yasm_1.3.0-7_source.changes ACCEPTED into unstable

2025-04-30 Thread Debian FTP Masters
Thank you for your contribution to Debian.



Accepted:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Format: 1.8
Date: Wed, 30 Apr 2025 07:59:59 +0200
Source: yasm
Architecture: source
Version: 1.3.0-7
Distribution: unstable
Urgency: medium
Maintainer: Debian QA Group 
Changed-By: Petter Reinholdtsen 
Closes: 1016353 1035951
Changes:
 yasm (1.3.0-7) unstable; urgency=medium
 .
   * QA upload.
 .
   * Added 1000-x86-dir-cpu-CVE-2023-29579.patch to solve crash bug
 (Closes: #1035951).
   * Added 1010-nasm-pp-no-env-CVE-2021-33464.patch to solve crash bug
 (Closes: #1016353).
Checksums-Sha1:
 867253b51235b03b40a130b0b6c44dacf4ad72b8 1818 yasm_1.3.0-7.dsc
 eb2aa1a46eded3716498e01009d16ad72859fa88 10096 yasm_1.3.0-7.debian.tar.xz
 8315755a081a845ef42126316acd9207716f3e3f 7033 yasm_1.3.0-7_source.buildinfo
Checksums-Sha256:
 67087c7aabaa687df149dd9bde4e1096893783847f74fbe8b136bee8d270301f 1818 
yasm_1.3.0-7.dsc
 056bd3863d3ce10a29ff4daaa465683d2486ea89e71d3f18dbe586227b9df2e0 10096 
yasm_1.3.0-7.debian.tar.xz
 9fd46c2c23d9df3a2dd45aec9fe36535cb375df503d170f355bb7057a50892e0 7033 
yasm_1.3.0-7_source.buildinfo
Files:
 6f8ba158b9352ae0003b0265f1d12108 1818 devel optional yasm_1.3.0-7.dsc
 93004dce509ddb590cd404f657361a5e 10096 devel optional 
yasm_1.3.0-7.debian.tar.xz
 168b50f1b31542a580b08d4adc2230a1 7033 devel optional 
yasm_1.3.0-7_source.buildinfo

-BEGIN PGP SIGNATURE-
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=o623
-END PGP SIGNATURE-



pgpNVs2Auu1IK.pgp
Description: PGP signature


Processed: key-chord-el: diff for NMU version 0.6-8.1

2025-04-30 Thread Debian Bug Tracking System
Processing control commands:

> tags 1098905 + patch
Bug #1098905 [elpa-key-chord] elpa-key-chord: incompatibility with Gnu Emacs 30
Added tag(s) patch.
> tags 1098905 + pending
Bug #1098905 [elpa-key-chord] elpa-key-chord: incompatibility with Gnu Emacs 30
Added tag(s) pending.

-- 
1098905: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1098905
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems



Bug#1098905: key-chord-el: diff for NMU version 0.6-8.1

2025-04-30 Thread Abhijith PA
Control: tags 1098905 + patch
Control: tags 1098905 + pending


Dear Thorsten,

I've prepared an update for key-chord-el (versioned as 0.6-8.1). Can you
check the patch is fine. I will upload to archive soon with this patch

Regards.

diff -Nru key-chord-el-0.6/debian/changelog key-chord-el-0.6/debian/changelog
--- key-chord-el-0.6/debian/changelog	2025-04-03 13:27:35.0 +0530
+++ key-chord-el-0.6/debian/changelog	2025-04-30 20:53:16.0 +0530
@@ -1,3 +1,11 @@
+key-chord-el (0.6-8.1) unstable; urgency=medium
+
+  * Non-maintainer upload.
+  * Remove `sit-for` argument for make compatible with emacs 30.
+(Closes: #1098905)
+
+ -- Abhijith PA   Wed, 30 Apr 2025 20:53:16 +0530
+
 key-chord-el (0.6-8) unstable; urgency=medium
 
