Control: reassign -1 dgit 14.8
Control: retitle -1 tag2upload does not remove not needed NEWS file

Hey,
 
thanks for your analysis. IMO the MR look fine.

> Now coming to the lintian warning: this is because at some point changelogs
> started to get trimmed. This was set to the date buster was released
> (2019-07-06).

I see. That part I havn't checked, because I wansn't aware, that the changelog 
is timmed.

And I additionally understand, that I simple remove the NEWS anyways, because 
Debian does not support this big jumps anyways. 

One explanation why I see this lintinan warning:

I switched to tag2upload for torsocks for 2.5.0-4 and -5.

With the input if Nilesh I understood, that the NEWS file was not shipped in 
Trixie. I didn't touched the NEWS files for years and just used 
dkpg-buildpackage -S -d  (on a sid system) to create the files to upload for 
all versions < 2.5.0-4. so a normal dpkg-buildpackage run is able to process 
this correctly.

Form my point of view it looks like the tag2upload system do create different 
tarballs than I created locally. I attached on email that I got from the 
tag2upload system.

Regards,

hefee

--

On Montag, 23. Februar 2026 19:14 Nilesh Patra wrote:
> On 19/02/26 7:21 pm, Hefee wrote:
> > Package: lintian
> > Version: 2.129.0
> > Severity: normal
> > X-Debbugs-Cc: [email protected]
> > 
> > Hey,
> > 
> > if I run lintian against torsocks it returns warning
> > debian-news-entry-has-unknown-version 2.0.0-1.
> > I checked myself an I find a 2.0.0-1 in d/changelog and the date in
> > changelog is written 3mins later so both checks are fine.
> > 
> > https://salsa.debian.org/pkg-privacy-team/torsocks/-/blob/debian/sid/debia
> > n/NEWS?ref_type=heads
> > https://salsa.debian.org/pkg-privacy-team/torsocks/-/blob/debian/sid/debi
> > an/changelog?ref_type=heads#L224
> > 
> > You can also see this warning in salsa-ci:
> > 
> > https://salsa.debian.org/pkg-privacy-team/torsocks/-/jobs/9077770#L45
> > 
> > W: libtorsocks: debian-news-entry-has-unknown-version 2.0.0-1
> > [usr/share/doc/libtorsocks/NEWS.Debian.gz]
> > 
> > Interessing enough this warning is not listed in tracker nor was this an
> > issue before.
> 
> That was because the previous version did not ship a NEWS in the `.deb`.
> You can even see this missing in trixie's file list
> https://packages.debian.org/trixie/amd64/libtorsocks/filelist
> | $ ar x libtorsocks_2.5.0-4_amd64.deb
> | $ tar -tf data.tar.xz
> | ./
> | ./usr/
> | ./usr/lib/
> | ./usr/lib/x86_64-linux-gnu/
> | ./usr/lib/x86_64-linux-gnu/libtorsocks.a
> | ./usr/lib/x86_64-linux-gnu/libtorsocks.la
> | ./usr/lib/x86_64-linux-gnu/libtorsocks.so.0.0.0
> | ./usr/share/
> | ./usr/share/doc/
> | ./usr/share/doc/libtorsocks/
> | ./usr/share/doc/libtorsocks/changelog.Debian.gz
> | ./usr/share/doc/libtorsocks/changelog.gz
> | ./usr/share/doc/libtorsocks/copyright
> | ./usr/share/lintian/
> | ./usr/share/lintian/overrides/
> | ./usr/share/lintian/overrides/libtorsocks
> | ./usr/lib/x86_64-linux-gnu/libtorsocks.so
> | ./usr/lib/x86_64-linux-gnu/libtorsocks.so.0
> | $ tar -tf data.tar.xz | grep -i news
> 
> It however does ship news file now
> https://packages.debian.org/sid/amd64/libtorsocks/filelist
> 

