Shengjing Zhu <zhsj@debian.org> writes: > On Mon, Jan 15, 2024 at 9:27 PM Simon Josefsson <simon@josefsson.org> wrote: >> >> Package: wnpp >> Severity: wishlist >> Owner: Simon Josefsson <simon@josefsson.org> >> >> * Package name : golang-k8s-sigs-release-utils >> Version : 0.7.7-1 >> Upstream Author : Kubernetes SIGs >> * URL : https://github.com/kubernetes-sigs/release-utils >> * License : Apache-2.0 >> Programming Lang: Go >> Description : utilities for kubernetes Go release engineering (library) >> >> Tiny utilities for use by the Release Engineering subproject and >> kubernetes/release (https://github.com/kubernetes/release/). >> > > Which package will need this library? It looks strange by the name and > description. We certainly don't do the release stuff for kubernetes. Sigstore's rekor complained: https://salsa.debian.org/jas/golang-github-sigstore-rekor/-/jobs/5160982 src/github.com/sigstore/rekor/cmd/backfill-redis/main.go:44:2: cannot find package "sigs.k8s.io/release-utils/version" in any of: /usr/lib/go-1.21/src/sigs.k8s.io/release-utils/version (from $GOROOT) /builds/jas/golang-github-sigstore-rekor/debian/output/source_dir/_build/src/sigs.k8s.io/release-utils/version (from $GOPATH) Use is here: https://github.com/sigstore/rekor/blob/main/cmd/backfill-redis/main.go#L44 Can you think of some other solution than packaging golang-k8s-sigs-release-utils? I would be happy to learn about alternative approaches to reduce golang dependencies. /Simon
Attachment:
signature.asc
Description: PGP signature