   * Orphan package.
diff -Nru key-chord-el-0.6/debian/patches/make-sit-for-compatible-with-emacs-30.patch key-chord-el-0.6/debian/patches/make-sit-for-compatible-with-emacs-30.patch
--- key-chord-el-0.6/debian/patches/make-sit-for-compatible-with-emacs-30.patch	1970-01-01 05:30:00.0 +0530
+++ key-chord-el-0.6/debian/patches/make-sit-for-compatible-with-emacs-30.patch	2025-04-30 20:52:06.0 +0530
@@ -0,0 +1,19 @@
+Description: Make elpa-key-chord compatible with emacs 30
+ Please see https://bugs.debian.org/1098905
+Author: Abhijith PA 
+Bug: 
+Bug-Debian: https://bugs.debian.org/1098905
+Forwarded: not-needed
+Last-Update: 2025-04-30
+
+--- key-chord-el-0.6.orig/key-chord.el
 key-chord-el-0.6/key-chord.el
+@@ -337,7 +337,7 @@ Please ignore that."
+   (when (bound-and-true-p eldoc-mode)
+ (eldoc-pre-command-refresh-echo-area))
+ 
+-	  (sit-for delay 0 'no-redisplay))
++	  (sit-for delay 'no-redisplay))
+ 	(progn
+ 	  (setq key-chord-last-unmatched nil)
+ 	  (list first-char))
diff -Nru key-chord-el-0.6/debian/patches/series key-chord-el-0.6/debian/patches/series
--- key-chord-el-0.6/debian/patches/series	2025-04-03 13:27:35.0 +0530
+++ key-chord-el-0.6/debian/patches/series	2025-04-30 20:49:32.0 +0530
@@ -1,3 +1,4 @@
 prevent-eldoc-from-flickering.patch
 Don-t-fail-if-eldoc-mode-is-undefined.patch
 Fix-of-key-chord-unset-global.patch
+make-sit-for-compatible-with-emacs-30.patch


Bug#1098905: elpa-key-chord: incompatibility with Gnu Emacs 30

2025-04-30 Thread Santiago Vila

Hello.

The package is orphaned, so you should probably make a "QA upload",
versioned 0.6-9, not a NMU.

Thanks.



Bug#1098905: elpa-key-chord: incompatibility with Gnu Emacs 30

2025-04-30 Thread Santiago Vila

[ dropping thorsten because his email bounces ]

Hi. While we are at it, some comments/suggestions about your diff:

- The "Please see https://bugs.debian.org/1098905"; part is redundant
because such information is already in Bug-Debian. I would just omit that.

- Also, "Bug:" header has a template text: .
If the bug has not been forwarded upstream I would just omit such header.

- While I'm not a native English speaker, I can't parse the grammar
in this sentence:

Remove `sit-for` argument for make compatible with emacs 30.

I would probably write something like this:

Remove `sit-for` argument to make it compatible with emacs 30.


If you plan to upload, I guess you don't need to wait for anybody else,
since the package is orphaned.

Thanks.



Processing of suck_4.3.5-5_source.changes

2025-04-30 Thread Debian FTP Masters
suck_4.3.5-5_source.changes uploaded successfully to localhost
along with the files:
  suck_4.3.5-5.dsc
  suck_4.3.5-5.debian.tar.xz
  suck_4.3.5-5_arm64.buildinfo

Greetings,

Your Debian queue daemon (running on host usper.debian.org)



suck_4.3.5-5_source.changes ACCEPTED into unstable

2025-04-30 Thread Debian FTP Masters
Thank you for your contribution to Debian.



Accepted:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

Format: 1.8
Date: Wed, 30 Apr 2025 20:49:53 +0200
Source: suck
Architecture: source
Version: 4.3.5-5
Distribution: unstable
Urgency: medium
Maintainer: Debian QA Group 
Changed-By: Chris Hofstaedtler 
Changes:
 suck (4.3.5-5) unstable; urgency=medium
 .
   * QA upload.
   * Remove usage of apt-cache for obsolete use case
Checksums-Sha1:
 c76b885c9e07ea3cc8e9d5116f8112c18efbb6a0 1876 suck_4.3.5-5.dsc
 0ab9f4527fdb4697a97b1727f7d773dfb93d156d 44716 suck_4.3.5-5.debian.tar.xz
 863041598438169e4a8154b0bd40b5dd2a54bd70 5686 suck_4.3.5-5_arm64.buildinfo
Checksums-Sha256:
 7d4f9d87fa6528c8e15ee519b2de98bce158bf1571aa7dda38346b0f85ee435b 1876 
suck_4.3.5-5.dsc
 b074f81f2f209230fb6b99669c381ca6d91102f28fec59ee049c0fbde08d655c 44716 
suck_4.3.5-5.debian.tar.xz
 41d87ae9e5418c2544b9cba9bc3986fe80327054a5af4399cc9496ee62a1d93e 5686 
suck_4.3.5-5_arm64.buildinfo
Files:
 7478573e71bd4cc0300bb5c6fe9d20f1 1876 news optional suck_4.3.5-5.dsc
 628d19d6882baacc8c8d2f6b80986039 44716 news optional suck_4.3.5-5.debian.tar.xz
 f595cd8f3cab39c3da037a38ce0a6881 5686 news optional 
suck_4.3.5-5_arm64.buildinfo

