--- Begin Message ---
Source: gnome-software
Severity: important
Tags: patch
Due to changes in the secure boot summarized in
https://wiki.debian.org/SecureBoot/CAChanges)
there needs to be an upgrade to a newer fwupd version in bookworm to allow
updating the trust
chain.
This work is tracked by release team in the bookworm-pu bug:
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1139252
Unfortunately; upgrading to the newer fwupd version requires an ABI bump which
means some minor
patches for the ABI change and rebuilding against the newer libfwupd.
I've validated this works properly, and I would like permission to send up a
NMU coordinating
with the updated fwupd. The proposed debdiff is attached to the release team
bug.
diff -Nru gnome-software-43.5/debian/changelog
gnome-software-43.5/debian/changelog
--- gnome-software-43.5/debian/changelog 2023-06-16 05:33:47.000000000
-0500
+++ gnome-software-43.5/debian/changelog 2026-06-27 13:02:08.000000000
-0500
@@ -1,3 +1,11 @@
+gnome-software (43.5-1~deb12u2) bookworm; urgency=medium
+
+ * Add patch for fwupd 2.0 compat.
+ * d/control:
+ - b/d on newer libfwupd
+
+ -- Mario Limonciello <[email protected]> Sat, 27 Jun 2026 13:02:08 -0500
+
gnome-software (43.5-1~deb12u1) bookworm; urgency=medium
* Team upload
diff -Nru gnome-software-43.5/debian/control gnome-software-43.5/debian/control
--- gnome-software-43.5/debian/control 2023-06-16 05:33:47.000000000 -0500
+++ gnome-software-43.5/debian/control 2026-06-27 13:02:08.000000000 -0500
@@ -16,7 +16,7 @@
libadwaita-1-dev (>= 1.0.1),
libappstream-dev (>= 0.14.0),
libflatpak-dev (>= 1.14.0) [amd64 arm64 armel armhf i386 mipsel
mips64el ppc64el s390x hppa powerpc ppc64 riscv64 x32],
- libfwupd-dev (>= 1.5.6) [linux-any],
+ libfwupd-dev (>= 2.0.20) [linux-any],
libglib2.0-dev (>= 2.70.0),
libglib-testing-0-dev,
libgtk-4-dev (>= 4.6),
diff -Nru gnome-software-43.5/debian/control.in
gnome-software-43.5/debian/control.in
--- gnome-software-43.5/debian/control.in 2023-06-16 05:33:47.000000000
-0500
+++ gnome-software-43.5/debian/control.in 2026-06-27 13:02:08.000000000
-0500
@@ -12,7 +12,7 @@
libadwaita-1-dev (>= 1.0.1),
libappstream-dev (>= 0.14.0),
libflatpak-dev (>= 1.14.0) [amd64 arm64 armel armhf i386 mipsel
mips64el ppc64el s390x hppa powerpc ppc64 riscv64 x32],
- libfwupd-dev (>= 1.5.6) [linux-any],
+ libfwupd-dev (>= 2.0.20) [linux-any],
libglib2.0-dev (>= 2.70.0),
libglib-testing-0-dev,
libgtk-4-dev (>= 4.6),
diff -Nru gnome-software-43.5/debian/patches/remove-old-api.patch
gnome-software-43.5/debian/patches/remove-old-api.patch
--- gnome-software-43.5/debian/patches/remove-old-api.patch 1969-12-31
18:00:00.000000000 -0600
+++ gnome-software-43.5/debian/patches/remove-old-api.patch 2026-06-27
13:02:08.000000000 -0500
@@ -0,0 +1,126 @@
+From: Mario Limonciello <[email protected]>
+Date: Jun, 27 2026 18:08:22 -0500
+Subject: [PATCH] Remove old fwupd API
+
+Index: gnome-software-43.5/plugins/fwupd/gs-fwupd-app.c
+===================================================================
