Hi Lucas,

On Fri, 16 Jan 2026 15:39:35 +0100 Lucas Nussbaum <[email protected]> wrote:
> UDD's upload_history table now includes the content of the Git-Tag-Info
> and Git-Tag-Tagger fields. They are also split into separate columns to
> make their use easier.
> 
> Additionally, I added uploaded_by_* that either uses the tag2upload
> fields (if present) or the signed_by fields, so provide an easy way to
> fallback between the tag2upload information and the traditional
> information.
> 
> Example with two uploads (one with tag2upload, one without):
> 
> -[ RECORD 1 
> ]-----------+-----------------------------------------------------------------------------------------
> source                  | dh-lisp
> version                 | 0.7.3
> date                    | 2026-01-16 13:33:34+00
> changed_by              | Sean Whitton <[email protected]>
> changed_by_name         | Sean Whitton
> changed_by_email        | [email protected]
> maintainer              | Debian Common Lisp Team 
> <[email protected]>
> maintainer_name         | Debian Common Lisp Team
> maintainer_email        | [email protected]
> nmu                     | f
> signed_by               | Debian tag2upload service (key 1) 
> <[email protected]>
> signed_by_name          | Debian tag2upload service (key 1)
> signed_by_email         | [email protected]
> key_id                  | 606D084E4683C079
> distribution            | unstable
> file                    | debian-devel-changes.current
> fingerprint             | 374D8CE4DB96E9CBD4C0972A606D084E4683C079
> git_tag_info            | tag=cf039592ab1f6aa0ecfbd50f482f96fac5fe3887 
> fp=9b917007ae030e36e4fc248b695b7ae4bf066240
> git_tag_tagger          | Sean Whitton <[email protected]>
> git_tag_tagger_name     | Sean Whitton
> git_tag_tagger_email    | [email protected]
> git_tag_info_tag        | cf039592ab1f6aa0ecfbd50f482f96fac5fe3887
> git_tag_info_fp         | 9b917007ae030e36e4fc248b695b7ae4bf066240
> uploaded_by             | Sean Whitton <[email protected]>
> uploaded_by_name        | Sean Whitton
> uploaded_by_email       | [email protected]
> uploaded_by_fingerprint | 9B917007AE030E36E4FC248B695B7AE4BF066240
> -[ RECORD 2 
> ]-----------+-----------------------------------------------------------------------------------------
> source                  | phosh-osk-stevia
> version                 | 0.52.1-1
> date                    | 2026-01-16 13:18:50+00
> changed_by              | Guido Günther <[email protected]>

Thanks for bringing these data to UDD.

Unfortunately it does not help with what I reported when opening the bug:

On Sun, 28 Sep 2025 13:21:58 +0200 Sven Geuer <[email protected]> wrote:
> doing a sponsored upload/push via "git debpush" works, while the fact
> it was sponsored is not mentioned by tracker.debian.org [1], no "signed
> by:" annotation, and DDPO [2], the package in question is not listed
> under "Sponsored/other uploads".
> 
> [1] https://tracker.debian.org/pkg/scalpel
> [2] https://qa.debian.org/developer.php?login=sge%40debian.org

DDPO seems not to rely on UDD at all. According to the code [3]+[4] it
pulls the data from some Berkley DBs. I think this should be changed to
read from UDD instead.

Does this warrant a new bug report? Or would it be preferable to
unmerge und reopen this bug, #1116530?

Sven

[3] https://salsa.debian.org/qa/qa/-/blob/master/wml/developer.wml#L1772
[4] https://salsa.debian.org/qa/qa/-/blob/master/wml/developer.wml#L1469

-- 
GPG Fingerprint
3DF5 E8AA 43FC 9FDF D086 F195 ADF5 0EDA F8AD D585

Attachment: signature.asc
Description: This is a digitally signed message part

Reply via email to