-BEGIN PGP SIGNATURE-
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=FdEB
-END PGP SIGNATURE-



pgpsmLqMIAdAV.pgp
Description: PGP signature


Bug#1099290: marked as done (statcvs: FTBFS: error: package org.jfree.ui does not exist)

2025-04-30 Thread Debian Bug Tracking System
Your message dated Wed, 30 Apr 2025 08:42:05 +
with message-id 
and subject line Bug#1099290: fixed in statcvs 1:0.7.0.dfsg-11
has caused the Debian Bug report #1099290,
regarding statcvs: FTBFS: error: package org.jfree.ui does not exist
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
1099290: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1099290
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: src:statcvs
Version: 1:0.7.0.dfsg-10
Severity: serious
Tags: ftbfs trixie sid

Dear maintainer:

During a rebuild of all packages in unstable, your package failed to build:


[...]
 debian/rules clean
dh clean --with javahelper
   dh_auto_clean
ant clean
Buildfile: /<>/build.xml

clean:

BUILD SUCCESSFUL
Total time: 0 seconds
   jh_clean
Duplicate specification "unlink|u" for option "u"
   dh_clean
 debian/rules binary
dh binary --with javahelper
   dh_update_autotools_config
   dh_autoreconf
   dh_auto_configure
   jh_linkjars
   debian/rules override_dh_auto_build
make[1]: Entering directory '/<>'
dh_auto_build -- jar javadoc
ant -Duser.name debian jar javadoc
Buildfile: /<>/build.xml

init:
[mkdir] Created dir: /<>/build

filter:
 [copy] Copying 155 files to /<>/src-temp
 [copy] Copied 19 empty directories to 1 empty directory under 
/<>/src-temp
 [copy] Copying 8 files to /<>/src-temp

compile:
[javac] /<>/build.xml:60: warning: 'includeantruntime' was not 
set, defaulting to build.sysclasspath=last; set to false for repeatable builds
[javac] Using javac -source 1.4 is no longer supported, switching to 8
[javac] Using javac -target 1.4 is no longer supported, switching to 8
[javac] Compiling 141 source files to /<>/build
[javac] warning: [options] bootstrap class path not set in conjunction with 
-source 8
[javac] warning: [options] source value 8 is obsolete and will be removed 
in a future release
[javac] warning: [options] target value 8 is obsolete and will be removed 
in a future release
[javac] warning: [options] To suppress warnings about obsolete options, use 
-Xlint:-options.
[javac] 
/<>/src-temp/net/sf/statcvs/charts/ChartConfigUtil.java:25: error: 
package org.jfree.ui does not exist
[javac] import org.jfree.ui.Align;
[javac]^
[javac] 
/<>/src-temp/net/sf/statcvs/charts/ChartConfigUtil.java:26: error: 
package org.jfree.ui does not exist
[javac] import org.jfree.ui.HorizontalAlignment;
[javac]^
[javac] 
/<>/src-temp/net/sf/statcvs/charts/ChartConfigUtil.java:27: error: 
package org.jfree.ui does not exist
[javac] import org.jfree.ui.RectangleEdge;
[javac]^
[javac] /<>/src-temp/net/sf/statcvs/charts/ChartImage.java:9: 
error: cannot find symbol
[javac] import org.jfree.chart.ChartUtilities;
[javac]   ^
[javac]   symbol:   class ChartUtilities
[javac]   location: package org.jfree.chart
[javac] 
/<>/src-temp/net/sf/statcvs/charts/ModifyAddChartMaker.java:27: 
error: package org.jfree.ui does not exist
[javac] import org.jfree.ui.RectangleEdge;
[javac]^
[javac] 
/<>/src-temp/net/sf/statcvs/charts/ModuleEvolutionChartMaker.java:18:
 error: cannot find symbol
[javac] import org.jfree.chart.axis.ColorBar;
[javac]^
[javac]   symbol:   class ColorBar
[javac]   location: package org.jfree.chart.axis
[javac] 
/<>/src-temp/net/sf/statcvs/charts/ModuleEvolutionChartMaker.java:22:
 error: cannot find symbol
[javac] import org.jfree.chart.plot.ContourPlot;
[javac]^
[javac]   symbol:   class ContourPlot
[javac]   location: package org.jfree.chart.plot
[javac] 
/<>/src-temp/net/sf/statcvs/charts/ModuleEvolutionChartMaker.java:23:
 error: package org.jfree.data.contour does not exist
[javac] import org.jfree.data.contour.ContourDataset;
[javac]  ^
[javac] 
/<>/src-temp/net/sf/statcvs/charts/ModuleEvolutionChartMaker.java:24:
 error: package org.jfree.data.contour does not exist
[javac] import org.jfree.data.contour.DefaultContourDataset;
[javac]  ^
[javac] 
/<>/src-temp/net/sf/statcvs/charts/ModuleEvolutionChartMaker.java:25:
 error: package org.jfree.ui does not exist
[javac] import org.jfree.ui.RectangleEdge;
[javac]^
[javac] 
/<>/src-temp/net/sf/statcvs/charts/Mo

