Bug#1057832: golang-google-genproto-dev: New upstream version (0.0~git20231127.3a041ad) available

2024-06-28 Thread Reinhard Tartler

On 2024-06-28 09:49, Maytham Alsudany wrote:

Letting you know that trillian doesn't need to be packaged anymore (it
was only a test dependency of golang-google-go-tpm-dev, and so I just
disabled the tests).


I managed to get trillian updated to build against the version of
grpc/genproto we have in sid. It has already migrated to 'testing'.

https://salsa.debian.org/go-team/packages/trillian/-/commit/ae43cb0943ff62de00b0ebf0685e2948a9dcebb4

-br



Bug#1057832: golang-google-genproto-dev: New upstream version (0.0~git20231127.3a041ad) available

2024-06-28 Thread Maytham Alsudany
Hi Reinhard,

On Sat, 2024-06-22 at 12:13 -0400, Reinhard Tartler wrote:
> I looked at trillian, and it seems they do rely on these compatibility
> shims. I wonder how much work would be involved to update the trillian
> code to avoid these go-genproto forwarders and use the above mentioned
> code in submodules (which can be found in the probably terribly outdated
> golang-google-api package [googleapi], cf #1059087).

Letting you know that trillian doesn't need to be packaged anymore (it
was only a test dependency of golang-google-go-tpm-dev, and so I just
disabled the tests).

Kind regards,
-- 
Maytham Alsudany
Debian Maintainer

maytham @ OFTC
maytha8 @ Libera



signature.asc
Description: This is a digitally signed message part


Bug#1057832: golang-google-genproto-dev: New upstream version (0.0~git20231127.3a041ad) available

2024-06-22 Thread Reinhard Tartler
Control: tag -1 +help

Maytham Alsudany  writes:

> This package is severely outdated, and a new version is needed for
> github.com/google/trillian (indirect dependency of miniflux).

I took a look at updating this package, because I suspect it will be
needed for newer versions of golang-google-grpc. Turns out to be not
strictly the case at this point, but leaving this package outdated is
not a good idea.

I found that upstream uses the repository as for a couple of purposes:

a) convenience repostiory for "pre-generated" .pb.go files in the
folders googleapis and firestore, cf. [1,2]

b) Place compatibility forwarders to the package
   google.golang.org/protobuf [3]

For a), that seems icky to me. The .proto definitions for those
googleapis can be found in
https://github.com/googleapis/googleapis/tree/master/google/firestore/bundle. I
don't think we currently package those files in Debian. Oh well.

For b), I understand from [issue1015] that google is in the process of
removing those forwarders. The best course of action here seems to me to
avoid this repo in favor of using the actual definitions.

In order to maintain backwards compatibiliy, this googleapis/go-genproto
has now change [pr#901] that effectively adds dependencies "on virtually
all every submodule in cloud.google.com/go." This is extremely
inconvenient for us to package.

I looked at trillian, and it seems they do rely on these compatibility
shims. I wonder how much work would be involved to update the trillian
code to avoid these go-genproto forwarders and use the above mentioned
code in submodules (which can be found in the probably terribly outdated
golang-google-api package [googleapi], cf #1059087).

At this point, focusing on #1059087 might be the best thing to focus on
for now.

Thoughts or opinions?

-rt


[1]
https://sources.debian.org/src/golang-google-genproto/0.0~git20210726.e7812ac-2/googleapis/

[2]
https://sources.debian.org/src/golang-google-genproto/0.0~git20210726.e7812ac-2/firestore/

[3]
https://sources.debian.org/src/golang-google-genproto/0.0~git20210726.e7812ac-2/protobuf

[issue1015]
https://github.com/googleapis/go-genproto/issues/1015

[pr#901]
https://github.com/googleapis/go-genproto/pull/901

[googleapi]
https://tracker.debian.org/pkg/golang-google-api



Bug#1057832: golang-google-genproto-dev: New upstream version (0.0~git20231127.3a041ad) available

2023-12-08 Thread Maytham Alsudany
Package: golang-google-genproto-dev
Severity: normal

Dear Maintainer,

This package is severely outdated, and a new version is needed for
github.com/google/trillian (indirect dependency of miniflux).

Kind regards,
Maytham