Bug#1059618: ITP: ssh3 -- faster and rich secure shell using HTTP/3

Package: wnpp Severity: wishlist X-Debbugs-Cc: debian-de...@lists.debian.org, debian-go@lists.debian.org * Package name: ssh3 Version : 0.1.4 Upstream Contact: François Michel * URL : https://github.com/francoismichel/ssh3 * License : Apache-2.0 Programming La

Bug#1059620: ITP: golang-github-golang-jwt-jwt-v5 -- golang implementation of JSON Web Tokens (library)

Package: wnpp Severity: wishlist Owner: Simon Josefsson X-Debbugs-CC: debian-de...@lists.debian.org, debian-go@lists.debian.org * Package name: golang-github-golang-jwt-jwt-v5 Version : 5.2.0-1 Upstream Author : golang-jwt maintainers, Dave Grijalva * URL : https

Request to join Salsa group

Hi. I haven't maintained any Go packages but trying to learn. I am working on ssh3: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1059618 https://salsa.debian.org/jas/ssh3 As a first step, ssh3 requires a newer jwt than Debian has so I chased this down and believe the right approach is to p

Re: Request to join Salsa group

Nilesh Patra writes: > SGTM. Please rename the repository accordingly. Right. I have pushed ssh3 here: https://salsa.debian.org/go-team/packages/golang-github-francoismichel-ssh3 I don't understand the CI/CD pipeline, it seems different from "normal" Salsa pipeline. Until golang-github-golan

Re: Request to join Salsa group

Nilesh Patra writes: > On Fri, Dec 29, 2023 at 04:09:17PM +0100, Simon Josefsson wrote: >> Nilesh Patra writes: >> >> > SGTM. Please rename the repository accordingly. >> >> Right. I have pushed ssh3 here: >> >> https://salsa.debian.org/go

Re: Request to join Salsa group

Thanks you! Btw, I did my first Team upload of a new version of golang-github- kevinburke-ssh-config: https://salsa.debian.org/go-team/packages/golang-github-kevinburke-ssh-config https://tracker.debian.org/pkg/golang-github-kevinburke-ssh-config Let's hope none of the reverse dependencies fail

golang-github-go-redis-redis to v9?

Hi I am working on packaging github.com/sigstore/rekor which has a large number of dependencies. One of them is 'github.com/redis/go-redis' (version 9) and there is an existing package 'golang-github-go-redis-redis' (for version 6) in Debian that packages the old name of this project 'github.com/

Re: golang-github-go-redis-redis to v9?

meone please review my changes? And think about if the reverse dependencies works or not with v9? I haven't learnt how to use 'ratt' to test this myself, so if someone can build my version of the package and run it, that would be appreciated! /Simon Simon Josefsson writes: >

Bug#1060810: ITP: golang-github-sassoftware-go-rpmutils -- Golang implementation of parsing RPM packages

Package: wnpp Severity: wishlist Owner: Simon Josefsson * Package name: golang-github-sassoftware-go-rpmutils Version : 0.2.0-1 Upstream Author : SAS Institute, Inc. * URL : https://github.com/sassoftware/go-rpmutils * License : Apache-2.0 Programming Lang

Bug#1060813: ITP: golang-github-qur-ar -- Golang ar archive file library

Package: wnpp Severity: wishlist Owner: Simon Josefsson * Package name: golang-github-qur-ar Version : 0.0~git20130629.282534b-1 Upstream Author : Blake Smith, Julian Phillips * URL : https://github.com/qur/ar * License : Expat Programming Lang: Go

Bug#1060815: ITP: relic -- digitally sign Linux/Java/Windows packages

Package: wnpp Severity: wishlist Owner: Simon Josefsson * Package name: relic Version : 7.6.1-1 Upstream Author : SAS Institute, Inc. * URL : https://github.com/sassoftware/relic * License : Apache-2.0 Programming Lang: Go Description : digitally sign

Bug#1060816: ITP: golang-github-shibumi-go-pathspec -- gitignore-style pathspec pattern matching in Go

Package: wnpp Severity: wishlist Owner: Simon Josefsson * Package name: golang-github-shibumi-go-pathspec Version : 1.3.0-1 Upstream Author : Sander van Harmelen, Christian Rebischke * URL : https://github.com/shibumi/go-pathspec * License : Apache-2.0

Bug#1060817: ITP: golang-github-spiffe-go-spiffe -- Golang library for SPIFFE support

Package: wnpp Severity: wishlist Owner: Simon Josefsson * Package name: golang-github-spiffe-go-spiffe Version : 2.1.6-1 Upstream Author : Agustín Martínez Fayó, Andrew Harding, et al * URL : https://github.com/spiffe/go-spiffe * License : Apache-2.0