Bug#1016353: marked as done (yasm: CVE-2021-33464)

2025-04-30 Thread Debian Bug Tracking System
Your message dated Wed, 30 Apr 2025 07:55:02 +
with message-id 
and subject line Bug#1016353: fixed in yasm 1.3.0-7
has caused the Debian Bug report #1016353,
regarding yasm: CVE-2021-33464
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
1016353: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1016353
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Source: yasm
X-Debbugs-CC: t...@security.debian.org
Severity: important
Tags: security

Hi,

The following vulnerability was published for yasm.

CVE-2021-33464[0]:
| An issue was discovered in yasm version 1.3.0. There is a heap-buffer-
| overflow in inc_fopen() in modules/preprocs/nasm/nasm-pp.c.

https://github.com/yasm/yasm/issues/164


If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2021-33464
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-33464

Please adjust the affected versions in the BTS as needed.
--- End Message ---
--- Begin Message ---
Source: yasm
Source-Version: 1.3.0-7
Done: Petter Reinholdtsen 

We believe that the bug you reported is fixed in the latest version of
yasm, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1016...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Petter Reinholdtsen  (supplier of updated yasm package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)


-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Format: 1.8
Date: Wed, 30 Apr 2025 07:59:59 +0200
Source: yasm
Architecture: source
Version: 1.3.0-7
Distribution: unstable
Urgency: medium
Maintainer: Debian QA Group 
Changed-By: Petter Reinholdtsen 
Closes: 1016353 1035951
Changes:
 yasm (1.3.0-7) unstable; urgency=medium
 .
   * QA upload.
 .
   * Added 1000-x86-dir-cpu-CVE-2023-29579.patch to solve crash bug
 (Closes: #1035951).
   * Added 1010-nasm-pp-no-env-CVE-2021-33464.patch to solve crash bug
 (Closes: #1016353).
Checksums-Sha1:
 867253b51235b03b40a130b0b6c44dacf4ad72b8 1818 yasm_1.3.0-7.dsc
 eb2aa1a46eded3716498e01009d16ad72859fa88 10096 yasm_1.3.0-7.debian.tar.xz
 8315755a081a845ef42126316acd9207716f3e3f 7033 yasm_1.3.0-7_source.buildinfo
Checksums-Sha256:
 67087c7aabaa687df149dd9bde4e1096893783847f74fbe8b136bee8d270301f 1818 
yasm_1.3.0-7.dsc
 056bd3863d3ce10a29ff4daaa465683d2486ea89e71d3f18dbe586227b9df2e0 10096 
yasm_1.3.0-7.debian.tar.xz
 9fd46c2c23d9df3a2dd45aec9fe36535cb375df503d170f355bb7057a50892e0 7033 
yasm_1.3.0-7_source.buildinfo
Files:
 6f8ba158b9352ae0003b0265f1d12108 1818 devel optional yasm_1.3.0-7.dsc
 93004dce509ddb590cd404f657361a5e 10096 devel optional 
yasm_1.3.0-7.debian.tar.xz
 168b50f1b31542a580b08d4adc2230a1 7033 devel optional 
yasm_1.3.0-7_source.buildinfo

