Mathias Gibbens <gib...@debian.org> writes: > Source: golang-github-google-certificate-transparency > Version: 1.3.1-1 > Severity: serious > Justification: FTBFS > Tags: sid ftbfs > Affects: sigstore-go > X-Debbugs-CC: si...@josefsson.org > > The recent update of golang-github-google-certificate-transparency is > missing (at least) golang-github-jackc-pgerrcode-dev among its Build- > Depends and Depends. This is causing sigstore-go to fail to build: > >> dh_auto_test -O--builddirectory=_build -O--buildsystem=golang >> cd _build && go test -vet=off -v -p 48 >> github.com/sigstore/sigstore-go/cmd/conformance >> github.com/sigstore/sigstore-go/cmd/sigstore-go >> github.com/sigstore/sigstore-go/examples/oci-image-verification >> github.com/sigstore/sigstore-go/examples/sigstore-go-signing >> github.com/sigstore/sigstore-go/pkg/bundle >> github.com/sigstore/sigstore-go/pkg/fulcio/certificate >> github.com/sigstore/sigstore-go/pkg/root >> github.com/sigstore/sigstore-go/pkg/sign >> github.com/sigstore/sigstore-go/pkg/testing/ca >> github.com/sigstore/sigstore-go/pkg/testing/data >> github.com/sigstore/sigstore-go/pkg/tlog >> github.com/sigstore/sigstore-go/pkg/tuf >> github.com/sigstore/sigstore-go/pkg/util >> github.com/sigstore/sigstore-go/pkg/verify >> # github.com/sigstore/sigstore-go/pkg/verify >> src/github.com/google/certificate-transparency-go/trillian/ctfe/storage/postgresql/postgresql.go:25:2: >> cannot find package "github.com/jackc/pgerrcode" in any of: >> /usr/lib/go-1.23/src/github.com/jackc/pgerrcode (from $GOROOT) >> /build/sigstore-go-0.6.2/_build/src/github.com/jackc/pgerrcode (from >> $GOPATH) >> FAIL github.com/sigstore/sigstore-go/pkg/verify [setup failed] > > I'd double-check golang-github-google-certificate-transparency's > go.mod to determine if there are any other missing dependencies. > > Using `ratt` is helpful to verify that reverse build-deps still build > properly with an updated package.
Thank you! I rebuilt all reverse dependencies before the upload: https://salsa.debian.org/jas/golang-github-google-certificate-transparency/-/pipelines/801627 Comparing to previous version: https://salsa.debian.org/jas/golang-github-google-certificate-transparency/-/pipelines/801598 So it is in good shape, but you are right, I failed to catch that 'sigstore-go' stopped working, presumably because I was preparing 'sigstore-go' locally (it was just accepted from NEW) so wrote it off without looking at build log. I'll do some more testing, maybe we need to drop postgresql support from 'sigstore-go' if 'golang-github-google-certificate-transparency' now pull in too many new build dependencies - I'm concerned we don't have v5 of golang-github-jackc-pgx-dev. /Simon
signature.asc
Description: PGP signature