Bug#1060818: ITP: in-toto-golang -- framework for software supply chain integrity

Package: wnpp Severity: wishlist Owner: Simon Josefsson * Package name: in-toto-golang Version : 0.9.0-1 Upstream Author : Aditya Sirish, Christian Rebischke, Lukas Pühringer, et al * URL : https://github.com/in-toto/in-toto-golang * License : Apache-2.0

Bug#1060819: ITP: golang-github-zeebo-errs -- errs is a package for making errors friendly and easy

Package: wnpp Severity: wishlist Owner: Simon Josefsson * Package name: golang-github-zeebo-errs Version : 1.3.0-1 Upstream Author : Jeff Wendling * URL : https://github.com/zeebo/errs * License : Expat Programming Lang: Go Description : errs is a Go

Bug#1060820: ITP: golang-github-cyberphone-json-canonicalization -- JSON Canonicalization Scheme (JCS) (Go library)

Package: wnpp Severity: wishlist Owner: Simon Josefsson * Package name: golang-github-cyberphone-json-canonicalization Version : 0.0~git20220623.57a0ce2-1 Upstream Author : Anders Rundgren * URL : https://github.com/cyberphone/json-canonicalization * License

Re: RFS: golang-google-grpc + golang-github-google-s2a-go

Hi. What is the status of golang-google-grpc? My packaging effort of sigstore's rekor needs golang-google-grpc 1.53 according to github.com/spiffe/go-spiffe and fails with errors below. I have built golang-google-grpc from debian/experimental and the packages works fine for spiffe. When can a m

Bug#1060834: ITP: golang-github-veraison-go-cose -- go library for CBOR Object Signing and Encryption (COSE)

Package: wnpp Severity: wishlist Owner: Simon Josefsson * Package name: golang-github-veraison-go-cose Version : 1.2.1-1 Upstream Author : Veraison * URL : https://github.com/veraison/go-cose * License : MPL-2.0 Programming Lang: Go Description : go

Bug#1060836: ITP: golang-github-cavaliergopher-rpm -- A Go implementation of the RPM file format

Package: wnpp Severity: wishlist Owner: Simon Josefsson * Package name: golang-github-cavaliergopher-rpm Version : 1.2.0-1 Upstream Author : Ryan Armstrong, et al * URL : https://github.com/cavaliergopher/rpm * License : BSD-3-clause Programming Lang: Go

Bug#1060839: ITP: golang-github-adamkorcz-go-fuzz-headers-1 -- helper functions for Go fuzzing (library)

Package: wnpp Severity: wishlist Owner: Simon Josefsson * Package name: golang-github-adamkorcz-go-fuzz-headers-1 Version : 0.0~git20230919.8b5d3ce-1 Upstream Author : Adam Korcz * URL : https://github.com/AdamKorcz/go-fuzz-headers-1 * License : Apache-2.0

Bug#1060840: ITP: golang-k8s-sigs-release-utils -- utilities for kubernetes Go release engineering (library)

Package: wnpp Severity: wishlist Owner: Simon Josefsson * Package name: golang-k8s-sigs-release-utils Version : 0.7.7-1 Upstream Author : Kubernetes SIGs * URL : https://github.com/kubernetes-sigs/release-utils * License : Apache-2.0 Programming Lang: Go

Bug#1060841: ITP: golang-github-transparency-dev-merkle -- create and manipulate Merkle trees in Go (library)

Package: wnpp Severity: wishlist Owner: Simon Josefsson * Package name: golang-github-transparency-dev-merkle Version : 0.0.2-1 Upstream Author : Pavel Kalinnikov, Al Cutter, Martin Hutchinson, M Hickford, et al * URL : https://github.com/transparency-dev/merkle

Bug#1060842: ITP: trillian -- A transparent, highly scalable and cryptographically verifiable data store

Package: wnpp Severity: wishlist Owner: Simon Josefsson * Package name: trillian Version : 1.6.0-1 Upstream Author : Google * URL : https://github.com/google/trillian * License : Apache-2.0 Programming Lang: Go Description : A transparent, highly

Bug#1060852: ITP: golang-bitbucket-creachadair-shell -- implements basic shell command-line splitting for Go (library)

Package: wnpp Severity: wishlist Owner: Simon Josefsson * Package name: golang-bitbucket-creachadair-shell Version : 0.0.8-1 Upstream Author : Michael J. Fromberger * URL : https://bitbucket.org/creachadair/shell/ * License : BSD-3-Clause Programming Lang