+--- gnome-software-43.5.orig/plugins/fwupd/gs-fwupd-app.c
++++ gnome-software-43.5/plugins/fwupd/gs-fwupd-app.c
+@@ -62,11 +62,6 @@ gs_fwupd_app_set_from_device (GsApp *app
+ if (fwupd_device_has_flag (dev, FWUPD_DEVICE_FLAG_UPDATABLE))
+ gs_app_set_state (app, GS_APP_STATE_UPDATABLE_LIVE);
+
+- /* only can be applied in systemd-offline */
+- if (fwupd_device_has_flag (dev, FWUPD_DEVICE_FLAG_ONLY_OFFLINE))
+- gs_app_set_metadata (app, "fwupd::OnlyOffline", "");
+-
+-
+ /* reboot required to apply update */
+ if (fwupd_device_has_flag (dev, FWUPD_DEVICE_FLAG_NEEDS_REBOOT))
+ gs_app_add_quirk (app, GS_APP_QUIRK_NEEDS_REBOOT);
+@@ -106,9 +101,9 @@ gs_fwupd_app_set_from_device (GsApp *app
+ }
+ if (fwupd_device_get_created (dev) != 0)
+ gs_app_set_install_date (app, fwupd_device_get_created (dev));
+- if (fwupd_device_get_description (dev) != NULL) {
++ if (fwupd_device_get_summary (dev) != NULL) {
+ g_autofree gchar *tmp = NULL;
+- tmp = as_markup_convert_simple (fwupd_device_get_description
(dev), NULL);
++ tmp = as_markup_convert_simple (fwupd_device_get_summary (dev),
NULL);
+ if (tmp != NULL)
+ gs_app_set_description (app, GS_APP_QUALITY_NORMAL,
tmp);
+ }
+Index: gnome-software-43.5/plugins/fwupd/gs-plugin-fwupd.c
+===================================================================
+--- gnome-software-43.5.orig/plugins/fwupd/gs-plugin-fwupd.c
++++ gnome-software-43.5/plugins/fwupd/gs-plugin-fwupd.c
+@@ -403,7 +403,7 @@ gs_plugin_fwupd_new_app_from_device_raw
+ gs_app_set_version (app, fwupd_device_get_version (device));
+ gs_app_set_name (app, GS_APP_QUALITY_LOWEST, fwupd_device_get_name
(device));
+ gs_app_set_summary (app, GS_APP_QUALITY_LOWEST,
fwupd_device_get_summary (device));
+- gs_app_set_description (app, GS_APP_QUALITY_LOWEST,
fwupd_device_get_description (device));
++ gs_app_set_description (app, GS_APP_QUALITY_LOWEST,
fwupd_device_get_summary (device));
+ gs_app_set_origin (app, fwupd_device_get_vendor (device));
+ gs_fwupd_app_set_device_id (app, fwupd_device_get_id (device));
+ gs_app_set_management_plugin (app, plugin);
+@@ -790,7 +790,7 @@ get_remotes_cb (GObject *source_obj
+ for (guint i = 0; i < remotes->len; i++) {
+ FwupdRemote *remote = g_ptr_array_index (remotes, i);
+
+- if (!fwupd_remote_get_enabled (remote))
++ if (!fwupd_remote_has_flag (remote, FWUPD_REMOTE_FLAG_ENABLED))
+ continue;
+ if (fwupd_remote_get_kind (remote) !=
FWUPD_REMOTE_KIND_DOWNLOAD)
+ continue;
+@@ -798,7 +798,8 @@ get_remotes_cb (GObject *source_obj
+ continue;
+
+ data->n_operations_pending++;
+- fwupd_client_refresh_remote_async (client, remote, cancellable,
++ fwupd_client_refresh_remote_async (client, remote,
FWUPD_CLIENT_DOWNLOAD_FLAG_NONE,
++ cancellable,
+ refresh_remote_cb,
g_object_ref (task));
+ }
+
+@@ -901,10 +902,6 @@ gs_plugin_fwupd_install (GsPluginFwupd
+ /* set the last object */
+ g_set_object (&self->app_current, app);
+
+- /* only offline supported */
+- if (gs_app_get_metadata_item (app, "fwupd::OnlyOffline") != NULL)
+- install_flags |= FWUPD_INSTALL_FLAG_OFFLINE;