-BEGIN PGP SIGNATURE-
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=o623
-END PGP SIGNATURE-



pgprXZUslOAw7.pgp
Description: PGP signature
--- End Message ---


Bug#1035951: marked as done (yasm: CVE-2023-29579)

2025-04-30 Thread Debian Bug Tracking System
Your message dated Wed, 30 Apr 2025 07:55:02 +
with message-id 
and subject line Bug#1035951: fixed in yasm 1.3.0-7
has caused the Debian Bug report #1035951,
regarding yasm: CVE-2023-29579
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
1035951: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1035951
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Source: yasm
X-Debbugs-CC: t...@security.debian.org
Severity: important
Tags: security

Hi,

The following vulnerability was published for yasm.

CVE-2023-29579[0]:
| yasm 1.3.0.55.g101bc was discovered to contain a stack overflow via
| the component yasm/yasm+0x43b466 in vsprintf.

https://github.com/yasm/yasm/issues/214

If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2023-29579
https://www.cve.org/CVERecord?id=CVE-2023-29579

Please adjust the affected versions in the BTS as needed.
--- End Message ---
--- Begin Message ---
Source: yasm
Source-Version: 1.3.0-7
Done: Petter Reinholdtsen 

We believe that the bug you reported is fixed in the latest version of
yasm, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1035...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Petter Reinholdtsen  (supplier of updated yasm package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)


-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

Format: 1.8
Date: Wed, 30 Apr 2025 07:59:59 +0200
Source: yasm
Architecture: source
Version: 1.3.0-7
Distribution: unstable
Urgency: medium
Maintainer: Debian QA Group 
Changed-By: Petter Reinholdtsen 
Closes: 1016353 1035951
Changes:
 yasm (1.3.0-7) unstable; urgency=medium
 .
   * QA upload.
 .
   * Added 1000-x86-dir-cpu-CVE-2023-29579.patch to solve crash bug
 (Closes: #1035951).
   * Added 1010-nasm-pp-no-env-CVE-2021-33464.patch to solve crash bug
 (Closes: #1016353).
Checksums-Sha1:
 867253b51235b03b40a130b0b6c44dacf4ad72b8 1818 yasm_1.3.0-7.dsc
 eb2aa1a46eded3716498e01009d16ad72859fa88 10096 yasm_1.3.0-7.debian.tar.xz
 8315755a081a845ef42126316acd9207716f3e3f 7033 yasm_1.3.0-7_source.buildinfo
Checksums-Sha256:
 67087c7aabaa687df149dd9bde4e1096893783847f74fbe8b136bee8d270301f 1818 
yasm_1.3.0-7.dsc
 056bd3863d3ce10a29ff4daaa465683d2486ea89e71d3f18dbe586227b9df2e0 10096 
yasm_1.3.0-7.debian.tar.xz
 9fd46c2c23d9df3a2dd45aec9fe36535cb375df503d170f355bb7057a50892e0 7033 
yasm_1.3.0-7_source.buildinfo
Files:
 6f8ba158b9352ae0003b0265f1d12108 1818 devel optional yasm_1.3.0-7.dsc
 93004dce509ddb590cd404f657361a5e 10096 devel optional 
yasm_1.3.0-7.debian.tar.xz
 168b50f1b31542a580b08d4adc2230a1 7033 devel optional 
yasm_1.3.0-7_source.buildinfo

-BEGIN PGP SIGNATURE-
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=o623
-END PGP SIGNATURE-



pgp3_ZJVLb8bL.pgp
Description: PGP signature
--- End Message ---


Bug#1098905: elpa-key-chord: incompatibility with Gnu Emacs 30

2025-04-30 Thread Abhijith PA
Hi,

Thanks for reviewing my changes. I have prepared a "QA upload" and
uploaded to archive.