Bug#1060853: ITP: golang-github-sigstore-protobuf-specs -- Sigstore Protocol Buffer code (library)

Package: wnpp Severity: wishlist Owner: Simon Josefsson * Package name: golang-github-sigstore-protobuf-specs Version : 0.2.1-1 Upstream Author : sigstore * URL : https://github.com/sigstore/protobuf-specs * License : Apache-2.0 Programming Lang: Go

Sigstore rekor current status and request for help

Hi I want to get Sigstore's rekor into Debian so that can be included. I'm new to Go and how Debian approaches Go code, but have made some progress. I'm now stuck. This e-mail summarize the open issues. Can some

Re: Sigstore rekor current status and request for help

Shengjing Zhu writes: > On Tue, Jan 16, 2024 at 4:16 AM Simon Josefsson > wrote: >> >> Hi >> >> I want to get Sigstore's rekor <https://github.com/sigstore/rekor> into >> Debian so that <https://gitlab.com/debdistutils/apt-sigstore> can be

Updating golang-github-sigstore-sigstore to 1.8.0

Hi Rekor needs kms/hashivault kms/gcp kms/azure from sigstore, and I noticed sigstore was lagging behind upstream versions. I want to learn how to prepare an updated version of a Go package with proper reverse dependency rebuilds, so took this as a learning example. I merged 1.8.0 and prepared t

Bug#1061050: ITP: golang-github-common-nighthawk-go-figure -- Prints ASCII art from text

Package: wnpp Severity: wishlist Owner: Simon Josefsson * Package name: golang-github-common-nighthawk-go-figure Version : 0.0~git20210622.734e95f-1 Upstream Author : Daniel Deutsch * URL : https://github.com/common-nighthawk/go-figure * License : Expat

Re: Sigstore rekor current status and request for help

Jérémy Lal writes: > Hi, > > some remarks below: Thank you! I'm following up one two items that are resolved below. I'm still working to resolve the other dependencies, and I will followup on those separately when I have something to add to discussion. >> GITHUB.COM/SASSOFTWARE/RELIC >> >> Pa

Re: RFS: golang-google-grpc + golang-github-google-s2a-go

Shengjing Zhu writes: > For safety, yes please upload to experimental, and people can try > rebuilding their packages and test them. I have uploaded grpc 1.59.0 to experimental, to allow build testing of reverse dependencies. Rekor needs grpc via in-toto via spiffe, and looks like it may need n

Re: RFS: golang-google-grpc + golang-github-google-s2a-go

Simon Josefsson writes: > It seems clear that grpc cannot go to unstable right now due to reverse > dependency build failures: > > https://salsa.debian.org/jas/golang-google-grpc/-/pipelines/627711 I took a look at some of these failures. For example, golang-github-mendersof

Add Salsa pipeline to default Go pipeline?

Hi. I read about the Go teams CI/CD pipeline here: https://go-team.pages.debian.net/ci.html There is no mention of the "regular" Salsa pipeline: https://salsa.debian.org/salsa-ci-team/pipeline/ I tried searching for earlier discussions but didn't find any. The salsa pipeline includes many gen

Bug#1061153: ITP: sigsum-go -- tools for public and transparent logging of signed checksums

Package: wnpp Severity: wishlist Owner: Simon Josefsson * Package name: sigsum-go Version : 1.7.1-1 Upstream Author : The Sigsum Project Authors * URL : https://git.glasklar.is/sigsum/core/sigsum-go * License : BSD-2-Clause Programming Lang: Go Description

Re: Add Salsa pipeline to default Go pipeline?

Shengjing Zhu writes: > On Fri, Jan 19, 2024 at 11:18 PM Simon Josefsson wrote: >> >> Hi. I read about the Go teams CI/CD pipeline here: >> >> https://go-team.pages.debian.net/ci.html >> >> There is no mention of the "regular" Salsa pipel

Re: RFS: golang-google-grpc + golang-github-google-s2a-go

Further progress on grpc. I've rebuilt 1.60.1 with some EXCLUDE fixes thanks to help on irc, we've gone from 22 reverse build failures down to 16 failures, here is the pipeline: https://salsa.debian.org/jas/golang-google-grpc/-/pipelines/629139 The failures now suggest problems on other packages

Re: RFS: golang-google-grpc + golang-github-google-s2a-go

Maytham Alsudany writes: >> https://salsa.debian.org/jas/golang-google-grpc/-/pipelines/629139 >> >> The failures now suggest problems on other packages, list of initial 10 >> broken packages that I looked at: >> >> cadvisor: >> crowdsec: >> etcd: >> gitlab-ci-multi-runner: >> golang-github-go-

Re: RFS: golang-google-grpc + golang-github-google-s2a-go

Tom Parkin writes: > Hi Simon, > > On Mon, Jan 22, 2024 at 20:15:11 +0100, Simon Josefsson wrote: >> golang-github-katalix-go-l2tp >> https://salsa.debian.org/jas/golang-google-grpc/-/jobs/5191076 >> === RUN TestBasicSendReceive/5:_send/recv_[::1]:9000_[::1]:9

Re: Add Salsa pipeline to default Go pipeline?

