Re: Golang packages

2021-05-19 Thread Holger Levsen
On Wed, May 19, 2021 at 09:27:34PM +0200, Ola Lundqvist wrote: > I do not think an upload without a DLA is a big concern. We have had quite > a few of these when we needed to backport certain components in order to > build some package. I think it was firefox but I could remember wrong. > To my kno

Re: Golang packages

2021-05-19 Thread Ola Lundqvist
Hi I do not think an upload without a DLA is a big concern. We have had quite a few of these when we needed to backport certain components in order to build some package. I think it was firefox but I could remember wrong. To my knowledge no one complained then. You do however raise a valid concer

Re: Golang packages

2021-05-19 Thread Brian May
Ola Lundqvist writes: > In this case I think we should issue one DLA and tell all the packages that > have been updated at the same time. This require some rephrasing compared > to a standard DLA but I do not think we should have a lot of them. > > This considering that we have fixed all the pack

Re: Golang packages

2021-05-19 Thread Ola Lundqvist
Hi In this case I think we should issue one DLA and tell all the packages that have been updated at the same time. This require some rephrasing compared to a standard DLA but I do not think we should have a lot of them. This considering that we have fixed all the packages that require re-build.

Re: Golang packages

2021-05-17 Thread Brian May
Ola Lundqvist writes: > I can also see a note in dla-needed for Thorsten working on automating go > updates. I did a bit of work trying to automate go updates on my system: * Identifying what packages need to be updated. * Downloading said packages. * Rebuilding. * Uploading. But there is stil

Re: Golang packages

2021-05-17 Thread Sylvain Beucler
or example golang-gogoprotobuf are rather questionable whether we should fix at all. // Ola On Mon, 17 May 2021 at 11:44, Sylvain Beucler <mailto:b...@beuc.net>> wrote: Hi, According to debian-security-support, golang packages are not "unsupported" but with &qu

Re: Golang packages

2021-05-17 Thread Ola Lundqvist
Hi, > > According to debian-security-support, golang packages are not > "unsupported" but with "limited support". > Currently some packages are updated in stable and rdeps are manually > bin-num'd (e.g. #946467), see also > https://www.debian.org/News/2020/20200718

Re: Golang packages

2021-05-17 Thread Sylvain Beucler
Hi, According to debian-security-support, golang packages are not "unsupported" but with "limited support". Currently some packages are updated in stable and rdeps are manually bin-num'd (e.g. #946467), see also https://www.debian.org/News/2020/20200718 for stretch-

Golang packages

2021-05-17 Thread Ola Lundqvist
Hi fellow LTS contributors I have a question about go package support. The question is whether we should try to support it in LTS or not: According to this we do not give security support for go packages in buster. https://www.debian.org/releases/buster/amd64/release-notes/ch-information.en.html#