Re: versioned dependency on base-files

Jonas Smedegaard <[email protected]>
Newsgroups gmane.linux.debian.devel.general
Message-ID <[email protected]>
Quoting Jonathan Carter (2026-05-29 20:21:48)
> On 2026/05/29 20:12, Antonio Terceiro wrote:
> >> I guess that when taking advantage of that by shrinking
> >> debian/copyright files to only reference some of those texts,
> >> that we should then declare a versioned dependency on
> >> base-files >= 14.1, right?
> > 
> > While we can and probably should remove license text in favor of the
> > licenses included in base-files, I would say that introducing such
> > versioned dependency (or tracking it the future to eventually remove) is
> > not useful use of developer time. There is no functional dependency
> > between the packages, it's only "look over there for the full text",
> > inside free-form text. No upgrade will ever require that dependency to
> > work properly.
> > 
> > As long as the upload that makes this reference comes after base-files
> > actually contains the license, I would advocate us to *not* recommend
> > such versioned dependency, or even to advise against it.
> 
> I agree with everything said in this thread so far. It strictly speaking 
> seems like a "right" way to do it, but on the other hand it also seems 
> like an unnecessary constraint, and another thing to keep in mind when 
> backporting.
> 
> As an aside, would it be possible to add these license texts to stable 
> (base files version 13) as well? Then at least anyone with an up to date 
> stable or newer will have those files.

My thinking is that *not* declaring a versioned dependency is perfectly
fine *except* if the package is backported, where it may cause a
license violation for those licenses that require the verbatim text to
be included.

I am fine not caring about backporters accidentally creating such
policy-violations - less work for me as a maintainer :-D

And yes, updating base-files in stable reduces that risk of legal
issues, so would be helpful, I think.

 - Jonas

-- 
 * Jonas Smedegaard - idealist & Internet-arkitekt
 * Tlf.: +45 40843136  Website: http://dr.jones.dk/
 * Sponsorship: https://ko-fi.com/drjones

 [x] quote me freely  [ ] ask before reusing  [ ] keep private
signature.asc (application/pgp-signature, 833 B)
-----BEGIN PGP SIGNATURE-----
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=01Wp
-----END PGP SIGNATURE-----
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.