Your message dated Mon, 31 Aug 2026 18:38:20 -0700
with message-id <[email protected]>
and subject line Re: Bug#1146129: redmine: Why the new dependency on
node-turndown?
has caused the Debian Bug report #1146129,
regarding redmine: Why the new dependency on node-turndown?
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1146129: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1146129
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: redmine
Version: 6.1.3+ds-2
Severity: minor
Hi Soren,
thanks for taking care of redmine.
May I ask, why the dependency on node-turndown was added? This, in turn,
pulls several node packages adding up to 86 MB.
There is no mention of it in the changelog.
Regards,
Jörg.
--- End Message ---
--- Begin Message ---
On Sunday, August 30, 2026 8:09:33 AM Mountain Standard Time Jakob Haufe
wrote:
> On Sun, 30 Aug 2026 10:33:11 +0200
>
> Jörg-Volker Peetz <[email protected]> wrote:
> A quick check of the git history leads to
> https://www.redmine.org/issues/42515.
>
> Redmine ships it as an embedded code copy which is not how Debian works.
That is correct. This is where upstream places the file, which is minified
without an associated source file (meaning it doesn’t qualify as the original
source code in Debian’s eyes).
https://github.com/redmine/redmine/blob/master/vendor/javascript/turndown.js
That file is not shipped in the Debian package. Instead, Redmine depends on
the node-turndown package and a link is added to use the file from there.
--
Soren Stoutner
[email protected]
signature.asc
Description: This is a digitally signed message part.
--- End Message ---
