Hi Bastien, On Fri, Aug 1, 2025 at 2:13 AM Bastien Roucaries <ro...@debian.org> wrote: > 1. first upload a openjdk that trigger update-ca-certificates-java > 2. upload a backport of ca-certificates-java > 3. upload ca-certificates
Correct - that's the right sequence. Following up with Vladimir also tells me that - The first step will get you openjdk reconfiguring ca-certificates-java twice. - Then you immediately upload a backport that breaks circular dependency. - And then you can refresh ca-certificates. Note that this needs to happen for all the openjdk in bullseye - which means openjdk-11, openjdk-17, *and* nvidia-openjdk-8-jre. Let me know if you need anything else. Also, please go ahead with or without adding them to dla-needed, whatever you find convenient. - u