On Tue, 2026-10-20 at 22:46 -0300, Carlos Henrique Lima Melara wrote: > Hi Felix and Santiago, > > Today I tried to use debsbom in trixie via backports and noticed debsbom > -t spdx does not work. For it to work, we need python-spdx-tools which > is not in trixie, so it needs to go to backports too. >
Hi, that's correct. Both SPDX and CycloneDX are optional runtime dependencies, so debsbom packaging for trixie-backports was doable. > Well, dependency > hell here, because python-spdx-tools needs pyshacl (not in trixie) which > needs owlrl (also not in trixie!). I've tested it locally and they all > build in trixie without modifications, so just uploading them to > backports should be fine. That would be great. I'm not a DD, so I can't do it. But I very much appreciate your effort to upload them. > > Regarding debsbom, I saw trixie-backports can be updated too, and I > might take this opportunity to do it. I actually already have the packaging, just forgot to upload. That's done now ;) > > Do you guys have any concerns about it? Let me know otherwise I plan to > upload them next weekend. As debsbom in bpo already has Recommends: python3-spdx-tools, you just need to create the spdx backports (+transitive ones). Just go for it! Thanks, Felix > > Cheers, > Charles
