Public bug reported: [Availability] The package dput-ng is already in Ubuntu universe. The package dput-ng builds for the architectures it is designed to work on. It currently builds on amd64 and works on all architectures. Link to package https://launchpad.net/ubuntu/+source/dput-ng
[Rationale] - The package dput-ng is required in Ubuntu main in order to replace dput. - The package dput-ng will not generally be useful for a large part of our user base, but is important still because it is used heavily in Ubuntu development - Package dput-ng covers the same use case as dput, but is better because it is a newer rewrite which supports running custom hooks before upload, thereby we want to replace it. - There is no other way do this that is already in main or should go universe->main instead of this. - This is the first time package will be in main - All binary packages built by dput-ng need to be in main as they are dependencies of dput-ng - The package dput-ng is required in Ubuntu main no later than February 12 due to feature freeze. [Security] - No CVEs/security issues in this software in the past - no `suid` or `sgid` binaries - no executables in `/sbin` and `/usr/sbin` - Package does not install services, timers or recurring jobs - Packages does not open privileged ports (ports < 1024). - Package does not expose any external endpoints - Packages does not contain extensions to security-sensitive software (filters, scanners, plugins, UI skins, ...) [Quality assurance - function/usage] - The package works well right after install [Quality assurance - maintenance] - The package is maintained well in Debian/Ubuntu/Upstream and does not have too many, long-term & critical, open bugs - Ubuntu https://bugs.launchpad.net/ubuntu/+source/dput-ng/+bug - Debian https://bugs.debian.org/cgi-bin/pkgreport.cgi?src=dput-ng - There is no separate upstream bug tracker as this is a Debian package - The package does not deal with exotic hardware we cannot support [Quality assurance - testing] - The package runs a test suite on build time, if it fails it makes the build fail, link to build log: https://launchpadlibrarian.net/814861158/buildlog_ubuntu-questing-amd64.dput-ng_1.44_BUILDING.txt.gz - The package runs an autopkgtest, and is currently passing on all of architectures, link to test logs: https://autopkgtest.ubuntu.com/packages/dput-ng - The package does have not failing autopkgtests right now [Quality assurance - packaging] - A mechanism to detect and fetch new upstream versions is not present because it is a native package - debian/control defines a correct Maintainer field - This package does not yield massive lintian Warnings, Errors - Please link to a recent build log of the package: https://launchpadlibrarian.net/843842136/buildlog_ubuntu-resolute-amd64.dput-ng_1.44_BUILDING.txt.gz - Please attach the full output you have got from `lintian --pedantic` as an extra post to this bug. - Lintian overrides are not present - This package does not rely on obsolete or about to be demoted packages. - This package has no python2 or GTK2 dependencies - The package will not be installed by default - Packaging and build is easy, link to debian/rules: https://git.launchpad.net/ubuntu/+source/dput-ng/tree/debian/rules [UI standards] - Application is not end-user facing (does not need translation) [Dependencies] - There is a recommends on debian-keyring which is in universe. There is an attached MP which demotes debian-keyring to suggests, along with evidence that it does not change build or autopkgtest results. - There are further dependencies that are not yet in main (python3-dput is part of the same source package), the MIR process for them is handled as part of this bug here. [Standards compliance] - This package correctly follows FHS and Debian Policy [Maintenance/Owner] - The owning team will be Debcrafters and I have their acknowledgment for that commitment - The future owning team is not yet subscribed, but will subscribe to the package before promotion - This does not use static builds - This does not use vendored code - This package is not rust based - The package has been built within the last 3 months in PPA - Build link on launchpad: https://launchpadlibrarian.net/843842136/buildlog_ubuntu-resolute-amd64.dput-ng_1.44_BUILDING.txt.gz This change will impact all teams that upload packages to Ubuntu. There will be a widespread announcement linked here to the notice of transition. [Background information] - The Package description explains the package well - Upstream Name is dput-ng - Link to upstream project: https://salsa.debian.org/debian/dput-ng ** Affects: dput-ng (Ubuntu) Importance: Undecided Status: New ** Merge proposal linked: https://code.launchpad.net/~uralt/ubuntu/+source/dput-ng/+git/dput-ng/+merge/499126 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2138904 Title: [MIR] dput-ng To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/dput-ng/+bug/2138904/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