--abhijith



key-chord-el_0.6-9_source.changes ACCEPTED into unstable

2025-04-30 Thread Debian FTP Masters
Thank you for your contribution to Debian.



Accepted:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

Format: 1.8
Date: Wed, 30 Apr 2025 20:53:16 +0530
Source: key-chord-el
Architecture: source
Version: 0.6-9
Distribution: unstable
Urgency: medium
Maintainer: Debian QA Group 
Changed-By: Abhijith PA 
Closes: 1098905
Changes:
 key-chord-el (0.6-9) unstable; urgency=medium
 .
   * QA upload
   * Remove `sit-for` argument to make it compatible with emacs 30.
 (Closes: #1098905)
Checksums-Sha1:
 e28796904cec7818146769a748ea9d4d1c9ee201 1858 key-chord-el_0.6-9.dsc
 5496383b4413c68ef1ef04c7ad4aa68bf004119d 3500 key-chord-el_0.6-9.debian.tar.xz
 45c59e2a7dbd37acb05ce74a36a9f5a3880d9dad 7785 
key-chord-el_0.6-9_amd64.buildinfo
Checksums-Sha256:
 def0cb75f2313c80b976c30ea6dffdb47fb458c5fab4086e6c407f20ee7d6ac7 1858 
key-chord-el_0.6-9.dsc
 122a9eb5d3647b507329d9c9a633d9a1d9d0a6bb9344b0839dd42fe353398700 3500 
key-chord-el_0.6-9.debian.tar.xz
 35fea1f3c7ba453db01f91446b483f665b18b2069046fe758b956ab239e073df 7785 
key-chord-el_0.6-9_amd64.buildinfo
Files:
 8f1d32c5712fed78883cd07cf8fa4081 1858 lisp optional key-chord-el_0.6-9.dsc
 c1fb95930901089d3bf61142271d1c64 3500 lisp optional 
key-chord-el_0.6-9.debian.tar.xz
 5ae787ca5d90aeaf8e5a4c10ea7d4a8f 7785 lisp optional 
key-chord-el_0.6-9_amd64.buildinfo

-BEGIN PGP SIGNATURE-

iQJIBAEBCgAyFiEE7xPqJqaY/zX9fJAuhj1N8u2cKO8FAmgTDSwUHGFiaGlqaXRo
QGRlYmlhbi5vcmcACgkQhj1N8u2cKO+5DQ/9Fn5nu2lnrJp8IsY/kOWsH/rhshw+
qcQ2owLzG+NH6F8vyYaPFxKSWn1R+oE0tl2rbl6+qGTylYxwoqjNe6paz/x19jGv
U8L9azAHa62wGA9ohtOjeaxwQYUl/0hEgmKz7ti2VSo+kWUNFl/07ldeq9x6FLdm
hI0FQSvIpbpAHplUkFD2GEcwbeRqVX/4rVAUDPiFQtHY3TBrOUfrXOPVvxRtz7Kr
nXCeqmzLPs5V1RXuRKRHwI7RxodV5U8DTvsePTy5BVHM0s3oNanV+8ib7HVzsSSJ
MXY78fgwVMggAaDFC5HmI57P0aA/sq74MgM5ZTRMhzv9fH+CQ5WAY8D9OVjtTVyB
v566ApBRGkjP/zMK8h6ZDVAn2LjGlca6/UQe+7w4zlplvjkAW35eIkHajBun82/K
y0u5JQpTBYghIjcGYGa7KDR4Utxg9ANwt5LXqpJ6tgMobV0CsBl5B0PeeeoDOP/j
nSScM5bmaNQvk7J4YCi4m7IBbNAlOMbrZUvoc0zqqH5uGk1DRAbWSkNKrjCBwfbh
fAV+KUoai5ERjxY3GfvXDcTSvc4RU+j6KG77PNTbIX2OryzckYjwz0lo8Lhi5ZZP
+m7zeIjj3YN6jXRKmQWjfCvAQULsbZn/M2Tu3vfwAt6HuUkIspG/3OCW89kDLYPr
mwCOuvkXDUlCCeo=
=yW2b
-END PGP SIGNATURE-



pgpY8SrgQqW8i.pgp
Description: PGP signature


Processing of key-chord-el_0.6-9_source.changes

2025-04-30 Thread Debian FTP Masters
key-chord-el_0.6-9_source.changes uploaded successfully to localhost
along with the files:
  key-chord-el_0.6-9.dsc
  key-chord-el_0.6-9.debian.tar.xz
  key-chord-el_0.6-9_amd64.buildinfo

