Your message dated Sun, 03 Apr 2022 08:48:53 +0000
with message-id <[email protected]>
and subject line Bug#921284: fixed in dh-golang 1.55
has caused the Debian Bug report #921284,
regarding dh-golang: Built-Using should only include copylefted files
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
921284: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=921284
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: dh-golang
Version: 1.39
Severity: serious
My first submissions for the dmarc-cat package (#920385) were refused
by the FTP masters because the built-using field did not respect ยง7.8
of the Debian policy. Extract from #debian-ftp:
16:55:59 <jrtc27> Built-Using is only meant to be used when the result is
GPL/MPL/similar and you've statically linked (/bundled) another source package
16:56:33 <anarcat> okay, so to comply with licensing issues?
16:56:47 <anarcat> it also seems useful to track rdeps for golang as well, no?
16:57:03 <waldi> no, built-using is _not_ for tracking dependencies
16:57:10 <waldi> it is for license compliance
16:57:26 <waldi> and bsd licensed software does not require that
So in the case of dmarc-cat, dependencides like
golang-github-stretchr-testify-dev should actually not be listed in
the Built-Using field.
dh-cargo solves this by manually inspecting the copyright files in the
dependencies:
https://sources.debian.org/src/dh-cargo/17/dh-cargo-built-using/
Some similar solution should be implemented in dh-golang.
In the meantime, a workaround is to inspect the automatically
generated Built-Using line and hardcode a proper version after a
manual copyright audit. In the case of dmarc-cat, that inspection seem
to indicate no Built-Using line should be included whatsoever, as all
dependencies are BSD/MIT/Expat/Apache which doesn't require including
source...
-- System Information:
Debian Release: buster/sid
APT prefers testing
APT policy: (500, 'testing'), (1, 'experimental'), (1, 'unstable')
Architecture: amd64 (x86_64)
Kernel: Linux 4.19.0-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=fr_CA.UTF-8, LC_CTYPE=fr_CA.UTF-8 (charmap=UTF-8),
LANGUAGE=fr_CA.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
Versions of packages dh-golang depends on:
ii debhelper 12
ii dpkg 1.19.2
ii libdpkg-perl 1.19.2
ii perl 5.28.1-3
dh-golang recommends no packages.
dh-golang suggests no packages.
-- debconf-show failed
--- End Message ---
--- Begin Message ---
Source: dh-golang
Source-Version: 1.55
Done: Anthony Fok <[email protected]>
We believe that the bug you reported is fixed in the latest version of
dh-golang, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Anthony Fok <[email protected]> (supplier of updated dh-golang package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Sun, 03 Apr 2022 02:14:41 -0600
Source: dh-golang
Architecture: source
Version: 1.55
Distribution: unstable
Urgency: medium
Maintainer: Debian Go Packaging Team <[email protected]>
Changed-By: Anthony Fok <[email protected]>
Closes: 921284
Changes:
dh-golang (1.55) unstable; urgency=medium
.
[ Dan Bungert ]
* override_dh_auto_configure: remove symlinks
cp -a is being used to get a local copy of source, but we may already
have a partial copy locally, with symlinks. cp -a isn't able to cope
with symlinks that point to what we're trying to copy in. Remove those
symlinks, since we're about to replace them with non-linked copies.
.
[ Anthony Fok ]
* Change Section from devel to golang
* dh_golang: Transition to misc:Static-Built-Using substvar, but continue
to emit misc:Built-Using for backward compatibility during transition.
Add "Depends: dpkg (>= 1.21.3~)" for Static-Built-Using field support.
(Closes: #921284)
Checksums-Sha1:
357c1ec3ad81e1e336e36a175014c554000a2e30 1768 dh-golang_1.55.dsc
57e7c836f4c70a7147f1580a71a6110467714d73 18692 dh-golang_1.55.tar.xz
bda32f35b06e9a083b7466c8e0c61d865ec44683 6028 dh-golang_1.55_amd64.buildinfo
Checksums-Sha256:
64e831494f1988bdfe6d6198d66a8c1bb9a8c6742d5252f0eff63f6404363157 1768
dh-golang_1.55.dsc
6eebce0f10c3d7eb625e57f36b45b722fa1e920dbed7415b438b40080c5fd377 18692
dh-golang_1.55.tar.xz
964431c2f79d9a15518d393f8bf1f10c61d31d647a9bb7ddcb1f59b75987bc49 6028
dh-golang_1.55_amd64.buildinfo
Files:
620c872fb34bf175077b6c43366d578d 1768 golang optional dh-golang_1.55.dsc
c16166cc2a1174b493c4032547ff35fb 18692 golang optional dh-golang_1.55.tar.xz
e0320e78ee26a92c387aaabffe4137b2 6028 golang optional
dh-golang_1.55_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=h0SI
-----END PGP SIGNATURE-----
--- End Message ---