> 
> Given that your NEWS entry dates back to 2014, it does not make sense to
> ship that anymore. At least not with that version.
> 
> I've proposed a patch
> https://salsa.debian.org/lintian/lintian/-/merge_requests/667 to rename the
> tag and add more verbose explanation.
> 
> Best,
> Nilesh
--- Begin Message ---
job id: 2876
url: https://salsa.debian.org/pkg-privacy-team/torsocks.git
tag: debian/2.5.0-5
preparing
tag signature verified
tag parsed ok
source: torsocks
version: 2.5.0-5
tag signer authorised for package
source code fetched
changelog parsed ok
target: debian unstable
using existing orig(s)
processing successful
Uploaded to unstable
oracle$ dgit --version
dgit version 14.7~bpo13+1
# builder: oracle$ ./ssh-builder 
'[email protected]' ...
builder$ dgit --version
dgit version 14.7

builder:work$ tag2upload-fetch-inputs tag=debian/2.5.0-5 
upstream_tag=upstream/2.5.0
+ git fetch origin --no-tags refs/tags/debian/2.5.0-5:refs/tags/debian/2.5.0-5 
refs/tags/upstream/2.5.0:refs/tags/upstream/2.5.0
>From https://salsa.debian.org/pkg-privacy-team/torsocks
 * [new tag]         debian/2.5.0-5 -> debian/2.5.0-5
 * [new tag]         upstream/2.5.0 -> upstream/2.5.0

builder:work$ git checkout -q refs/tags/debian/2.5.0-5
# [ok]
# source code fetched
# changelog parsed ok
# target: debian unstable

builder:work$ tag2upload-obtain-origs p=torsocks v=2.5.0-5 s=unstable 
u=b7e7319b0b68b143f0e133e109c63cf850fe6ace
+ dgit --build-products-dir=../bpd -ptorsocks download-unfetched-origs 
--write-sha256sums=../bpd/origs.sha256sums
canonical suite name for unstable is sid
suite has origs for this upstream version
downloading torsocks_2.5.0.orig.tar.bz2...
# using existing orig(s)

oracle$ dgit -wn -ptorsocks --build-products-dir=../bpd 
--force-uploading-source-only --quilt=gbp --ssh=./ssh-builder --dgit=dgit 
-k374D8CE4DB96E9CBD4C0972A606D084E4683C079 --dput:-u --package=torsocks 
--expect-suite=unstable --expect-version=2.5.0-5 --tag2upload-builder-mode 
--split-view=always --new --trust-changelog --t2u-upstream=upstream/2.5.0 
--t2u-upstream-commit=b7e7319b0b68b143f0e133e109c63cf850fe6ace 
'--t2u-control-add=Git-Tag-Tagger=Sandro Knauß <[email protected]>' 
'--t2u-control-add=Git-Tag-Info=tag=7c7e54dabf3ab8d3658efa0be34e4401b946d4ed 
fp=39ec11a02016b72926491a06e3adb00850605636' rpush-source 
'[email protected]:/srv/builder.tag2upload.debian.org/tmp/autopkgtest-virt-docker.shared.y92j1c8n/downtmp/work'