Greetings,

Your Debian queue daemon (running on host usper.debian.org)



Bug#1098905: marked as done (elpa-key-chord: incompatibility with Gnu Emacs 30)

2025-04-30 Thread Debian Bug Tracking System
Your message dated Thu, 01 May 2025 06:19:10 +
with message-id 
and subject line Bug#1098905: fixed in key-chord-el 0.6-9
has caused the Debian Bug report #1098905,
regarding elpa-key-chord: incompatibility with Gnu Emacs 30
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)


-- 
1098905: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1098905
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: elpa-key-chord
Version: 0.6-7
Severity: grave
Justification: renders package unusable
X-Debbugs-Cc: t...@not-in-kansas-anymore.org

Dear Maintainer,

key-chord.el is using the obsolete calling convention of 'sit-for' on line 340.
As of GNU Emacs 30, the function 'sit-for' has two arguments: "SECONDS
&optional NODISP" instead of three (the second argument "MILLISEC", which was 0
anyway, has been removed)

Therefore, changing line 340 to "(sit-for delay 'no-redisplay))" fixes the
problem.

Upstream has a new version, which fixes this bug but has other changes, too.
(https://github.com/emacsorphanage/key-chord)
--
Thorsten Bonow


-- System Information:
Debian Release: trixie/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)

Kernel: Linux 6.12.16-amd64 (SMP w/4 CPU threads; PREEMPT)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), 
LANGUAGE=en_US:en
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages elpa-key-chord depends on:
ii  dh-elpa-helper  2.1.6
ii  emacsen-common  3.0.5

Versions of packages elpa-key-chord recommends:
ii  emacs1:30.1+1-2
ii  emacs-lucid [emacs]  1:30.1+1-2

elpa-key-chord suggests no packages.

-- no debconf information
--- End Message ---
--- Begin Message ---
Source: key-chord-el
Source-Version: 0.6-9
Done: Abhijith PA 

We believe that the bug you reported is fixed in the latest version of
key-chord-el, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1098...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Abhijith PA  (supplier of updated key-chord-el package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)


-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

Format: 1.8
Date: Wed, 30 Apr 2025 20:53:16 +0530
Source: key-chord-el
Architecture: source
Version: 0.6-9
Distribution: unstable
Urgency: medium
Maintainer: Debian QA Group 
Changed-By: Abhijith PA 
Closes: 1098905
Changes:
 key-chord-el (0.6-9) unstable; urgency=medium
 .
   * QA upload
   * Remove `sit-for` argument to make it compatible with emacs 30.
 (Closes: #1098905)
Checksums-Sha1:
 e28796904cec7818146769a748ea9d4d1c9ee201 1858 key-chord-el_0.6-9.dsc
 5496383b4413c68ef1ef04c7ad4aa68bf004119d 3500 key-chord-el_0.6-9.debian.tar.xz
 45c59e2a7dbd37acb05ce74a36a9f5a3880d9dad 7785 
key-chord-el_0.6-9_amd64.buildinfo
Checksums-Sha256:
 def0cb75f2313c80b976c30ea6dffdb47fb458c5fab4086e6c407f20ee7d6ac7 1858 
key-chord-el_0.6-9.dsc
 122a9eb5d3647b507329d9c9a633d9a1d9d0a6bb9344b0839dd42fe353398700 3500 
key-chord-el_0.6-9.debian.tar.xz
 35fea1f3c7ba453db01f91446b483f665b18b2069046fe758b956ab239e073df 7785 
key-chord-el_0.6-9_amd64.buildinfo
Files:
 8f1d32c5712fed78883cd07cf8fa4081 1858 lisp optional key-chord-el_0.6-9.dsc
 c1fb95930901089d3bf61142271d1c64 3500 lisp optional 
key-chord-el_0.6-9.debian.tar.xz
 5ae787ca5d90aeaf8e5a4c10ea7d4a8f 7785 lisp optional 
key-chord-el_0.6-9_amd64.buildinfo

-BEGIN PGP SIGNATURE-
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