Your message dated Thu, 08 Jan 2026 15:00:09 +0000
with message-id <[email protected]>
and subject line Bug#1120588: fixed in libgit2 1.9.2+ds-3
has caused the Debian Bug report #1120588,
regarding src:libgit2: Please enable sha256 features (causes library transition)
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1120588: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1120588
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: libgit2
Version: 1.9.1+ds-1
Severity: wishlist
Control: affects -1 + gitg
Please enable the "experimental sha256" feature, and produce a variant
of the library with it. This means passing -DEXPERIMENTAL_SHA256=ON to
cmake.
As noted in the libgit2 README.md, this is an api-incompatible change,
which suggests it would need to be a library transition in debian.
There are a couple different ways it could be done in debian, including
some sort of library rename for the package when built with this
enabled, shipping both variants at once and letting dependencies choose
which one to build against, etc.
We could also use experimental to try this out, so that we can provide
feedback for any dependencies that might need to do a rebuild.
I recognize that this might be a big ask, but we are long overdue to get
the migration process rolling for the git ecosystem, and this kind of
work could help move it along.
If you have any suggestions about the way it should be done, i'm happy
to consider and review.
--dkg
# Background:
Currently, gitg fails to recognize a git repository that uses sha256
object formats:
```
0 dkg@bob:/tmp/cdtemp.Ybpesp$ git init --object-format=sha256
Initialized empty Git repository in /tmp/cdtemp.Ybpesp/.git/
0 dkg@bob:/tmp/cdtemp.Ybpesp$ touch foo
0 dkg@bob:/tmp/cdtemp.Ybpesp$ git add foo
0 dkg@bob:/tmp/cdtemp.Ybpesp$ git commit -m 'added foo'
[main (root-commit) 2812c0d] added foo
1 file changed, 0 insertions(+), 0 deletions(-)
create mode 100644 foo
0 dkg@bob:/tmp/cdtemp.Ybpesp$ git log
commit 2812c0d8244c651e025a0d0786dba9c9d5653842d51a72370d69da9084b80c1c (HEAD
-> main)
Author: Daniel Kahn Gillmor <[email protected]>
Date: Tue Nov 11 14:54:58 2025 -0500
added foo
0 dkg@bob:/tmp/cdtemp.Ybpesp$ gitg
Error: not able to open repository “unknown object format 'sha256'”.
0 dkg@bob:/tmp/cdtemp.Ybpesp$
```
I mentioned this to gitg upstream at
https://gitlab.gnome.org/GNOME/gitg/-/issues/502 and they pointed me to
their libgit2 dependency.
-- System Information:
Debian Release: forky/sid
APT prefers testing-debug
APT policy: (500, 'testing-debug'), (500, 'testing'), (200,
'unstable-debug'), (200, 'unstable'), (1, 'experimental-debug'), (1,
'experimental')
Architecture: amd64 (x86_64)
Kernel: Linux 6.16.12+deb14+1-amd64 (SMP w/20 CPU threads; PREEMPT)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled
signature.asc
Description: PGP signature
--- End Message ---
--- Begin Message ---
Source: libgit2
Source-Version: 1.9.2+ds-3
Done: Timo Röhling <[email protected]>
We believe that the bug you reported is fixed in the latest version of
libgit2, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Timo Röhling <[email protected]> (supplier of updated libgit2 package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Fri, 02 Jan 2026 19:57:09 +0100
Binary: libgit2-1.9 libgit2-1.9-dbgsym libgit2-dev libgit2-experimental1.9
libgit2-experimental1.9-dbgsym libgit2-experimental-dev libgit2-fixtures
Source: libgit2
Architecture: all amd64 source
Version: 1.9.2+ds-3
Distribution: experimental
Urgency: medium
Maintainer: Utkarsh Gupta <[email protected]>
Changed-By: Timo Röhling <[email protected]>
Closes: 1120588
Description:
libgit2-1.9 - low-level Git library
libgit2-dev - low-level Git library (development files)
libgit2-experimental1.9 - low-level Git library with SHA-256 support
libgit2-experimental-dev - low-level Git library with SHA-256 support
(development files)
libgit2-fixtures - low-level Git library (test suite examples)
Changes:
libgit2 (1.9.2+ds-3) experimental; urgency=medium
.
