Hey, thanks for reporting this bug. I actually try to use pkg-php-tools, but don't get the same result like you.
I installed the composer.json-dist to roundcure-core package and than run override_dh_phpcomposer: dh_phpcomposer --sourcedirectory=$(CURDIR)/debian/roundcube-core/usr/share/ roundcube but with that I get: phpcomposer:Debian-require=php5-common, php5-common (>= 5.3.7), php-roundcube- plugin-installer (>= 0.1.6), php-roundcube-plugin-installer (<< 0.2~~), php- auth-sasl (>= 1.0.6), php-auth-sasl (<< 1.1~~), php-net-idna2 (>= 0.1.1), php- net-idna2 (<< 0.2~~), php-net-sieve (>= 1.3.4), php-net-sieve (<< 1.4~~), php- mail-mime (>= 1.9.0), php-mail-mime (<< 1.10~~), php-net-smtp (>= 1.7.1), php- net-smtp (<< 1.8~~), php-patchwork-utf8 (>= 1.2.3), php-patchwork-utf8 (<< 1.3~~) phpcomposer:Debian-require-dev=php-crypt-gpg, phpunit phpcomposer:Debian-suggest=php-net-ldap2, php-net-ldap3 do i miss an option for dh_phpcomposer to get rid of these << XX~~ parts? Or are they needed? regards, sandro -- Am Saturday 13 February 2016, 15:43:06 schrieb David Prévot: > Package: roundcube-core > Version: 1.1.4+dfsg.1-1 > Severity: important > > Hi, > > According to composer.json-dist, there shouldn’t be any php-auth > dependency. Instead, it should read something like: > > Depends: php-auth-sasl (>= 1.0.6), > php-net-idna2 (>= 0.1.1), > php-net-sieve (>= 1.3.4), > php-mail-mime (>= 1.9.0), > php-net-smtp (>= 1.4.2), > php-patchwork-utf8 (>= 1.2.3) > Suggests: php-net-ldap2 (>= 2.1.0), > php-net-ldap3 > > pkg-php-tools may be useful to translate those dependencies > automatically, and to keep them up to date. > > Since php-auth “is not maintained” [0], we’d like to get read of it > ASAP, thus the important severity. > > 0: https://pear.php.net/package/Auth > > I’ll open a serious bug against php-auth, and block it by this one. You > may wish to update your package before it gets auto-removed. > > Regards > > David
signature.asc
Description: This is a digitally signed message part.