This also affects 26.04 to 26.10 (ubuntu-release-upgrader 26.10.11,
python3-apt 3.1.0ubuntu1.1). Both remaining .list sources ended up as
.list.disabled (main.log, timestamps trimmed):

    DEBUG Could not migrate deb [arch=amd64,arm64 
signed-by=/usr/share/keyrings/claude-desktop-archive-keyring.asc] 
https://downloads.claude.ai/claude-desktop/apt/stable stable main from 
/etc/apt/sources.list.d/claude-desktop.list, disabling instead.
    DEBUG Could not migrate deb [signed-by=/usr/share/keyrings/dbeaver.gpg.key] 
https://dbeaver.io/debs/dbeaver-ce / from /etc/apt/sources.list.d/dbeaver.list, 
disabling instead.

26.10's python3-apt 3.1.0ubuntu2 still rejects signed-by, so the next
upgrade will disable any such source again:

    >>> from aptsources.sourceslist import SourceEntry
    >>> SourceEntry("deb [signed-by=/k.gpg] https://example.com/apt stable 
main").invalid
    True
    >>> SourceEntry("deb [arch=amd64] https://example.com/apt stable 
main").invalid
    False

For Claude Desktop, the package's postinst writes this one-line format
itself and recreates the file when it is missing, so "sudo dpkg-
reconfigure claude-desktop" restores it after the upgrade.

If the upgrade is aborted after this step, the .list files are lost
instead of disabled. That is bug 2171068.

_Drafted by Claude (Anthropic AI assistant)._

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2167655

Title:
  Third-party repos using [signed-by=] are left as .list.disabled after
  upgrade; packages silently stop receiving security updates

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/ubuntu-release-upgrader/+bug/2167655/+subscriptions


-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to