* Enable experimental SHA-256 support (Closes: #1120588)
* Mark autopkgtest as superficial
Checksums-Sha1:
3ebcdc2757504fbdb1a210e8dff9c61fe8cb0cb0 2777 libgit2_1.9.2+ds-3.dsc
4976c7de4f51cc6c6d7e818521ad2816b1fcc39d 18912 libgit2_1.9.2+ds-3.debian.tar.xz
5c1bdc2aef716dbf4252005a98727cba37d31bf5 1924840
libgit2-1.9-dbgsym_1.9.2+ds-3_amd64.deb
6e33f3f7940185fa23f22e0f9ce86b5bc26b2eb7 559556
libgit2-1.9_1.9.2+ds-3_amd64.deb
aeb481cee56b2ffeabe16f78966909a90213bd9c 850092
libgit2-dev_1.9.2+ds-3_amd64.deb
ce4f4b9a4fbb11bd4f3eb126784e9dd2e2a09fbb 779856
libgit2-experimental-dev_1.9.2+ds-3_amd64.deb
f234ab10cb93728787ed7294695f260f47ef1b65 1932584
libgit2-experimental1.9-dbgsym_1.9.2+ds-3_amd64.deb
c7014f4dd89aea809014ac96db6e97c239e399af 562968
libgit2-experimental1.9_1.9.2+ds-3_amd64.deb
5b0d12bfdfe17776e7db42e846e40c187982b525 2652416
libgit2-fixtures_1.9.2+ds-3_all.deb
b7338a7d2c5eb0bd782d975ae1bb2ac57fef1029 9273
libgit2_1.9.2+ds-3_amd64.buildinfo
Checksums-Sha256:
8044e76a5926e94f3dfae75fa573afbe3a4c6a5efc3c5d7850d4d37750a03a81 2777
libgit2_1.9.2+ds-3.dsc
98f515d0373dec024fe233227f3d67e44e681b4811557df57b3a159cc85aca0a 18912
libgit2_1.9.2+ds-3.debian.tar.xz
e223ae32514c90995aeef149615d5ce916b8274a0f75e3063fd39c29dd8a5097 1924840
libgit2-1.9-dbgsym_1.9.2+ds-3_amd64.deb
2a0cde87333519a937066c6d601b3dd87a452ff94971d0e232155b97e98ae86f 559556
libgit2-1.9_1.9.2+ds-3_amd64.deb
21b242abef2b918b82d5336415b8369f72f9df7ca3e10ed9dead24961e741848 850092
libgit2-dev_1.9.2+ds-3_amd64.deb
7e9c848f2eb3f96a6d5da9927157a9f0606c418525ed1cea0ec83de15eac9530 779856
libgit2-experimental-dev_1.9.2+ds-3_amd64.deb
51f19ee383520ccfea62f354f133355af0cdb61099f930113e32ee4fe7d6097d 1932584
libgit2-experimental1.9-dbgsym_1.9.2+ds-3_amd64.deb
745ade075a793f5297a9a2e63cac930630fd8ae0e0b85920c144d6de97a4737b 562968
libgit2-experimental1.9_1.9.2+ds-3_amd64.deb
2173f38989679ce27e74bb77fdbb8b0f5f2e626896f75ab70f15bb4967fde53a 2652416
libgit2-fixtures_1.9.2+ds-3_all.deb
cbab4714640b182aa8b70144ce3b4892e320a23caacfec6471c415c8f3dad4f3 9273
libgit2_1.9.2+ds-3_amd64.buildinfo
Files:
c67e76c317f4fefd51c1d75507d1e98f 2777 libs optional libgit2_1.9.2+ds-3.dsc
9586680a6a2d5fc9672ef465abdca96e 18912 libs optional
libgit2_1.9.2+ds-3.debian.tar.xz
97c4f0ddbe4820ea14fb86ceef180346 1924840 debug optional
libgit2-1.9-dbgsym_1.9.2+ds-3_amd64.deb
9ca93c669ce7e8b52915bfcc829c1360 559556 libs optional
libgit2-1.9_1.9.2+ds-3_amd64.deb
851e8bfc8b94ac440f56b07fa3b7048b 850092 libdevel optional
libgit2-dev_1.9.2+ds-3_amd64.deb
9501b25994dc569641e9ebe5592c044c 779856 libdevel optional
libgit2-experimental-dev_1.9.2+ds-3_amd64.deb
9a53b9d07a0b852a83f19b7d14402645 1932584 debug optional
libgit2-experimental1.9-dbgsym_1.9.2+ds-3_amd64.deb
1dff67bf24d44501e8b2fdb7e48b93e0 562968 libs optional
libgit2-experimental1.9_1.9.2+ds-3_amd64.deb
2510bc0094fe050b06f1cc5ce1133d0e 2652416 libs optional
libgit2-fixtures_1.9.2+ds-3_all.deb
7a6dd709f4a76fe45c48b67a3998cc3e 9273 libs optional
libgit2_1.9.2+ds-3_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=3Kl5
-----END PGP SIGNATURE-----
pgpQUWpIibBpO.pgp
Description: PGP signature
--- End Message ---