Shengjing Zhu writes: >> >> How do you all QA test Go packages before uploading them without a Salsa >> >> pipeline? Manually on local developer machine? >> >> >> > >> > Yes, I need to sign the changes locally, so I build packages locally. >> >> Right, I build locally too before signing uploads.

Re: Add Salsa pipeline to default Go pipeline?

Shengjing Zhu writes: > On Wed, Jan 24, 2024 at 4:07 PM Simon Josefsson wrote: >> >> Shengjing Zhu writes: >> >> >> >> How do you all QA test Go packages before uploading them without a >> >> >> Salsa >> >> >> pipe

Re: golang-opentelemetry-contrib-dev: Upload to unstable

Hi. I was looking at golang-opentelemetry-contrib-dev because it is needed for etcd 3.5.x. It seems to build fine, but upstream is doing several concurrent releases, and we don't have the latest version in experimental. I wanted to upgrade it to the latest upstream version before doing an upload

Re: golang-opentelemetry-contrib-dev: Upload to unstable

Maytham Alsudany writes: > Hi Simon, > > On Wed, 2024-01-24 at 10:03 +0100, Simon Josefsson wrote: >> Hi. >> >> I was looking at golang-opentelemetry-contrib-dev because it is needed >> for etcd 3.5.x. It seems to build fine, but upstream is doing several >

Request removal of cadvisor? (was: Re: golang-opentelemetry-contrib-dev: Upload to unstable)

(Dropping cc to #1059573...) Maytham Alsudany writes: >> https://salsa.debian.org/jas/golang-opentelemetry-otel/-/pipelines/629791 >> >> I think this really indicate FTBFS bugs in cadvisor, crowdsec, and >> gitlab-ci-multi-runner? Rebuilding packages in sid should work. > > I'll open bugs and

Re: Request removal of cadvisor?

Shengjing Zhu writes: > On Wed, Jan 24, 2024 at 7:30 PM Simon Josefsson wrote: >> Shengjing Zhu, what do you think, can we request removal of this package >> from unstable? >> > > Why would you bother with packages that are only in unstable? > I'm not sure

Re: Add Salsa pipeline to default Go pipeline?

Nilesh Patra writes: > On 24 January 2024 2:25:53 pm IST, Simon Josefsson > wrote: >>Definitely -- however I don't see how we can ever have confidence in >>uploads of core Go packages without building all reverse dependencies. >> >>If that building is on deve

Re: Request removal of cadvisor?

Shengjing Zhu writes: > On Wed, Jan 24, 2024 at 10:56 PM Simon Josefsson wrote: >> >> Shengjing Zhu writes: >> >> > On Wed, Jan 24, 2024 at 7:30 PM Simon Josefsson >> > wrote: >> >> Shengjing Zhu, what do you think, can we

Bug#1061446: ITP: cosign -- Code signing and transparency for containers and binaries

Package: wnpp Severity: wishlist Owner: Simon Josefsson * Package name: cosign Version : 2.2.2-1 Upstream Author : The Sigstore Authors * URL : https://github.com/sigstore/cosign * License : Apache-2.0 Programming Lang: Go Description : Code signing

Update of golang-github-asaskevich-govalidator

Hi Rekor needs a newer version of golang-github-asaskevich-govalidator: github.com/sigstore/rekor/cmd/rekor-cli/app # github.com/sigstore/rekor/cmd/rekor-cli/app src/github.com/sigstore/rekor/cmd/rekor-cli/app/validate.go:45:16: undefined: validator.IsSHA512 src/github.com/sigstore/rekor/cmd/rek

Re: Backporting podman

Krumelmonster writes: > Dear go package maintainers, > > I would like to see podman>=4.4 make it into bookworm backports so the > excellent quadlet feature would become available in debian stable. I'm > inexperienced in debian packaging and gave up on my first attempt in > creating this backport

Re: RFS: golang-google-grpc + golang-github-google-s2a-go

Simon Josefsson writes: > Further progress on grpc. I've rebuilt 1.60.1 with some EXCLUDE fixes > thanks to help on irc, we've gone from 22 reverse build failures down to > 16 failures, here is the pipeline: > > https://salsa.debian.org/jas/golang-google-grpc/-/pipel

