Dear William and Debian maintainers,

I need to clarify why this ITP was filed despite the existence of
php-symfony-dependency-injection in Debian.

TECHNICAL INCOMPATIBILITY:
FOSSology specifically requires Symfony Dependency Injection version 3.4.6,
while the current Debian package provides version 5.4.x+. These major
versions have breaking API changes that prevent FOSSology from functioning.

CONCRETE EVIDENCE:
During FOSSology integration testing, we encountered this exact dependency
conflict:
"php-symfony-console (5.4.4+dfsg-1ubuntu8) breaks
php-symfony-dependency-injection (<< 4.4~~)"

This error demonstrates that Symfony 5.x series is fundamentally
incompatible with the 3.4.x series that FOSSology requires.

VERSION COMPATIBILITY ISSUE:
- FOSSology was built against Symfony 3.4.x APIs
- Debian's Symfony 5.4.x has breaking changes in:
  - Container interface methods
  - Service definition syntax
  - Autowiring behavior
  - Parameter handling

PROPOSED SOLUTION:
Package this as php-symfony-dependency-injection-3.4 with version-specific
naming to:
- Avoid conflicts with existing Debian packages
- Provide the legacy version FOSSology needs
- Follow Debian's established pattern for version-specific packages
(php7.4-*, php8.1-*, etc.)

PRECEDENT:
This follows the same approach Debian uses for maintaining multiple
incompatible versions of critical software when applications have specific
requirements.

REQUEST:
Could we reopen this ITP to discuss a version-specific packaging approach?
FOSSology is a significant open-source project that would benefit the
Debian ecosystem, and this dependency resolution is essential for its
integration.

Best regards,
Ahmed Gamal
FOSSology Debian Packaging Team

Technical details available at: https://tracker.debian.org/pkg/fossology

On Sun, Aug 10, 2025 at 2:07 PM Debian Bug Tracking System <
[email protected]> wrote:

> Your message dated Sun, 10 Aug 2025 15:49:51 +0200
> with message-id <[email protected]>
> and subject line php-symfony-dependency-injection already exists in Debian
> has caused the Debian Bug report #1109631,
> regarding ITP: php-symfony-dependency-injection -- Symfony Dependency
> Injection component
> to be marked as done.
>
> This means that you claim that the problem has been dealt with.
> If this is not the case it is now your responsibility to reopen the
> Bug report if necessary, and/or fix the problem forthwith.
>
> (NB: If you are a system administrator and have no idea what this
> message is talking about, this may indicate a serious mail system
> misconfiguration somewhere. Please contact [email protected]
> immediately.)
>
>
> --
> 1109631: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1109631
> Debian Bug Tracking System
> Contact [email protected] with problems
>
>
>
> ---------- Forwarded message ----------
> From: Ahmed Gamal <[email protected]>
> To: Debian Bug Tracking System <[email protected]>
> Cc:
> Bcc:
> Date: Mon, 21 Jul 2025 06:57:48 +0000
> Subject: ITP: php-symfony-dependency-injection -- Symfony Dependency
> Injection component
> Package: wnpp
> Severity: wishlist
> Owner: Ahmed Gamal <[email protected]>
>
> * Package name    : php-symfony-dependency-injection
>   Version         : 3.4.6
>   Upstream Author : Fabien Potencier <[email protected]>
> * URL             : https://github.com/symfony/dependency-injection
> * License         : MIT
>   Programming Lang: PHP
>   Section         : php
>
> Description:
>  Symfony Dependency Injection component
>
>  This package provides the Symfony Dependency Injection component, which
> allows
>  developers to standardize and centralize the way objects are constructed
> and
>  dependencies are managed in PHP applications. It implements a powerful
>  dependency injection container that supports autowiring, service
> configuration,
>  and advanced features for managing complex object graphs.
>
>  The component is widely used in the Symfony framework and by many other
> PHP
>  projects to promote modular, testable, and maintainable code.
>
> Rationale:
>  This package is required as a dependency for FOSSology, an open source
> license
>  compliance system. FOSSology uses PHP-based tools for source code
> analysis and
>  license detection, which rely on the Symfony Dependency Injection
> component to
>  manage service objects and their dependencies in a flexible and
> maintainable
>  way.
>
>  The php-symfony-dependency-injection package is essential for:
>  - Managing service dependencies in FOSSology's PHP components
>  - Supporting modular and testable code architecture
>  - Enabling advanced service configuration and autowiring
>  - Promoting maintainable and scalable code in FOSSology
>  - Ensuring compatibility with other Symfony-based libraries
>
> Technical Details:
>  - Requires PHP >= 5.5.9
>  - Implements a feature-rich dependency injection container
>  - Supports autowiring, service configuration, and advanced features
>  - MIT licensed for maximum compatibility
>  - Widely used in the PHP ecosystem
>
> Dependencies:
>  - php (>= 5.5.9)
>  - Build dependencies: phpunit, php-codesniffer
>
> The package will be maintained by Ahmed Gamal <[email protected]>
> as part
> of the FOSSology packaging effort.
>
> --
> Ahmed Gamal
> FOSSology Debian Packaging Team
>
>
>
> ---------- Forwarded message ----------
> From: William Desportes <[email protected]>
> To: 1109631 <[email protected]>
> Cc:
> Bcc:
> Date: Sun, 10 Aug 2025 15:49:51 +0200
> Subject: php-symfony-dependency-injection already exists in Debian
> Control: tags + wontfix
>
> This package already exists in Debian and is provided by Symfony:
> https://tracker.debian.org/pkg/symfony
>
> --
> William Desportes

Reply via email to