Bug#1106148: dpkg-dev: dpkg-source -x: please fix 'sqv' support

Package: dpkg-dev
Version: 1.22.19
Severity: normal
X-Debbugs-Cc: [email protected]

Now that APT pulls 'sqv' in, dpkg-source seemingly no longer knows how to check signatures:

--------------------------------------------------
$ dpkg-source -x ~/Projects/Salsa/upgrade-system_1.9.8.dsc 
error: the following required arguments were not provided:
  --keyring <FILE>

Usage: sqv --keyring <FILE> --cleartext --output <FILE> <FILE>

For more information, try '--help'.
dpkg-source: warning: cannot verify inline signature for /home/perkelix/Projects/Salsa/upgrade-system_1.9.8.dsc: no acceptable signature found
dpkg-source: info: extracting upgrade-system in upgrade-system-1.9.8
dpkg-source: info: unpacking upgrade-system_1.9.8.tar.xz
--------------------------------------------------

I cannot help but wonder why 'sqv' insists on getting told which keyring to use. gpgv was perfectly capable of using all available keyrings.

Anyhow, until this has been fixed, the primary signature verification method fails on Trixie.

Martin-Éric

-- System Information:
Debian Release: 13.0
  APT prefers unstable-debug
  APT policy: (500, 'unstable-debug'), (500, 'unstable')
Architecture: i386 (x86_64)

Kernel: Linux 6.12.22+bpo-amd64 (SMP w/8 CPU threads; PREEMPT)
Locale: LANG=fi_FI.UTF-8, LC_CTYPE=fi_FI.UTF-8 (charmap=UTF-8), LANGUAGE=fi:en
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages dpkg-dev depends on:
ii  binutils      2.44-3
ii  bzip2         1.0.8-6
ii  libdpkg-perl  1.22.19
ii  make          4.4.1-2
ii  patch         2.8-1
ii  perl          5.40.1-3
ii  tar           1.35+dfsg-3.1
ii  xz-utils      5.8.1-1

Versions of packages dpkg-dev recommends:
ii  build-essential          12.12
ii  fakeroot                 1.37.1.2-1
ii  gcc [c-compiler]         4:14.2.0-1
ii  gcc-14 [c-compiler]      14.2.0-19
ii  gnupg                    2.4.7-19
ii  gpgv                     2.4.7-19
ii  libalgorithm-merge-perl  0.08-5
ii  sq                       1.3.1-2+b1
ii  sqv                      1.3.0-2

Versions of packages dpkg-dev suggests:
pn  debian-keyring             <none>
pn  debian-tag2upload-keyring  <none>

-- no debconf information