Mathias Gibbens <gib...@debian.org> writes:

> Source: golang-github-google-certificate-transparency
> Version: 1.3.1-1
> Severity: serious
> Justification: FTBFS
> Tags: sid ftbfs
> Affects: sigstore-go
> X-Debbugs-CC: si...@josefsson.org
>
>   The recent update of golang-github-google-certificate-transparency is
> missing (at least) golang-github-jackc-pgerrcode-dev among its Build-
> Depends and Depends. This is causing sigstore-go to fail to build:
>
>>    dh_auto_test -O--builddirectory=_build -O--buildsystem=golang
>>         cd _build && go test -vet=off -v -p 48 
>> github.com/sigstore/sigstore-go/cmd/conformance 
>> github.com/sigstore/sigstore-go/cmd/sigstore-go 
>> github.com/sigstore/sigstore-go/examples/oci-image-verification 
>> github.com/sigstore/sigstore-go/examples/sigstore-go-signing 
>> github.com/sigstore/sigstore-go/pkg/bundle 
>> github.com/sigstore/sigstore-go/pkg/fulcio/certificate 
>> github.com/sigstore/sigstore-go/pkg/root 
>> github.com/sigstore/sigstore-go/pkg/sign 
>> github.com/sigstore/sigstore-go/pkg/testing/ca 
>> github.com/sigstore/sigstore-go/pkg/testing/data 
>> github.com/sigstore/sigstore-go/pkg/tlog 
>> github.com/sigstore/sigstore-go/pkg/tuf 
>> github.com/sigstore/sigstore-go/pkg/util 
>> github.com/sigstore/sigstore-go/pkg/verify
>> # github.com/sigstore/sigstore-go/pkg/verify
>> src/github.com/google/certificate-transparency-go/trillian/ctfe/storage/postgresql/postgresql.go:25:2:
>>  cannot find package "github.com/jackc/pgerrcode" in any of:
>>         /usr/lib/go-1.23/src/github.com/jackc/pgerrcode (from $GOROOT)
>>         /build/sigstore-go-0.6.2/_build/src/github.com/jackc/pgerrcode (from 
>> $GOPATH)
>> FAIL    github.com/sigstore/sigstore-go/pkg/verify [setup failed]
>
>   I'd double-check golang-github-google-certificate-transparency's
> go.mod to determine if there are any other missing dependencies.
>
>   Using `ratt` is helpful to verify that reverse build-deps still build
> properly with an updated package.

Thank you!  I rebuilt all reverse dependencies before the upload:

https://salsa.debian.org/jas/golang-github-google-certificate-transparency/-/pipelines/801627

Comparing to previous version:

https://salsa.debian.org/jas/golang-github-google-certificate-transparency/-/pipelines/801598

So it is in good shape, but you are right, I failed to catch that
'sigstore-go' stopped working, presumably because I was preparing
'sigstore-go' locally (it was just accepted from NEW) so wrote it off
without looking at build log.

I'll do some more testing, maybe we need to drop postgresql support from
'sigstore-go' if 'golang-github-google-certificate-transparency' now
pull in too many new build dependencies - I'm concerned we don't have v5
of golang-github-jackc-pgx-dev.

/Simon

Attachment: signature.asc
Description: PGP signature

Reply via email to