Your message dated Sat, 24 Oct 2026 23:00:36 +0000
with message-id <[email protected]>
and subject line Bug#1148510: fixed in cosign 3.1.1-2
has caused the Debian Bug report #1148510,
regarding cosign: FTBFS:
src/github.com/open-policy-agent/opa/v1/topdown/glob.go:19:33: undefined:
glob.Glob
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1148510: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1148510
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Source: cosign
Version: 3.1.1-1
Severity: serious
Tags: ftbfs sid forky
Justification: fails to build from source (but built successfully in the past)
X-Debbugs-Cc: [email protected]
Dear maintainer,
cosign FTBFS:
# github.com/open-policy-agent/opa/v1/topdown
src/github.com/open-policy-agent/opa/v1/topdown/glob.go:19:33: undefined:
glob.Glob
src/github.com/open-policy-agent/opa/v1/topdown/glob.go:69:28: undefined:
glob.Glob
github.com/withfig/autocomplete-tools/integrations/cobra
github.com/aws/aws-sdk-go-v2/service/kms/internal/endpoints
cuelang.org/go/internal/cueconfig
github.com/aws/aws-sdk-go-v2/service/kms/types
golang.org/x/sync/singleflight
cuelang.org/go/internal/mod/modload
cuelang.org/go/mod/modcache
github.com/jellydator/ttlcache
github.com/aws/aws-sdk-go-v2/service/kms
cuelang.org/go/mod/modconfig
cuelang.org/go/cue/load
github.com/sigstore/cosign/pkg/cosign/cue
github.com/sigstore/sigstore/pkg/signature/kms/aws
dh_auto_build: error: cd _build && go install -trimpath -v -p 6
github.com/sigstore/cosign/cmd/cosign returned exit code 1
make: *** [debian/rules:8: binary-arch] Error 25
See
https://buildd.debian.org/status/fetch.php?pkg=cosign&arch=amd64&ver=3.1.1-1%2Bb20&stamp=1789888354&raw=0
for details
Cheers
--
Sebastian Ramacher
--- End Message ---
--- Begin Message ---
Source: cosign
Source-Version: 3.1.1-2
Done: Reinhard Tartler <[email protected]>
We believe that the bug you reported is fixed in the latest version of
cosign, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Reinhard Tartler <[email protected]> (supplier of updated cosign package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Fri, 23 Oct 2026 22:38:00 +0000
Binary: cosign cosign-dbgsym golang-github-sigstore-cosign-dev
golang-github-sigstore-cosign-v3-dev
Source: cosign
Architecture: all amd64 source
Version: 3.1.1-2
Distribution: unstable
Urgency: medium
Maintainer: Debian Go Packaging Team <[email protected]>
Changed-By: Reinhard Tartler <[email protected]>
Closes: 1148510
Description:
cosign - Code signing/transparency for containers and binaries (program)
golang-github-sigstore-cosign-dev - Code signing/transparency for containers
and binaries (transition
golang-github-sigstore-cosign-v3-dev - Code signing/transparency for
containers and binaries (library)
Changes:
cosign (3.1.1-2) unstable; urgency=medium
.
* Team Upload
* Tighten Build-Depends and Depends on
golang-github-open-policy-agent-opa-dev (>= 1.4.2+ds1-3~) (Closes:
#1148510)
* Transition library package to golang-github-sigstore-cosign-v3-dev:
- Update XS-Go-Import-Path to github.com/sigstore/cosign/v3.
- Provide golang-github-sigstore-cosign-dev transitional package in
oldlibs.
- Scope debian/watch to v3.x series.
- Drop redundant Section field inherited from source paragraph.
