Re: RFS: golang-github-go-git-go-git [RC] & dependencies

2024-03-30 Thread Maytham Alsudany
Hi everyone, (CC Praveen; we'd like your input please as you're the uploader) On Sat, 2024-03-30 at 13:06 +0100, Simon Josefsson wrote: > Nilesh Patra writes: > > At this rate, we will end up pruning a bunch of stuff from Debian. I don't > > think it > > is wise to remove a package just

Re: RFS: golang-github-go-git-go-git [RC] & dependencies

2024-03-30 Thread Simon Josefsson
Nilesh Patra writes: >> > https://github.com/go-git/go-git-fixtures/tree/master/data >> > >> > directly into the installed Debian package. Given the recent xz fiasco, >> > I have doubts that this is a good idea -- there is a bunch of >> > pre-generated compressed git repositories in that

Re: RFS: golang-github-go-git-go-git [RC] & dependencies

2024-03-30 Thread Nilesh Patra
On Sat, Mar 30, 2024 at 12:25:26PM +0100, Simon Josefsson wrote: > Maytham Alsudany writes: > > > Hi Simon, > > > > On Sat, 2024-03-30 at 09:48 +0100, Simon Josefsson wrote: > >> Maytham Alsudany writes: > >> > >> > https://salsa.debian.org/go-team/packages/golang-github-go-git-go-git-fixtures

Re: RFS: golang-github-go-git-go-git [RC] & dependencies

2024-03-30 Thread Nilesh Patra
Replying to both: On Sat, Mar 30, 2024 at 06:59:16PM +0800, Maytham Alsudany wrote: > On Sat, 2024-03-30 at 09:48 +0100, Simon Josefsson wrote: > > Maytham Alsudany writes: > > > > > https://salsa.debian.org/go-team/packages/golang-github-go-git-go-git-fixtures > > > > I looked at this update,

Re: RFS: golang-github-go-git-go-git [RC] & dependencies

2024-03-30 Thread Simon Josefsson
Maytham Alsudany writes: > Hi Simon, > > On Sat, 2024-03-30 at 09:48 +0100, Simon Josefsson wrote: >> Maytham Alsudany writes: >> >> > https://salsa.debian.org/go-team/packages/golang-github-go-git-go-git-fixtures >> >> I looked at this update, and one of the proposed changes is to include >>

Re: RFS: golang-github-go-git-go-git [RC] & dependencies

2024-03-30 Thread Maytham Alsudany
Hi Simon, On Sat, 2024-03-30 at 09:48 +0100, Simon Josefsson wrote: > Maytham Alsudany writes: > > > https://salsa.debian.org/go-team/packages/golang-github-go-git-go-git-fixtures > > I looked at this update, and one of the proposed changes is to include > all of the pre-generated stuff from

Re: RFS: golang-github-go-git-go-git [RC] & dependencies

2024-03-30 Thread Simon Josefsson
Maytham Alsudany writes: > https://salsa.debian.org/go-team/packages/golang-github-go-git-go-git-fixtures I looked at this update, and one of the proposed changes is to include all of the pre-generated stuff from here: https://github.com/go-git/go-git-fixtures/tree/master/data directly into

Re: RFS: golang-github-go-git-go-git [RC] & dependencies

2024-03-30 Thread Simon Josefsson
Maytham Alsudany writes: > Hi Simon, > > On Wed, 2024-03-27 at 16:30 +0100, Simon Josefsson wrote: >> Hi -- happy to sponsor this -- are they in git on salsa for me to build >> and sign and upload, or what shape are they in? > > They all ready to sign and upload. I see you've already uploaded >

Re: RFS: golang-github-go-git-go-git [RC] & dependencies

2024-03-28 Thread Simon Josefsson
tor 2024-03-28 klockan 07:29 +0800 skrev Maytham Alsudany: > Hi Simon, > > On Wed, 2024-03-27 at 17:14 +0100, Simon Josefsson wrote: > > I wonder if the sha1cd test data is copyrighted and licensed as per > > upstream's claims, but I have no fact to speak against the claim > > either > > so I

Re: RFS: golang-github-go-git-go-git [RC] & dependencies

2024-03-27 Thread Maytham Alsudany
Hi Simon, On Wed, 2024-03-27 at 17:14 +0100, Simon Josefsson wrote: > I wonder if the sha1cd test data is copyrighted and licensed as per > upstream's claims, but I have no fact to speak against the claim either > so I will merely make this comment about it. Your concerns are valid, so I've done

Re: RFS: golang-github-go-git-go-git [RC] & dependencies

2024-03-27 Thread Maytham Alsudany
Hi Simon, On Wed, 2024-03-27 at 16:30 +0100, Simon Josefsson wrote: > Hi -- happy to sponsor this -- are they in git on salsa for me to build > and sign and upload, or what shape are they in? They all ready to sign and upload. I see you've already uploaded sha1cd and knownhosts. Remaining:

Re: RFS: golang-github-go-git-go-git [RC] & dependencies

2024-03-27 Thread Simon Josefsson
Maytham Alsudany writes: > Hi Go team, > > I require a sponsor to review and upload the following packages for me. > > New packages: > - golang-github-pjbgf-sha1cd > - golang-github-skeema-knownhosts I reviewed these, and have uploaded them. Builds fine:

RFS: golang-github-go-git-go-git [RC] & dependencies

2024-03-27 Thread Maytham Alsudany
Hi Go team, I require a sponsor to review and upload the following packages for me. New packages: - golang-github-pjbgf-sha1cd - golang-github-skeema-knownhosts Updated packages: - golang-github-go-git-go-git [RC] - Fixes: CVE-2023-49568, CVE-2023-49569, Closes: #1060701 -