Stefano Rivera <stefa...@debian.org> writes: > Hi Simon (2025.09.19_15:55:56_+0000) >>> So, typically patching the upstream dependencies is appropriate in >>> these situations. >> >>Or, as it happened for yubikey-manager, sync the debian/control << >>versioning with upstream's << versioning, which got out of sync over >>time. > > That's unusal. Typically you can rely on dh_python3 to generate your > dependencies.
Oh, maybe that explains the real bug. Currently debian/control says:
Package: yubikey-manager
Depends: ${misc:Depends},
${python3:Depends},
python3-click (>= 8.0),
python3-ykman (= ${binary:Version}),
pcscd,
python3-cryptography (>= 3.0.0),
python3-cryptography (<< 44),
python3-fido2 (>= 0.9),
python3-fido2 (<< 2.0)
Package: python3-ykman
Depends: ${misc:Depends},
${python3:Depends},
python3-keyring (>= 23.4),
python3-cryptography (>= 3.0.0),
python3-cryptography (<< 48),
python3-fido2 (>= 0.9),
python3-fido2 (<< 2.0)
Which leads to binary packages (at least on my laptop's build) with:
Package: yubikey-manager
Depends: python3-ykman (= 5.8.0-1), python3:any, python3-click (>= 8.0),
pcscd, python3-cryptography (>= 3.0.0), python3-cryptography (<< 44),
python3-fido2 (>= 0.9), python3-fido2 (<< 2.0)
Package: python3-ykman
Depends: python3-click (>= 8.0), python3-cryptography (>= 3.0.0),
python3-cryptography (<< 48), python3-fido2 (>= 0.9), python3-keyring (>=
23.4), python3-pyscard (>= 2.0), python3:any, python3-fido2 (<< 2.0)
If I drop all the hard coded python versioning, like this:
Depends: ${misc:Depends},
${python3:Depends},
- python3-click (>= 8.0),
- python3-ykman (= ${binary:Version}),
- pcscd,
- python3-cryptography (>= 3.0.0),
- python3-cryptography (<< 44),
- python3-fido2 (>= 0.9),
- python3-fido2 (<< 2.0)
+ pcscd
Recommends: libyubikey-udev
Description: Python library and command line tool for configuring a YubiKey
YubiKey Manager (ykman) is a command line tool for configuring a YubiKey over
@@ -54,12 +48,7 @@ Package: python3-ykman
Architecture: all
Section: python
Depends: ${misc:Depends},
- ${python3:Depends},
- python3-keyring (>= 23.4),
- python3-cryptography (>= 3.0.0),
- python3-cryptography (<< 48),
- python3-fido2 (>= 0.9),
- python3-fido2 (<< 2.0)
+ ${python3:Depends}
Recommends: pcscd
the resulting binary packages looks like this:
Package: yubikey-manager
Depends: python3-ykman (= 5.8.0-1), python3:any, pcscd
Package: python3-ykman
Depends: python3-click (>= 8.0), python3-cryptography (>= 3.0),
python3-cryptography (<< 48), python3-fido2, python3-keyring (>= 23.4),
python3-pyscard (>= 2.0), python3:any
That seems more appropriate, right?
This would also fix the <<44 version dependency on the 'yubikey-manager'
binary package that I failed to fix in my last upload since I only
looked at 'python3-ykman'.
Please holler if this seems like a bad idea to upload.
/Simon
signature.asc
Description: PGP signature
