On 10/14/21 3:06 AM, Andreas Beckmann wrote:
Package: node-mermaid
[...]
Hi,

I think it'd be sensible to unvendor crypto-random-string here. However, after 
trying to un-vendor -- patch attached with email,
The checksum reduces as expected to 26.13.21 -- which is less than the one in 
the archive

$ dpkg --compare-versions 8.13.2+ds+~cs26.13.21 lt 8.13.2+ds+~cs30.13.21 && 
echo true
true

So, what should be done then?
@Yadd, team, ideas?

Nilesh
diff --git a/debian/control b/debian/control
index 54e6dd3..a8116d7 100644
--- a/debian/control
+++ b/debian/control
@@ -19,6 +19,7 @@ Build-Depends:
  , rollup
  , uglifyjs.terser
  , webpack (>= 4.43.0~)
+ , node-crypto-random-string
 Standards-Version: 4.6.0
 Vcs-Browser: https://salsa.debian.org/js-team/node-mermaid
 Vcs-Git: https://salsa.debian.org/js-team/node-mermaid.git
diff --git a/debian/gbp.conf b/debian/gbp.conf
index 4e777c0..e686aad 100644
--- a/debian/gbp.conf
+++ b/debian/gbp.conf
@@ -1,4 +1,4 @@
 [DEFAULT]
 pristine-tar=True
 filter=[ '.gitignore', '.travis.yml', '.git*' ]
-component=['sanitize-url', 'webpack-node-externals', 'scope-css', 
'crypto-random-string', 'slugify', 'escaper', 'strip-css-comments', 
'is-regexp', 'khroma', 'stylis', 'entity-decode']
+component=['sanitize-url', 'webpack-node-externals', 'scope-css', 'slugify', 
'escaper', 'strip-css-comments', 'is-regexp', 'khroma', 'stylis', 
'entity-decode']
diff --git a/debian/watch b/debian/watch
index ed13b14..50f26a3 100644
--- a/debian/watch
+++ b/debian/watch
@@ -23,12 +23,6 @@ 
opts="searchmode=plain,component=webpack-node-externals,pgpmode=none" \
 opts="searchmode=plain,component=scope-css,pgpmode=none" \
  https://registry.npmjs.org/scope-css 
https://registry.npmjs.org/scope-css/-/scope-css-([\d\.]+)@ARCHIVE_EXT@ checksum
 
-opts=\
-component=crypto-random-string,\
-dversionmangle=auto,\
-filenamemangle=s/.*\/v?([\d\.-]+)\.tar\.gz/node-crypto-random-string-$1.tar.gz/
 \
- https://github.com/sindresorhus/crypto-random-string/tags 
.*/archive/.*/v?([\d\.]+).tar.gz checksum
-
 opts=\
 component=slugify,\
 dversionmangle=auto,\

Attachment: OpenPGP_signature
Description: OpenPGP digital signature

Reply via email to