Package: hub Version: 2.14.2~ds1-3 Hi!
The 'hub' package is soon likely to be the last remaining package that depends on golang-github-bmizerany-assert which ought to be removed: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1143916 I've confirmed that it is only used in the self-tests: jas@frallan:~/dpkg/hub$ rgrep bmizerany/ass .|grep -v _test.go ./go.sum:github.com/bmizerany/assert v0.0.0-20160611221934-b7ed37b82869 h1:DDGfHa7BWjL4YnC6+E63dPcxHo2sUxDIu8g3QgEJdRY= ./go.sum:github.com/bmizerany/assert v0.0.0-20160611221934-b7ed37b82869/go.mod h1:Ekp36dRnpXw/yCqJaO+ZrUyxD+3VXMFFr56k5XYrpB4= ./go.mod: github.com/bmizerany/assert v0.0.0-20160611221934-b7ed37b82869 jas@frallan:~/dpkg/hub$ However it is used in many files. Last upstream release was 6 years ago for 'hub', is this even maintained software any more? Should we ship it in forky? I've seen an upstream merge release that removes the dependency, but back-porting it may be complicated: https://github.com/mislav/hub/pull/2463 Best would be if upstream could make a new release to clarify the situation. I'm not holding my breath though: https://github.com/mislav/hub/issues/2470 /Simon
signature.asc
Description: PGP signature
