control: tags -1 + moreinfo hi Martin-Éric,
On Mon, Dec 23, 2024 at 11:52:30PM +0200, Martin-Éric Racine wrote:
> Since version 2.9.19, APT swutched from gpgv to sqv as its GPG dependency. It
> would be desirable for devscripts to do the same, if possible.
there have been a lot of related changes recently in devscripts,
just have a look at the last two months:
$ git checkout v2.24.8
$ head -214 debian/changelog | egrep -i '(sop|pgp|gpg|gnupg|9580|uscan)'
* debsign: Ensure future GnuPG interop by forcing OpenPGP compliant behavior.
* Devscripts::Uscan::Keyring: Handle and warn on concatenated ASCII Armor
* Uscan/Keyring.pm:
- gpgv can use /dev/null for homedir.
- add helper functions for OpenPGP ASCII Armor.
- remove dependency on /usr/bin/gpg.
- add OpenPGP verification support for sop. Closes: #1010955.
- clean up references to RFC 9580.
- rely on sopv instead of sop, except for "sop armor".
* d/control and README, documented uscan depends:
- remove gnupg from dependency annotations, encourage sop.
- use the sopv alternatives, rather than enumerate sopv's implementations.
* debsign: Remove compatibility code for ancient GnuPG. Closes: #1066875
* uscan: bash-completion: Add support for --vcs-export-uncompressed option.
So I'm wondering what else in devscripts should be changed? As it is, this bug
report is not really actionable.
--
cheers,
Holger
⢀⣴⠾⠻⢶⣦⠀
⣾⠁⢠⠒⠀⣿⡁ holger@(debian|reproducible-builds|layer-acht).org
⢿⡄⠘⠷⠚⠋⠀ OpenPGP: B8BF54137B09D35CF026FE9D 091AB856069AAA1C
⠈⠳⣄
It's climate crime, not climate change.
signature.asc
Description: PGP signature
