Control: reassign -1 lintian

[ Leaving context intact for other lintian maintainers. ]

Hi!

On Tue, 2026-01-27 at 02:03:40 +0100, Guillem Jover wrote:
> On Mon, 2026-01-26 at 22:57:34 +0530, Nilesh Patra wrote:
> > Package: dpkg
> > Severity: serious
> > X-Debbugs-Cc: [email protected] 
> > <mailto:[email protected]>.org
> > Control: affects -1 + src:lintian
> > Version: 1.23.5
> 
> > Lintian’s test suite has started to fail with huge number of errors.
> > 
> > | dpkg-source: error: 'Marc 'HE' Brockschmidt <he@unknown>, Jeroen van 
> > Wolffelaar<[email protected]>,
> > | Frank <[email protected]>, Yama@gotchi, Josip, I am afraid of spam and 
> > think this helps <no_spam_please AT debian.org>’ is
> > | not a valid email |address list
> > 
> > This looks like the consequence of latest dpkg upload.
> > 
> > | dpkg (1.23.5) unstable; urgency=medium
> > | .
> > | [ Guillem Jover ]
> > | * dpkg-source: Do not error out on empty fields. Closes: #1125985
> > | * Perl modules:
> > | - Dpkg::Email::Address: Do not construct invalid objects.
> 
> Ah, I validated the archive with the new Dpkg::Email::Address and
> Dpkg::Email::AddressList modules and reported or bumped the severity
> of the handful of impacted packages, but forgot to check lintian.
> 
> (This behavior change would have been introduced in dpkg 1.23.4.)
> 
> > A large amount of test suite uses legacy tests and there’s even a
> > "malformed-contact” tag that lintian emits. Fixing all of this
> > is well, annoying since this is a large number.
> >
> > OTOH I don’t understand the reasoning behind completely failing to build
> > a package due to one wrong email address.
> > The lintian tag of error severity combined with a dpkg warning of malformed
> > email address looks like a pretty good check to me already.
> 
> The rationale is that this is how the field is specified both in the
> dpkg documentation and in the Debian Policy (the latter as a must in
> §3.3, §5.6.2).
> 
> And letting invalid entries means that the maintainers might not end
> up receiving mails, or that other tools need to cope with the
> unexpected/bogus values.
> 
> I think, that in many cases dpkg being lenient is a disservice to the
> entire ecosystem, and unhelpful for maintainers that might for example
> not run lintian, and while lintian has been extremely helpful in trying
> to avoid badness, when that role can be taken over by dpkg at the source
> of the badness, that's always going to be better.
> 
> Also warnings from dpkg are easy to miss when they get emitted in the
> middle of the build output.
> 
> In this case for example, I made the Maintainer and Uploaders validators
> fatal, but the duplicate Maintainer address in the Uploaders field just
> a warning, because that's not as bad IMO. (And the latter might still
> make sense as the current lintian tag, because in contrast to dpkg's
> warning, this one is tracked in dashboards, UDD, etc)
> 
> > Do you think dpkg can emit a warning here instead?
> 
> It could, but I'd rather not. This has happened many times in the past
> as well, when dpkg has been made more strict, and then lintian stopped
> being able to validate bogus data on its own, and then those checks or
> tags got removed as unnecessary. It also seems to be part of the deal
> with how lintian operates, where it needs to adapt to changes in
> tooling. :)
> 
> So, I'd like to reassign this to lintian. And while I have my hands
> full, if this is a capacity problem, I'd rather spend the time fixing
> lintian than reverting this in dpkg, TBH.

After discussing this on IRC, I'm doing this now.

Thanks,
Guillem

Reply via email to