Format `3.0 (quilt)', need to check/update patch stack
canonical suite name for unstable is sid
dgit: split brain (separate dgit view) may be needed (--quilt=gbp).
examining quilt state (multiple patches, gbp mode)
dgit (build host): base trees orig=96370f01ac59322017d3 
o+d/p=6a723777fa5036058fbd
dgit (build host): quilt differences: src:  == orig ##     gitignores:  == orig 
==
dgit (build host): quilt differences:      HEAD ## o+d/p               HEAD == 
o+d/p
dgit view: creating patches-applied version using gbp pq
dgit view: created (commit id 24fb7dbddbdc3598e83e933bb0049614235444b9)
dpkg-source: info: using source format '3.0 (quilt)'
dpkg-source: info: building torsocks using existing 
./torsocks_2.5.0.orig.tar.bz2
dpkg-source: info: using patch list from debian/patches/series
dpkg-source: info: building torsocks in torsocks_2.5.0-5.debian.tar.xz
dpkg-source: info: building torsocks in torsocks_2.5.0-5.dsc
changelog will contain changes since 2.5.0-4
>From 
>file:///srv/builder.tag2upload.debian.org/tmp/autopkgtest-virt-docker.shared.y92j1c8n/downtmp/work/.git/dgit/unpack/work
 * [new tag]         upstream/2.5.0 -> upstream/2.5.0
>> Copying debian/2.5.0-5 to depth 33
>From 
>file:///srv/builder.tag2upload.debian.org/tmp/autopkgtest-virt-docker.shared.y92j1c8n/downtmp/work/.git/dgit/unpack/work
 * [new tag]         debian/2.5.0-5 -> debian/2.5.0-5
>> Re-packing ... packed 895 objects not required for --audit
>> Starting compression ... done
>> Appending 'torsocks_2.5.0-5.git.tar.xz net None' to debian/files
dpkg-genchanges: warning: package torsocks in control file but not in files list
dpkg-genchanges: warning: package libtorsocks in control file but not in files 
list
dpkg-genchanges: info: not including original source code in upload
last upload to archive: specified git info (debian)
using existing torsocks_2.5.0.orig.tar.bz2
dgit: split brain (separate dgit view) may be needed (--quilt=gbp).
dgit view: found cached (commit id 24fb7dbddbdc3598e83e933bb0049614235444b9)
Checking package changelog for archive version 2.5.0-4 ...
Declaring that HEAD includes all changes in 2.5.0-4...
Made pseudo-merge of 2.5.0-4 into dgit view.
checking that torsocks_2.5.0-5.dsc corresponds to HEAD
dpkg-source: warning: extracting unsigned source package 
(/srv/builder.tag2upload.debian.org/tmp/autopkgtest-virt-docker.shared.y92j1c8n/downtmp/work/../bpd/torsocks_2.5.0-5.dsc)
dpkg-source: info: extracting torsocks in unpacked
dpkg-source: info: unpacking torsocks_2.5.0.orig.tar.bz2
dpkg-source: info: unpacking torsocks_2.5.0-5.debian.tar.xz
dpkg-source: info: using patch list from debian/patches/series
dpkg-source: info: applying exclude_test_requiring_network.patch
dpkg-source: info: applying fix_groff_warning_on_torsocks.8
dpkg-source: info: applying 
0003-Make-torsocks-multi-arch-foreign-compatible.patch
dpkg-source: info: applying 0004-Install-libtors-in-normal-lib-directory.patch
../bpd/torsocks_2.5.0-5_source.changes already has appropriate .orig(s) (if any)
Format `3.0 (quilt)', need to check/update patch stack
gpg: WARNING: unsafe permissions on homedir '/home/builder/.gnupg'
gpg: Signature made Thu Feb 19 12:14:10 2026 UTC
gpg:                using RSA key 374D8CE4DB96E9CBD4C0972A606D084E4683C079
gpg: /home/builder/.gnupg/trustdb.gpg: trustdb created
gpg: Good signature from "Debian tag2upload service (key 1) 
<[email protected]>" [unknown]
gpg: WARNING: This key is not certified with a trusted signature!
gpg:          There is no indication that the signature belongs to the owner.
Primary key fingerprint: 374D 8CE4 DB96 E9CB D4C0  972A 606D 084E 4683 C079
remote: To /srv/dgit.debian.org/dispatch-dir/distro=debian/repos/torsocks.git   
     
remote:    35103ec..e90f96a  e90f96a33b0a54a53ec9b773277d9ce2c73f54ed -> 
refs/dgit/sid        
remote:  * [new tag]         646ef672297119d205e91bc461c89b3c5dbdccdd -> 
archive/debian/2.5.0-5        
remote:  * [new tag]         7c7e54dabf3ab8d3658efa0be34e4401b946d4ed -> 
debian/2.5.0-5        
remote: To /srv/dgit.debian.org/dispatch-dir/distro=debian/repos/torsocks.git   
     
remote:    35103ec..e90f96a  e90f96a33b0a54a53ec9b773277d9ce2c73f54ed -> master 
       
To git+ssh://push.dgit.debian.org/dgit/debian/repos/torsocks.git
   35103ec..e90f96a  e90f96a33b0a54a53ec9b773277d9ce2c73f54ed -> refs/dgit/sid
 * [new tag]         archive/debian/2.5.0-5 -> archive/debian/2.5.0-5
 * [new tag]         debian/2.5.0-5 -> debian/2.5.0-5
 signfile dsc torsocks_2.5.0-5.dsc 374D8CE4DB96E9CBD4C0972A606D084E4683C079