Re: RFS: golang-google-grpc + golang-github-google-s2a-go

Simon Josefsson writes: > Further progress on grpc. I've rebuilt 1.60.1 with some EXCLUDE fixes > thanks to help on irc, we've gone from 22 reverse build failures down to > 16 failures, here is the pipeline: > > https://salsa.debian.org/jas/golang-google-grpc/-/pipelin

Re: RFS: golang-google-grpc + golang-github-google-s2a-go

Jérémy Lal writes: > golang-github-grpc-ecosystem-go-grpc-prometheus should be deprecated in > debian as well, and replaced by > https://github.com/grpc-ecosystem/go-grpc-middleware > > First move is to report a RC-bug on that package, so it gets removed from > testing if no one steps in. > Secon

Re: RFS: golang-google-grpc + golang-github-google-s2a-go

Jérémy Lal writes: > Le lun. 12 févr. 2024 à 22:11, Simon Josefsson a > écrit : > >> Jérémy Lal writes: >> >> > golang-github-grpc-ecosystem-go-grpc-prometheus should be deprecated in >> > debian as well, and replaced by >> > https://github.com/g

Re: SemVer.org compatible updates and rebuilding reverse dependencies

Praveen Arimbrathodiyil writes: > On 14/2/24 8:03 AM, Mathias Gibbens wrote: >> On Mon, 2024-02-12 at 19:08 +0530, Praveen Arimbrathodiyil wrote: >>> Do we assume SemVer.org compliance for modules with >= 1.0 versions? >>> >>> ie, should we assume things will break for every minor updates as >>>

golang-github-katalix-go-l2tp

Tom Parkin writes: > On Tue, Jan 23, 2024 at 18:05:23 +0100, Simon Josefsson wrote: >> Tom Parkin writes: >> >> > Hi Simon, >> > >> > On Mon, Jan 22, 2024 at 20:15:11 +0100, Simon Josefsson wrote: >> >> golang-github-katalix-go-l2tp

Re: Update of golang-github-asaskevich-govalidator

FYI, I have uploaded golang-github-asaskevich-govalidator to unstable, version >=11 is needed by rekor. Rekor target targets experimental but we might as well try to get each reverse dependency into unstable when that is possible. /Simon signature.asc Description: PGP signature

Re: Package dependencies on protobuf libraries

Mathias Gibbens writes: >>   * golang-etcd-server-dev >>   * golang-github-go-kit-kit-dev >>   * golang-github-grpc-ecosystem-go-grpc-middleware-dev >>   * golang-github-grpc-ecosystem-grpc-gateway-dev >>   * golang-github-openzipkin-zipkin-go-dev > > Not having heard any objections, I'll plan

Re: RFS: golang-google-grpc + golang-github-google-s2a-go

up as some frustration trying to fix the FTBFS packages... I'll try to take a look at some more of the FTBFS packages below, but my lack of Go knowledge is a limiting factor... /Simon Simon Josefsson writes: > Simon Josefsson writes: > >> Further progress on grpc. I'

Re: Package dependencies on protobuf libraries

Simon Josefsson writes: > Mathias Gibbens writes: > >>>   * golang-etcd-server-dev >>>   * golang-github-go-kit-kit-dev >>>   * golang-github-grpc-ecosystem-go-grpc-middleware-dev >>>   * golang-github-grpc-ecosystem-grpc-gateway-dev >>>   *

Re: grpc transition

Mathias Gibbens writes: > To me it seems like the extra work to try to keep a small set of > packages building with a "golang-google-grpc-legacy" package wouldn't > be worthwhile in the long term. I'd prefer effort be focused on getting > the current grpc working in experimental, and uploading

Re: grpc transition

Shengjing Zhu writes: > My last attempt for the grpc-go transition is stuck at the protobuf things. > One thing that might help is gprc-go is finally going to use the new > protobuf library, https://github.com/grpc/grpc-go/pull/6961 > So we could decouple the grpc-go transition from the protobuf

Re: Upload request for golang-github-katalix-go-l2tp 0.1.7-1

Tom Parkin writes: > Hi folks, > > Would someone mind please reviewing and uploading > golang-github-katalix-go-l2tp 0.1.7-1? > > https://salsa.debian.org/go-team/packages/golang-github-katalix-go-l2tp Looks good, although there were no tag for the previous Debian upload so diffing changes was a

