[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Enabling tag2upload for Debian Science Packages



Hello,

On 2025-06-18 00:52, Ian Jackson wrote:
Anton Gladky writes ("Enabling tag2upload for Debian Science Packages"):
As you probably know, there is a new service in Debian called tag2upload,
which is currently in the testing phase. The idea behind it is to allow
Debian uploads by simply pushing a signed Git tag. [1]

Hi.

If you are a co-maintainer of any Debian Science package and do not want
this feature enabled for your repository, please send me a short email
within the next 24 hours. If you miss this deadline, you can still
remove the webhook at any time via Settings Webhooks by deleting the
"tag2upload" entry.

I'd just like to clarify a point:

The tag2upload system only does anything if you push a
specially-formatted signed tag containing a `[please-upload]`
annotation.  These are typically made with `git-debpush(1)`,
which is the tool an uploader uses to invoke the tag2upload service.

This is a very important point, thanks for clarifying.

So adding the webhook, by itself, is harmless.  It won't affect the
normal uploads or use of the repository in any way, nor will it react
to unrelated git tags.

Even for maintainers who don't want tag2upload operating on their
packages, I would say that you can be content with the webhook.  But
in that case you'll want to let Anton (and this list) know so that he
and others don't in fact try to use tag2upload for those packages.

I ve been using this service for some time and am very satisfied with it.
It s great to see our infrastructure becoming more efficient and modern.
Big thanks to the folks working on making this happen!

Thanks for the kind words :-).

One small caveat: I would like to remind everyone that tag2upload is
still in closed beta right now, and that Debian is in the freeze for
trixie.  Please be mindful of the freeze and proceed with all due
caution.  Usually you'll want to at least upload any particular
package to experimental, before using tag2upload for an upload to
unstable (targeting trixie).

Sean and I intend to open the beta more widely soon.  There will be a
mail to debian-devel-announce about that.

One feature that is not yet implemented and may be important to you:
pristine-tar is currently unsupported. See bug report #1106071. If
you have the interest, time, and expertise, feel free to contribute to
its implementation.

I rely on pristine-tar in my workflow. Therefore I am tempted to opt my co-maintained packages out to preserve my workflow.

One more thing. It is great that a possibility is given to opt out. However, it creates heterogeneity within the team, and tag+push+forget might result in accidentally tagged, but never uploaded versions. Would it make sense to have a hook in opted-out repositories to send an email whenever tag with '[please-upload]' is received?

Thanks,
Andrius


Reply to: