Your message dated Tue, 19 Aug 2025 20:39:46 +0000
with message-id <[email protected]>
and subject line Bug#1111450: fixed in python-argon2-cffi-bindings 25.1.0-2
has caused the Debian Bug report #1111450,
regarding python-argon2-cffi-bindings: upstream does not use gpg key to sign
tarball
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1111450: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1111450
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: src:python-argon2-cffi-bindings
Severity: normal
Control: found -1 25.1.0-1
Hello,
Upstream stopped signing tags with GPG after 23.1.0.
uscan does not support SSH signatures or GitHub attestations,
so the key is obsolete. Drop debian/upstream/signing-key.asc
and disable GPG verification in debian/watch.
Best,
--
Carl
signature.asc
Description: PGP signature
--- End Message ---
--- Begin Message ---
Source: python-argon2-cffi-bindings
Source-Version: 25.1.0-2
Done: Carl Keinath <[email protected]>
We believe that the bug you reported is fixed in the latest version of
python-argon2-cffi-bindings, which is due to be installed in the Debian FTP
archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Carl Keinath <[email protected]> (supplier of updated
python-argon2-cffi-bindings package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Mon, 18 Aug 2025 22:17:04 +0200
Source: python-argon2-cffi-bindings
Built-For-Profiles: noudeb
Architecture: source
Version: 25.1.0-2
Distribution: unstable
Urgency: medium
Maintainer: Debian Python Team <[email protected]>
Changed-By: Carl Keinath <[email protected]>
Closes: 1111450
Changes:
python-argon2-cffi-bindings (25.1.0-2) unstable; urgency=medium
.
* Upstream stopped signing tags with GPG after 21.2.0.
* d/watch: disabled GPG-key verification (Closes: #1111450).
* d/upstream/signing-key.asc: removed obsolete GPG key.
Checksums-Sha1:
076a2f507dc17c3756cf98ee063f40bf0e0d3140 2352
python-argon2-cffi-bindings_25.1.0-2.dsc
60a353d41584a545f42ff748249f89f1174ff6b8 2656
python-argon2-cffi-bindings_25.1.0-2.debian.tar.xz
78e5b2a2717e206a5cf061f19397a841bdb2041e 15459
python-argon2-cffi-bindings_25.1.0-2_source.buildinfo
Checksums-Sha256:
d6ff40cbc1ace3c3affe3999bdcaba8601534300e2816b622bd1433fc68fceeb 2352
python-argon2-cffi-bindings_25.1.0-2.dsc
939549bce83332d5776f8fd30f70f5d248854c4e21749e255771fc98e4c60e45 2656
python-argon2-cffi-bindings_25.1.0-2.debian.tar.xz
190e74336bb6826ac832cba46f66ab8ad239827bdcd5278d195174f09448bf7a 15459
python-argon2-cffi-bindings_25.1.0-2_source.buildinfo
Files:
e630610e03adadad85d329965b84f1b5 2352 python optional
python-argon2-cffi-bindings_25.1.0-2.dsc
a35fdf45896c4ebbb0a7ec48dcfc3d9a 2656 python optional
python-argon2-cffi-bindings_25.1.0-2.debian.tar.xz
fad198f53e0cff88bce5ef2b62dee062 15459 python optional
python-argon2-cffi-bindings_25.1.0-2_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=dIPJ
-----END PGP SIGNATURE-----
pgpISThikoE1o.pgp
Description: PGP signature
--- End Message ---