Re: RFS: golang-github-go-git-go-git [RC] & dependencies

Maytham Alsudany writes: > Hi Go team, > > I require a sponsor to review and upload the following packages for me. > > New packages: > - golang-github-pjbgf-sha1cd > - golang-github-skeema-knownhosts I reviewed these, and have uploaded them. Builds fine: https://salsa.debian.org/jas/golang-git

Re: RFS: golang-github-go-git-go-git [RC] & dependencies

tor 2024-03-28 klockan 07:29 +0800 skrev Maytham Alsudany: > Hi Simon, > > On Wed, 2024-03-27 at 17:14 +0100, Simon Josefsson wrote: > > I wonder if the sha1cd test data is copyrighted and licensed as per > > upstream's claims, but I have no fact to speak against the

Re: RFS: golang-github-go-git-go-git [RC] & dependencies

Maytham Alsudany writes: > Hi Simon, > > On Wed, 2024-03-27 at 16:30 +0100, Simon Josefsson wrote: >> Hi -- happy to sponsor this -- are they in git on salsa for me to build >> and sign and upload, or what shape are they in? > > They all ready to sign and upload. I

Re: RFS: golang-github-go-git-go-git [RC] & dependencies

Maytham Alsudany writes: > https://salsa.debian.org/go-team/packages/golang-github-go-git-go-git-fixtures I looked at this update, and one of the proposed changes is to include all of the pre-generated stuff from here: https://github.com/go-git/go-git-fixtures/tree/master/data directly into th

Re: RFS: golang-github-go-git-go-git [RC] & dependencies

Maytham Alsudany writes: > Hi Simon, > > On Sat, 2024-03-30 at 09:48 +0100, Simon Josefsson wrote: >> Maytham Alsudany writes: >> >> > https://salsa.debian.org/go-team/packages/golang-github-go-git-go-git-fixtures >> >> I looked at this update, and

Re: RFS: golang-github-go-git-go-git [RC] & dependencies

Nilesh Patra writes: >> > https://github.com/go-git/go-git-fixtures/tree/master/data >> > >> > directly into the installed Debian package. Given the recent xz fiasco, >> > I have doubts that this is a good idea -- there is a bunch of >> > pre-generated compressed git repositories in that direct

Re: RFS: golang-github-cloudflare-apt-transport-cloudflared/0.0~git20210922.8fd3a7c+ds-1

Jianfeng Liu writes: > Hi Go team, > > I'm looking for a sponsor to upload the > golang-github-cloudflare-apt-transport-cloudflared package for me. > This package is a build-dep of > golang-github-akihirosuda-apt-transport-oci, which will add oci deb > repo support to apt. > > > https://salsa.deb

Re: RFS: filippo.io-edwards25519

Martin Dosch writes: > Dear all, > > I prepared the packaging for a new release of filippo.io-edwards25519: > https://salsa.debian.org/go-team/packages/filippo.io-edwards25519 > > I successfully ran ratt and would appreciate if someone would upload > it to unstable. I reviewed the debian/sid ch

Re: RFS: filippo.io-edwards25519

Martin Dosch writes: > Dear Simon, > > On 10.05.2024 19:20, Simon Josefsson wrote: >>I reviewed the debian/sid changes and they look fine. Could you push >>the upstream & pristine-tar branches and the upstream/1.1.0 tag? I >>wasn't able to build it. &

Re: RFS: filippo.io-edwards25519

Nilesh Patra writes: > On Sat, May 11, 2024 at 12:47:14PM +, Martin Dosch wrote: >> Dear Simon, >> >> On 10.05.2024 19:20, Simon Josefsson wrote: >> > I reviewed the debian/sid changes and they look fine. Could you push >> > the upstream & prist

Re: RFS: filippo.io-edwards25519

Martin Dosch writes: > Dear Simon, > >>Running 'lrc' catches a licensing problem: >> >>BSD-3-clause| BSD-1-Clause scalar.go >> >>It seems correct. Can you add the license block further down in >>scalar.go to debian/copyright? I'm thinking of this: > > Funny that this is in scalar.go whi

Re: RFS: filippo.io-edwards25519

Martin Dosch writes: > Dear Simon, > > sorry for the late reply. > > On 11.05.2024 18:48, Simon Josefsson wrote: >>So I believe debian/copyright should mention that file, since that's >>where the copyright claim is made. > > I understood that the claim is in

Re: Bug#1060839: ITP: golang-github-adamkorcz-go-fuzz-headers-1 -- helper functions for Go fuzzing (library)

hich I noticed at least some > container packages (such as later versions of docker) use in the testsuite. > > Can we make the packaging for the package cover both import paths so that > we don't have to duplicate sources in the archive? > > On Mon, Jan 15, 2024 at 7:51 AM S

Re: Bug#1060839: ITP: golang-github-adamkorcz-go-fuzz-headers-1 -- helper functions for Go fuzzing (library)

Reinhard Tartler writes: > On Tue, Jul 2, 2024 at 12:21 PM Simon Josefsson wrote: > >> Hi >> >> Thanks for noticing this -- the reason I hesitates was exactly because I >> felt uncertain which namespace and which implementation to promote here. >> There is on

Re: Coordingating/planning various golang transitions

Reinhard Tartler writes: > My takeaway is that we need to update a large number of packages at the > same time, starting with src:golang-google-genproto > and src:golang-google-grpc. This will unblock a number of packages that are > currently in experimental, and will allow them to enter unstable

Re: Coordingating/planning various golang transitions

Mathias Gibbens writes: > I won't keep spamming the mailing list with updates, unless needed > for some reason. Interested parties can follow progress on the > etherpad: https://pad.dc24.debconf.org/p/go-team-sprint. Thanks for all the work so far! I tried to update golang-github-google-s2a-g

Re: Coordingating/planning various golang transitions

ream 3 days ago). https://tracker.debian.org/pkg/golang-github-google-s2a-go /Simon > -rt > > On Fri, Jul 26, 2024, 09:17 Simon Josefsson wrote: > >> Mathias Gibbens writes: >> >> > I won't keep spamming the mailing list with updates, unless needed >&

declaring requirement on golang >= 1.22?

Hi Upstream 'sigsum-go' now depends on golang-1.22, how would I express this in debian/control? Build-Depends: debhelper-compat (= 13), dh-golang, - golang-any, + golang-any (>= 2:1.22~) Is that recommended? I couldn't find any other golang packages with similar golang version dependency. Is

Bug#1085854: ITP: sigstore-go -- Go library for Sigstore signing and verification

Package: wnpp Severity: wishlist Owner: Simon Josefsson * Package name: sigstore-go Version : 0.6.2-1 Upstream Author : sigstore * URL : https://github.com/sigstore/sigstore-go * License : Apache-2.0 Programming Lang: Go Description : Go library for

Bug#1085855: ITP: timestamp-authority -- RFC3161 Timestamp Authority

Package: wnpp Severity: wishlist Owner: Simon Josefsson * Package name: timestamp-authority Version : 1.2.3-1 Upstream Author : sigstore * URL : https://github.com/sigstore/timestamp-authority * License : Apache-2.0 Programming Lang: Go Description

Bug#1085857: ITP: golang-github-digitorus-pkcs7 -- Implements a subset of PKCS#7/Cryptographic Message Syntax (rfc2315, rfc5652)

Package: wnpp Severity: wishlist Owner: Simon Josefsson * Package name: golang-github-digitorus-pkcs7 Version : 0.0~git20230818.3a137a8-1 Upstream Author : Digitorus * URL : https://github.com/digitorus/pkcs7 * License : Expat Programming Lang: Go

Bug#1085856: ITP: golang-github-in-toto-attestation -- in-toto Attestation Framework

Package: wnpp Severity: wishlist Owner: Simon Josefsson * Package name: golang-github-in-toto-attestation Version : 1.1.0-1 Upstream Author : in-toto * URL : https://github.com/in-toto/attestation * License : Apache-2.0 Programming Lang: Go Description

Bug#1085858: ITP: golang-github-digitorus-timestamp -- Time-Stamp Protocol (TSP) implementation for Go as specified in RFC3161

Package: wnpp Severity: wishlist Owner: Simon Josefsson * Package name: golang-github-digitorus-timestamp Version : 0.0~git20231217.220c5c2-1 Upstream Author : Digitorus * URL : https://github.com/digitorus/timestamp * License : BSD-2-clause Programming Lang

Bug#1085874: ITP: golang-github-theupdateframework-go-tuf-v2 -- The Update Framework (TUF) v2 Go library

Package: wnpp Severity: wishlist Owner: Simon Josefsson * Package name: golang-github-theupdateframework-go-tuf-v2 Version : 2.0.2-1 Upstream Author : The Update Framework (TUF) * URL : https://github.com/theupdateframework/go-tuf * License : Apache-2.0

golang-github-theupdateframework-go-tuf migration

;t be a problem. /Simon Simon Josefsson writes: > Package: wnpp > Severity: wishlist > Owner: Simon Josefsson > > * Package name: golang-github-theupdateframework-go-tuf-v2 > Version : 2.0.2-1 > Upstream Author : The Update Framework (TUF) > * URL

Re: declaring requirement on golang >= 1.22?

Shengjing Zhu writes: > On Thu, Oct 10, 2024 at 3:21 PM Simon Josefsson wrote: >> >> Hi >> >> Upstream 'sigsum-go' now depends on golang-1.22, how would I express >> this in debian/control? >> >> Build-Depends: >> debhelper-compat

sigstore-go: pattern repository: no matching files found

Hi. I'm working on sigstore-go and it looks like the dependencies are now lined up, but I'm getting a build failure -- any ideas how to fix this? Is it some search path that needs to be fixed? The lines referred in the error message are 'go:embed' statements like this: //go:embed repository var

Re: Add a Kubernetes distribution, the K3s package, to Debian

"Prusty, Badrikesh" writes: > We would like to have the K3s package (a lightweight Kubernetes > distribution) added to Debian. The formal process is to file RFP bugs for each relevant software package, and then turn them into a ITP bug with associated packaging, preferrably done on Salsa.debian.

Re: sigstore-go: pattern repository: no matching files found

Nilesh Patra writes: > On 25/10/24 12:43, Simon Josefsson wrote: >> Hi. I'm working on sigstore-go and it looks like the dependencies are >> now lined up, but I'm getting a build failure -- any ideas how to fix >> this? Is it some search path that needs to be f

sigstore-go segmentation fault during self-tests

I'm near a sigstore-go build now but got the self-test failure below. Does any recognize these error message? I'm inclined to disable this self test, but the errors looks a bit more serious than usual so wanted to ask for more thoughts... /Simon === RUN TestSignedEntityVerifierInitialization

Re: golang-github-theupdateframework-go-tuf migration

Thanks for feedback! I'll try to cancel the -v2 NEW upload, and will do a v2 upload to experimental to allow others to help test. I did upgrade the old package and did a reverse rebuild, see pipeline here: https://salsa.debian.org/jas/golang-github-theupdateframework-go-tuf/-/pipelines/751423 T

Bug#1086139: ITP: golang-github-c2sp-cctv -- Community Cryptography Test Vectors

Package: wnpp Severity: wishlist Owner: Simon Josefsson * Package name: golang-github-c2sp-cctv Version : 0.0~git20240306.3ec4d71-1 Upstream Author : Community Cryptography Specification Project * URL : https://github.com/C2SP/CCTV * License : https

Re: Bug#1087183: RFS: golang-github-protonmail-gopenpgp-v3/3.0.0-1 [ITP] -- high-level OpenPGP library built on top of golang crypto library

ts. Once > trixie is out I think I'll do the switch to v3. I am not involved with > the other two packages. > So I'd like to keep v2 for go-sendxmpp and have v3 for now. The v2 > version is not deprecated by the release of v3 and is still maintained > upstream. > > Be

Bug#1087369: ITP: golang-github-gen2brain-beeep -- Go cross-platform library for sending desktop notifications, alerts and beeps

Package: wnpp Severity: wishlist Owner: Simon Josefsson * Package name: golang-github-gen2brain-beeep Version : 0.0~git20240516.9c00667-1 Upstream Author : Milan Nikolic * URL : https://github.com/gen2brain/beeep * License : BSD-2-clause Programming Lang: Go

Re: golang-github-theupdateframework-go-tuf migration

Status update: - I've canceled the TUF *-v2 NEW package, prefering your advice to upgrade the existing package from v0. - TUF 2.0.2 is uploaded into experimental: https://tracker.debian.org/pkg/golang-github-theupdateframework-go-tuf - Upstream for rekor + sigstore-sigstore replied quickly t

Re: golang-github-theupdateframework-go-tuf migration

Status update: - I've canceled the TUF *-v2 NEW package, prefering your advice to upgrade the existing package from v0. - Upstream for rekor + sigstore-sigstore replied quickly that TUF v0 is deprecated for those projects, so we can patch it out. - I've uploaded sigstore-sigstore 1.8.10-2 to

amazon-ecr-credential-helper

Hi! I'm packaging Sigstore's "cosign" tool for Debian and it needs the amazon-ecr-credential-helper Go library. I noticed you had packaged this for Debian, but it doesn't provide the library golang-github-awslabs-amazon-ecr-credential-helper-dev package. https://tracker.debian.org/pkg/amazon-ecr

Re: amazon-ecr-credential-helper

Noah Meyerhans writes: > On Fri, Oct 25, 2024 at 04:46:21PM +0200, Simon Josefsson wrote: >> https://tracker.debian.org/pkg/amazon-ecr-credential-helper >> >> What do you think about moving this project into team-maintained under >> the Debian Go te

  1   2   3   >