Package: wdiff
Severity: wishlist

Hi!

It would be nice if wdiff in Debian could be updated to latest upstream
version, see release announcement below.

As temporary new upstream maintainer, I will go through all Debian wdiff
bug reports and see if anything applies upstream, and I could assist
with Debian packaging too if you want.

Consider using upstream git instead of tarballs as the source, for
better supply-chain auditability, although doing so requires a bit of
work (compare e.g., libntlm or libidn2 packaging for gnulib magic).

/Simon

Simon Josefsson via Bug reports for and general discussion about GNU
wdiff <[email protected]> writes:

> This is to announce wdiff-1.2.3, a stable release.
>
> There have been 29 commits by 2 people in the 637 weeks since 1.2.2.
>
> See the NEWS below for a brief summary.
>
> Thanks to everyone who has contributed!
> The following people contributed changes to this release:
>
>   Bob Proulx (6)
>   Simon Josefsson (23)
>
> Happy Hacking,
> Simon [on behalf of the wdiff maintainers]
> ==================================================================
>
> Here is the GNU wdiff home page:
>   https://www.gnu.org/software/wdiff/
>
> Manual:
>   https://www.gnu.org/software/wdiff/manual/
>   https://www.gnu.org/software/wdiff/manual/wdiff.html - HTML format
>   https://www.gnu.org/software/wdiff/manual/wdiff.pdf  - PDF format
>
> Here are the compressed sources and a GPG detached signature:
>   https://ftp.gnu.org/gnu/wdiff/wdiff-1.2.3.tar.gz
>   https://ftp.gnu.org/gnu/wdiff/wdiff-1.2.3.tar.gz.sig
>
> Here is minimal source-only "git archive" sources:
>   https://ftp.gnu.org/gnu/wdiff/wdiff-v1.2.3-src.tar.gz
>   https://ftp.gnu.org/gnu/wdiff/wdiff-v1.2.3-src.tar.gz.sig
>
> Use a mirror for higher download bandwidth:
>   https://www.gnu.org/order/ftp.html
>
> Here are the SHA256 and SHA3-256 checksums:
>
>   File: wdiff-1.2.3.tar.gz
>   SHA256 sum:   
> 29a4457eb0ed35c902e6732d71f25e1d6c7fe7fa0eda0fb6c371ed6779b49fd6
>   SHA3-256 sum: 
> 2f558fe6b7a69524f29d266c4018c80a10135cef2e4a53ae3c2944c1fc12c95d
>
>   File: wdiff-v1.2.3-src.tar.gz
>   SHA256 sum:   
> dc29d8f530471b9a8935413dca32e45848363f6e58888fc7307f5f052b8fb827
>   SHA3-256 sum: 
> 4db1f41eda5e1525f3ced491af1fc1ad094cc21c209e789d12a1ea8f611be24e
>
> Verify the SHA256 checksum with either sha256sum, sha256, or
> 'shasum -a 256'.
>
> Verify the SHA3-256 checksum with 'cksum -a sha3 -l 256 --base64'
> from coreutils-9.8.
>
> Use a .sig file to verify that the corresponding file (without the
> .sig suffix) is intact.  First, be sure to download both the .sig file
> and the corresponding tarball.  Then, run a command like this:
>
>   gpg --verify wdiff-1.2.3.tar.gz.sig
>
> The signature should match the fingerprint of the following key:
>
>   pub   ed25519 2019-03-20 [SC]
>         B1D2 BD13 75BE CB78 4CF4  F8C4 D73C F638 C53C 06BE
>   uid   Simon Josefsson <[email protected]>
>
> If that command fails because you don't have the required public key,
> or that public key has expired, try the following commands to retrieve
> or refresh it, and then rerun the 'gpg --verify' command.
>
>   gpg --locate-external-key [email protected]
>
>   gpg --recv-keys 51722B08FE4745A2
>
>   wget -q -O- 
> 'https://savannah.gnu.org/project/release-gpgkeys.php?group=wdiff&download=1' 
> | gpg --import -
>
> As a last resort to find the key, you can try the official GNU
> keyring:
>
>   wget -q https://ftp.gnu.org/gnu/gnu-keyring.gpg
>   gpg --keyring gnu-keyring.gpg --verify wdiff-1.2.3.tar.gz.sig
>
> This release is based on the wdiff git repository, available as
>
>   git clone https://https.git.savannah.gnu.org/git/wdiff.git
>
> with commit 31fe62c4a3e2a76e5d68f571b1aa2f10815ca51f tagged as v1.2.3.
>
> For a summary of changes and contributors, see:
>
>   https://gitweb.git.savannah.gnu.org/gitweb/?p=wdiff.git;a=shortlog;h=v1.2.3
>
> or run this command from a git-cloned wdiff directory:
>
>   git shortlog v1.2.2..v1.2.3
>
> This release was bootstrapped with the following tools:
>   Gnulib 31fe62c4a3e2a76e5d68f571b1aa2f10815ca51f
>   Autoconf 2.72
>   Automake 1.17
>   Make 4.4.1
>   Makeinfo 7.3
>   Help2man 1.49.2
>   Tar 1.35
>   Gzip 1.13
>
> NEWS
>
> * Noteworthy changes in release 1.2.3 (2026-06-30) [stable]
>
> ** Modernize build environment.
> Several minor fixes including build fixes for modern C23 compilers.
> Many generated or obsolete files have been removed from git.
>

Attachment: signature.asc
Description: PGP signature

Reply via email to