I've tried a bunch of things, essentially reusing my older
pbuilder-based build setup (as opposed to the newer sbuild-based one),
to no avail: I keep getting those extra upper-bound versioned
dependencies in the resulting package.

At this point I see two options:

  - build a +deb9u2 that uses debian/pydist-overrides to prevent the
    insertion of those extra versioned dependencies (see attached
    patch); with that one, the resulting dsc debdiff is minimal:

    $ debdiff mitmproxy_0.18.2-6_all.deb mitmproxy_0.18.2-6+deb9u2_all.deb      
                                                                                
                                                                                
                         [seb hulk]
    File lists identical (after any substitutions)

    Control files: lines which differ (wdiff format)
    ------------------------------------------------
    Version: [-0.18.2-6-] {+0.18.2-6+deb9u2+}

  - give up on fixing #934356 in the upcoming point release

What do you think ?

Cheers,

-- 
Seb
diff --git a/debian/changelog b/debian/changelog
index 4fcb7218..a714bb37 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,9 @@
+mitmproxy (0.18.2-6+deb9u2) stretch; urgency=medium
+
+  * Prevent insertion of unwanted upper-bound versioned dependencies
+
+ -- Sebastien Delafond <s...@debian.org>  Wed, 28 Aug 2019 13:04:01 +0200
+
 mitmproxy (0.18.2-6+deb9u1) stretch; urgency=medium
 
   * Blacklist tests that require internet access (Closes: #934033)
diff --git a/debian/pydist-overrides b/debian/pydist-overrides
index 144dfb3a..49405aa3 100644
--- a/debian/pydist-overrides
+++ b/debian/pydist-overrides
@@ -1 +1,5 @@
 brotlipy python-brotli
+cryptography python-cryptography (>= 1.3)
+flask python-flask (>= 0.10.1)
+pyasn1 python-pyasn1 (>= 0.1.9)
+six python-six (>= 1.10)

Reply via email to