download
>  <dehs>
>  <package>osg-certificates</package>
>  <debian-uversion>1.137+dfsg+~1.137+~25258.4d4352d</debian-uversion>
>  <debian-mangled-uversion>1.137+~1.137+~25258.4d4352d</debian-mangled-uversion>
>  <upstream-version>1.137+~1.137+~25258.4d4352d</upstream-version>
>  <upstream-url>https://api.github.com/repos/opensciencegrid/osg-certificates/tarball/refs/tags/v1.137.igtf.1.137</upstream-url>
>  <status>up to date</status>
>  <component id="igtf-bundle">
>    <component-debian-uversion>1.137</component-debian-uversion>
>    <component-debian-mangled-uversion>1.137</component-debian-mangled-uversion>
>    <component-upstream-version>1.137</component-upstream-version>
>    <component-upstream-url>https://dist.eugridpma.info/distribution/igtf/current/igtf-policy-installation-bundle-1.137.tar.gz</component-upstream-url>
>  </component>
>  <component id="letsencrypt-ca">
>    <component-debian-uversion>25258.4d4352d</component-debian-uversion>
>    <component-debian-mangled-uversion>25258.4d4352d</component-debian-mangled-uversion>
>    <component-upstream-version>25258.4d4352d</component-upstream-version>
>    <component-upstream-url>https://github.com/opensciencegrid/letsencrypt-certificates.git HEAD</component-upstream-url>
>  </component>
>  </dehs>
> 
> Could you please check what is going on with the UDD upstream importer?

UDD uses devscripts 2.25.19. Could it be a regression introduced with
the recent uscan changes in devscripts?

Lucas