 fixup_buildinfo torsocks_2.5.0-5.dsc torsocks_2.5.0-5_source.buildinfo
 signfile buildinfo torsocks_2.5.0-5_source.buildinfo 
374D8CE4DB96E9CBD4C0972A606D084E4683C079

 fixup_changes dsc torsocks_2.5.0-5.dsc torsocks_2.5.0-5_dgit.changes
 fixup_changes buildinfo torsocks_2.5.0-5_source.buildinfo 
torsocks_2.5.0-5_dgit.changes
 signfile changes torsocks_2.5.0-5_dgit.changes 
374D8CE4DB96E9CBD4C0972A606D084E4683C079

Successfully signed dsc, buildinfo, changes files
Uploading to ftp-master (via ftp to ftp.upload.debian.org):
  Uploading torsocks_2.5.0-5.dsc: done.
  Uploading torsocks_2.5.0-5.debian.tar.xz: done.
  Uploading torsocks_2.5.0-5.git.tar.xz: done.
  Uploading torsocks_2.5.0-5_source.buildinfo: done.
  Uploading torsocks_2.5.0-5_source.changes: done.
Successfully uploaded packages.
dgit (build host) ok: pushed and uploaded 2.5.0-5
# [ok]
# processing successful
# Uploaded to unstable
object afb7659dd8d5b874398c372361d7492397cd9e97
type commit
tag debian/2.5.0-5
tagger Sandro Knauß <[email protected]> 1771503189 +0100

torsocks release 2.5.0-5 for unstable

[dgit distro=debian split --quilt=gbp]
[dgit please-upload source=torsocks version=2.5.0-5 upstream-tag=upstream/2.5.0 
upstream=b7e7319b0b68b143f0e133e109c63cf850fe6ace]
-----BEGIN PGP SIGNATURE-----
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=vQaJ
-----END PGP SIGNATURE-----
#!/bin/sh
# ** autogenerated for t2u job 2876 **
# by dgit-repos-server tag2upload_hide_builder_rune_in_attachment.
#
# ssh wrapper, embodying runes to to enter builder VM from the builder host.
# See TAG2UPLOAD-DESIGN.txt.

set -e
host="$1"; shift
exec ssh -oBatchMode=yes "$host" 'podman exec -i 
672a89ecf8969ddb53d5fbae7db0921e92e1cecafcbf241c3a51d3703d8e71c6 env -i bash -c 
'\''set -a; [ -r /etc/environment ] && . /etc/environment 2>/dev/null || true; 
[ -r /etc/default/locale ] && . /etc/default/locale 2>/dev/null || true; [ -r 
/etc/profile ] && . /etc/profile 2>/dev/null || true; set +a;"$@"; RC=$?; [ $RC 
!= 255 ] || RC=253; set -e;myout=$(readlink /proc/$$/fd/1);myerr=$(readlink 
/proc/$$/fd/2);myout="${myout/[/'\'''\\''\\''\'''\'''\\''\\''\''[}"; 
myout="${myout/]/'\'''\\''\\''\'''\'''\\''\\''\'']}";myerr="${myerr/[/'\'''\\''\\''\'''\'''\\''\\''\''[}";
 myerr="${myerr/]/'\'''\\''\\''\'''\'''\\''\\''\'']}";PS=$(ls -l 
/proc/[0-9]*/fd/* 2>/dev/null | sed -nr 
'\'''\\''\'''\'''\'''\\''\\''\''#('\'''\\''\'''\''"$myout"'\'''\\''\'''\''|'\'''\\''\'''\''"$myerr"'\'''\\''\'''\'')#
 { s#^.*/proc/([0-9]+)/.*$#'\'''\\''\\''\''1#; p}'\'''\\''\'''\''|sort 
-u);KILL="";for pid in $PS; do    [ $pid -ne $$ ] && [ $pid -ne $PPID ] || 
continue;    KILL="$KILL $pid";done;[ -z "$KILL" ] || kill -9 $KILL >/dev/null 
2>&1 || true;exit $RC'\'' -- su - builder -- -ec '\''exec "$@";x'\'' --' "$@"

--- End Message ---

Attachment: signature.asc
Description: This is a digitally signed message part.

Reply via email to