Checksums-Sha1:
d78c4eeac044a5e63777337b2b66dd05d506432d 4003 cosign_3.1.1-2.dsc
cc246e8b66d612dd1cee6cc1b840d8cd776db637 6012 cosign_3.1.1-2.debian.tar.xz
b42fc204ef0b0d08890e5a6ceaec4638218583c5 21494016
cosign-dbgsym_3.1.1-2_amd64.deb
613b8ba0bc0651474936af13732f86effde25734 41018 cosign_3.1.1-2_amd64.buildinfo
e98be968c1a97bbeace148c417c99f3e6e928af1 17676136 cosign_3.1.1-2_amd64.deb
147286c5592dd4968f6d660dbe218eb0b147fbdb 38260
golang-github-sigstore-cosign-dev_3.1.1-2_all.deb
367c5052f89da3696ad8fe1e7b14bfc04fa1bf73 386712
golang-github-sigstore-cosign-v3-dev_3.1.1-2_all.deb
Checksums-Sha256:
1714878275a92a1bdd62d03ee44e553f8cb26071def84ad56bcc313d96cd03c8 4003
cosign_3.1.1-2.dsc
392b0535f6dd0c6bacdbcae818408dd5867aeeb66a812051a0c66008125f93fd 6012
cosign_3.1.1-2.debian.tar.xz
b699708bd96330200c1d92df37748efdc8cae02b9834fe9308303aca9b339c1f 21494016
cosign-dbgsym_3.1.1-2_amd64.deb
4d1438411270aa73ffb0b534ab0c3d4f605a04a68a8d92b5c7f9299d28bfb930 41018
cosign_3.1.1-2_amd64.buildinfo
d8622ebffce1d69197288fc030ff06a4c247af5507107f85c5a878870b686b23 17676136
cosign_3.1.1-2_amd64.deb
abb56f2e08c29eb2897523a0016e7da16477378cbca0603427ded7a3cae73a17 38260
golang-github-sigstore-cosign-dev_3.1.1-2_all.deb
363a3ea776e696cd8ecddf1e5fc1f95d6371e719eef51c59a710c7b82f87941b 386712
golang-github-sigstore-cosign-v3-dev_3.1.1-2_all.deb
Files:
d0f99aebaf60fb08108271e69f1a00e7 4003 golang optional cosign_3.1.1-2.dsc
8aa5a89b27d59cb60fbc33845d77b904 6012 golang optional
cosign_3.1.1-2.debian.tar.xz
21633937b33f9d0da32080df8ecb0406 21494016 debug optional
cosign-dbgsym_3.1.1-2_amd64.deb
d20147f5dfe4b9d1c6f3c352cf81663a 41018 golang optional
cosign_3.1.1-2_amd64.buildinfo
3fce852c9ed714130590a7dce2796210 17676136 golang optional
cosign_3.1.1-2_amd64.deb
57142f0da6965634a4d3a3adf5aa5f83 38260 oldlibs optional
golang-github-sigstore-cosign-dev_3.1.1-2_all.deb
5f7553d9dd8880a181a6564f16b42fca 386712 golang optional
golang-github-sigstore-cosign-v3-dev_3.1.1-2_all.deb
-----BEGIN PGP SIGNATURE-----
iQJIBAEBCgAyFiEEMN59F2OrlFLH4IJQSadpd5QoJssFAmrcfrAUHHNpcmV0YXJ0
QHRhdXdhcmUuZGUACgkQSadpd5QoJsuA/A//Toorc+3gVerK0rZuTUWM93b890+I
cHiRwj/VpUFVAPOMmF6j6c5x6YRgniOcDCvKeflU8xwsAYVsQuTYWNVmeQ7tidHp
5H7t0PSTpayg5W2jnRm+KL1OV1VgBXTyqEsfdHc/7oWih+gQaOPryGwlqNH8SLxI
N99RdVbKG1rEs+RgMIKdfay1Rcce2dLVYoNGZHvq5w88wPT3xoxoLJqE0q/algQu
L5Gmzw7E/xKIp4tIEX1usAPDmltiFCaGgoUsyqYZ46o6xQNWrMvpxlHiRLwvFKb8
8oCGyEJzCxLYRz4oJG5Rd4EjRjt86iHK/Glo+ws4PO3CwZDLeuLrrDBSnzccVgm1
QenmuMJQxplBbLlD8aPkBqL2jBEYClmF6+lQ0x9Vzny1jDWr91jkdqJ5aGUDRbSJ
+CyExkUaB66eQyedVY0Y3pSn5SnP9emCEfhfLoWBbqyj2aex2AwRfpO8uR4aW4ck
fqSAhPGE42PDHAc5+bqWLgnYVrCMkB1ajQQ82Anpy9xrOxoMHd4whhrK3ML/ThK1
ovopD7Cjo71ZXDdIkjKPm+GkzPE8QotFh8A2Vm3zEPTyYv4+De1N+mkAol9y+PNb
RbpW7YvKLLoDD+8AuseexdFhChy7Q3bqZbYlKqiwESZURc9R9qBplZJTgjnQg0hr
55PCU26Tt38THHw=
=4aKM
-----END PGP SIGNATURE-----
pgpJAoXbrjZrd.pgp
Description: PGP signature
--- End Message ---
