At the end, it seems that there was an (unknown and not fixed) bug in debexpo.
The workflow that worked was: - do a source-only build of the package - upload the package's source-only .changes (which does not mention .buildinfo) - wait to see if debexpo correctly imports the package (- ask pabs on irc to look at what is going on)
signature.asc
Description: PGP signature
