[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#1109633: Bug #1109633 - PSR-Container version compatibility issue for FOSSology



Dear William,

I understand your concern about duplicate packages, but there's a critical version compatibility issue that requires clarification.

SPECIFIC VERSION REQUIREMENT:
FOSSology requires php-psr-container version 1.1.2, while the current Debian package provides version 2.0.x. This is not a minor version difference - PSR-Container 2.0 introduced breaking changes that make it incompatible with applications built for 1.x.

EVIDENCE FROM OUR INTEGRATION TESTING:
During FOSSology packaging, we encountered this exact dependency conflict:
"php-symfony-dependency-injection depends on php-psr-container (<< 2~~); however: Version of php-psr-container on system is 2.0.2-1"

This error demonstrates that FOSSology's Symfony 3.4.x components cannot work with PSR-Container 2.0.x.

BREAKING CHANGES IN PSR-11 v2.0:
- Interface method signatures changed
- Exception handling behavior modified
- Backward compatibility with 1.x applications broken
- Requires application code updates to migrate

TECHNICAL CONTEXT:
FOSSology was built against PSR-Container 1.1.2 APIs. The PSR-Container 2.0 upgrade path requires significant code changes in the application, which FOSSology hasn't implemented yet.

PROPOSED SOLUTION:
Package as php-psr-container-1.1 to provide the legacy version alongside the current 2.0 package, similar to how Debian handles:
- Multiple Python versions (python3.9, python3.10, python3.11)
- Different PostgreSQL versions (postgresql-13, postgresql-14, postgresql-15)
- Various PHP versions (php7.4, php8.1, php8.2)

JUSTIFICATION:
This is standard practice in Debian when major version upgrades break backward compatibility. Many applications still require PSR-Container 1.x compatibility.

REQUEST:
Could we reopen this ITP to discuss version-specific packaging? FOSSology is a significant license compliance tool that would benefit the Debian ecosystem.

Best regards,
Ahmed Gamal
FOSSology Debian Packaging Team

Technical reference: https://www.php-fig.org/psr/psr-11/meta/

On Sun, Aug 10, 2025 at 2:03 PM Debian Bug Tracking System <owner@bugs.debian.org> wrote:
Your message dated Sun, 10 Aug 2025 15:45:06 +0200
with message-id <198943a261a.128607e99394474.6146403675296746199@wdes.fr>
and subject line The package already exists in Debian
has caused the Debian Bug report #1109633,
regarding ITP: php-psr-container -- Common container interface (PSR-11) for PHP
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


--
1109633: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1109633
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems



---------- Forwarded message ----------
From: Ahmed Gamal <ahmed.gamal9541@gmail.com>
To: Debian Bug Tracking System <submit@bugs.debian.org>
Cc: 
Bcc: 
Date: Mon, 21 Jul 2025 07:11:43 +0000
Subject: ITP: php-psr-container -- Common container interface (PSR-11) for PHP
Package: wnpp
Severity: wishlist
Owner: Ahmed Gamal <ahmed.gamal9541@gmail.com>

* Package name    : php-psr-container
  Version         : 1.1.2
  Upstream Author : PHP-FIG <http://www.php-fig.org/>
* URL             : https://github.com/php-fig/container
* License         : MIT
  Programming Lang: PHP
  Section         : php

Description:
 Common container interface (PSR-11) for PHP

 This package provides the standard PSR-11 container interface for PHP. It defines
 a common interface for dependency injection containers, allowing libraries and
 frameworks to interoperate with any container implementation that follows the
 PSR-11 specification.

 The package contains the standard interfaces for retrieving objects and parameters
 from a container, ensuring interoperability and flexibility in PHP applications.

Rationale:
 This package is required as a dependency for FOSSology, an open source license
 compliance system. FOSSology uses PHP-based tools for source code analysis and
 license detection, which rely on the PSR-11 container interface for managing
 dependencies and service objects in a consistent and maintainable way.

 The php-psr-container package is essential for:
 - Providing a standardized container interface for FOSSology components
 - Ensuring interoperability with PSR-11 compliant libraries and frameworks
 - Supporting dependency injection and service management in FOSSology
 - Promoting modular and maintainable code architecture
 - Enabling consistent dependency retrieval across different implementations

Technical Details:
 - Requires PHP >= 5.3.0
 - Implements PSR-11 container interface specification
 - Uses PSR-4 autoloading
 - Provides interfaces for container interoperability
 - MIT licensed for maximum compatibility
 - Part of the PHP-FIG standards recommendations

Dependencies:
 - php (>= 5.3.0)
 - Build dependencies: phpunit, php-codesniffer

The package will be maintained by Ahmed Gamal <ahmed.gamal9541@gmail.com> as part
of the FOSSology packaging effort.

--
Ahmed Gamal
FOSSology Debian Packaging Team



---------- Forwarded message ----------
From: William Desportes <williamdes@wdes.fr>
To: 1109364-done <1109364-done@bugs.debian.org>, 1109365-done <1109365-done@bugs.debian.org>, 1109613-done <1109613-done@bugs.debian.org>, 1109615-done <1109615-done@bugs.debian.org>, 1109621-done <1109621-done@bugs.debian.org>, 1109624-done <1109624-done@bugs.debian.org>, 1109625-done <1109625-done@bugs.debian.org>, 1109632-done <1109632-done@bugs.debian.org>, 1109633-done <1109633-done@bugs.debian.org>, 1109634-done <1109634-done@bugs.debian.org>, 1109640-done <1109640-done@bugs.debian.org>
Cc: 
Bcc: 
Date: Sun, 10 Aug 2025 15:45:06 +0200
Subject: The package already exists in Debian

Please do some research before opening ITP/RFP bugs.
This package already exists in Debian.

--
William Desportes

Reply to: