Re: Upload request: meson-python

2024-10-05 Thread James Addison
On Fri, 4 Oct 2024 at 12:58, Simon McVittie wrote: > > On Thu, 03 Oct 2024 at 15:54:16 +, James Addison wrote: > > I'd like to request an upload of the src:meson-python package, in > > particular to close bug #1076806, a reproducibility bug related to > > documentation copyright notices > > Do

Re: Alternative signature mechanisms for upstream source verification

2024-10-05 Thread Simon Josefsson
Stefano Rivera writes: > Should we expand this to include some of these new mechanisms? > Things brought up in the debian-python thread include: > 1. sigstore https://docs.sigstore.dev/ > 2. ssh signatures > 3. signify https://man.openbsd.org/signify.1 +1 I believe all signatures we trust shoul

Dependency on pkg-resources

2024-10-05 Thread Antonio Valentino
Dear all, recently bugs have been filled for several packages with the following subject: "(build-)depends on deprecated module python3-pkg-resources" I started working on the ones for which I'm maintainer and I realized that for some of them (e.g. pyresample and cyarray) there is no direct

Re: Alternative signature mechanisms for upstream source verification

2024-10-05 Thread Martin
On 2024-10-05 03:32, Guillem Jover wrote: > For an example of the activity that is going on in the OpenPGP ecosystem, > here's a list of some of the non-GnuPG implementations already present > in Debian, by programming language: Thanks for the list! I was aware of some of them, but not all. > *