Bug#1120588: src:libgit2: Please enable sha256 features (causes library transition)

[Timo Röhling]

Hi,

On Wed, 12 Nov 2025 14:41:01 -0500 Daniel Kahn Gillmor <d...@fifthhorseman.net> wrote:

Source: libgit2
Version: 1.9.1+ds-1
Severity: wishlist
Control: affects -1 + gitg


[...]

Please enable the "experimental sha256" feature, and produce a variant of the library with it. This means passing -DEXPERIMENTAL_SHA256=ON to cmake. I recognize that this might be a big ask, but we are long overdue to get the migration process rolling for the git ecosystem, and this kind of work could help move it along.

I'm generally in favor. Unless there is a fundamental incompatibility with the old API which requires a lot of sourceful uploads to fix reverse dependencies, I would not bother shipping both variants and just do a transition.

Any objections?


Cheers
Timo

--
⢀⣴⠾⠻⢶⣦⠀   ╭────────────────────────────────────────────────────╮
⣾⠁⢠⠒⠀⣿⡁   │ Timo Röhling                                       │
⢿⡄⠘⠷⠚⠋⠀   │ 9B03 EBB9 8300 DF97 C2B1  23BF CC8C 6BDD 1403 F4CA │
⠈⠳⣄⠀⠀⠀⠀   ╰────────────────────────────────────────────────────╯

As a first step, I can prepare a libgit2-1.9s256 library package in experimental and then we can see how the Debian ecosystem fares with the change.

signature.asc
Description: PGP signature