"Dr. Tobias Quathamer" <[email protected]> writes: > Hi Simon, > > Am 13.07.26 um 17:59 schrieb Simon Josefsson: >> Before doing random source-only uploads, couldn't we at least somehow >> confirm that the packages in your list has the problem? > > I don't quite understand what you mean by "the problem". > > If you mean that they do not include go.mod and go.sum files from > subdirectories, then I'd think that currently, all those packages don't > include go.mod and go.sum files in their binary package. > > That's what I've tried to check with the grep command. In the source > code, there are go.mod files in subdirectories. But the dh-golang helper > copies those files by default since 1.64, uploaded on 2026-05-08. So > every package with a last upload prior to that date won't have go.mod > files from subdirectories installed in the binary package. > > But maybe I didn't understand you correctly?
Sorry I was unclear: what I meant was that there could be some set of packages that DO have a go.mod/go.sum in a sub-directory, but it is not included in the golang-*-dev package, but that this fact does not cause any problem. What I'd like for us to confirm is that we are solving an actual problem, rather than just blindly adding go.sum and go.mod files. Maybe confirming this is just really boring work, and you are confident that it solves a real problem and there is no false positives, then please ignore -- this was just a knee-jerk gut feeling I got when reading your e-mail. Also, maybe there are OTHER more problems that require fixes, which suggest maybe we should hold off doing mass uploads to fix merely one issue. I think mass uploads should be mentioned on debian-devel? If we really are looking at re-uploading 300+ packages. /Simon
signature.asc
Description: PGP signature