+-
+ gs_app_set_state (app, GS_APP_STATE_INSTALLING);
+ if (!fwupd_client_install (self->client, device_id,
+ filename, install_flags,
+@@ -931,20 +928,21 @@ gs_plugin_fwupd_install (GsPluginFwupd
+ * in a too-new-to-depend-on fwupd version */
+ g_debug ("failed to find device after install: %s",
error_local->message);
+ } else {
+- if (fwupd_device_get_update_message (dev) != NULL) {
++ FwupdRelease *release = fwupd_device_get_release_default (dev);
++ if (release != NULL && fwupd_release_get_update_message
(release) != NULL) {
+ g_autoptr(AsScreenshot) ss = as_screenshot_new ();
+
+ /* image is optional */
+- if (fwupd_device_get_update_image (dev) != NULL) {
++ if (fwupd_release_get_update_image (release) != NULL) {
+ g_autoptr(AsImage) im = as_image_new ();
+ as_image_set_kind (im, AS_IMAGE_KIND_SOURCE);
+- as_image_set_url (im,
fwupd_device_get_update_image (dev));
++ as_image_set_url (im,
fwupd_release_get_update_image (release));
+ as_screenshot_add_image (ss, im);
+ }
+
+ /* caption is required */
+ as_screenshot_set_kind (ss, AS_SCREENSHOT_KIND_DEFAULT);
+- as_screenshot_set_caption (ss,
fwupd_device_get_update_message (dev), NULL);
++ as_screenshot_set_caption (ss,
fwupd_release_get_update_message (release), NULL);
+ gs_app_set_action_screenshot (app, ss);
+
+ /* require the dialog */
+@@ -1224,7 +1222,7 @@ gs_plugin_add_sources (GsPlugin *plugin,
+ app = gs_app_new (id);
+ gs_app_set_kind (app, AS_COMPONENT_KIND_REPOSITORY);
+ gs_app_set_scope (app, AS_COMPONENT_SCOPE_SYSTEM);
+- gs_app_set_state (app, fwupd_remote_get_enabled (remote) ?
++ gs_app_set_state (app, fwupd_remote_has_flag (remote,
FWUPD_REMOTE_FLAG_ENABLED) ?
+ GS_APP_STATE_INSTALLED :
GS_APP_STATE_AVAILABLE);
+ gs_app_add_quirk (app, GS_APP_QUIRK_NOT_LAUNCHABLE);
+ gs_app_set_name (app, GS_APP_QUALITY_LOWEST,
+@@ -1285,11 +1283,13 @@ gs_plugin_fwupd_enable_repository_get_re
+ for (guint i = 0; i < remotes->len; i++) {
+ FwupdRemote *remote = g_ptr_array_index (remotes, i);
+ if (g_strcmp0 (remote_id, fwupd_remote_get_id (remote)) == 0) {
+- if (fwupd_remote_get_enabled (remote) &&
++ if (fwupd_remote_has_flag (remote,
FWUPD_REMOTE_FLAG_ENABLED) &&
+ fwupd_remote_get_kind (remote) !=
FWUPD_REMOTE_KIND_LOCAL &&
+ !remote_cache_is_expired (remote, cache_age)) {
+ GCancellable *cancellable =
g_task_get_cancellable (task);
+- fwupd_client_refresh_remote_async
(self->client, remote, cancellable,
++ fwupd_client_refresh_remote_async
(self->client, remote,
++
FWUPD_CLIENT_DOWNLOAD_FLAG_NONE,
++ cancellable,
+
gs_plugin_fwupd_enable_repository_remote_refresh_ready_cb,
+
g_steal_pointer (&task));
+ return;
diff -Nru gnome-software-43.5/debian/patches/series
gnome-software-43.5/debian/patches/series
--- gnome-software-43.5/debian/patches/series 2023-06-16 05:33:47.000000000
-0500
+++ gnome-software-43.5/debian/patches/series 2026-06-27 13:02:08.000000000
-0500
@@ -1 +1,2 @@
01_details-Use-custom-icon-for-verified-developers.patch
+remove-old-api.patch
--- End Message ---
pgpLZ0dYfeMw0.pgp
