Re: Low-hanging fruits reminder for 2025-07-21, 17:00 UTC (tomorrow)
gregor herrmann <[email protected]> Mon, 21 Jul 2025 23:31:46 +0200
| Newsgroups | gmane.linux.debian.devel.perl |
|---|---|
| Message-ID | <[email protected]> |
On Mon, 21 Jul 2025 15:57:51 +0100, Sean Whitton wrote:
>On Mon 21 Jul 2025 at 12:00am +01, Dominic Hargreaves wrote:
>> * dgit experience exchange / tutorial
>Maybe this should be tag2upload experiences, now? :)
I'm a bit concerned about the missing pristine-tar integration. From
my understanding (which might be wrong) the following could happen:
- Person A imports a new upstream release (as a tarball from the
CPAN) and uploads the package with tag2upload.
- tag2upload in this case creates an *.orig.tar.gz not from the
pristine-tar branch but with git-deborig from one or another
upstream tag.
- Person B wants to upload a -2 revison and doesn't use tag2upload.
In this case their build system will generate an *.orig.tar.gz from
the pristine-tar branch and include its checksum in *.dsc file.
- And boom!, dak will reject the upload because different checksums.
Just my understanding right now, and I might be wrong, and I hope I
am :) But currently I'm a bit unsure about using tag2upload 1) in a
team which 2) works from upstream tarballs.
Cheers,
gregor
--
.''`. https://info.comodo.priv.at -- Debian Developer https://www.debian.org
: :' : OpenPGP fingerprint D1E1 316E 93A7 60A8 104D 85FA BB3A 6801 8649 AA06
`. `' Member VIBE!AT & SPI Inc. -- Supporter Free Software Foundation Europe
`-
signature.asc
(application/pgp-signature, 963 B)
-----BEGIN PGP SIGNATURE----- iQKTBAEBCgB9FiEE0eExbpOnYKgQTYX6uzpoAYZJqgYFAmh+scJfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEQx RTEzMTZFOTNBNzYwQTgxMDREODVGQUJCM0E2ODAxODY0OUFBMDYACgkQuzpoAYZJ qgZuARAAih8A1pQVLgkzx75N1gmLESEWmxZyzuISi/A0CJguuI6EchrEKD6KAVS7 WrPFUIZXhCRJd3CFT8Yp5cy4qjUKtIyHk5DQjlOkXbYVLx0WwR6Hi6J082NMvKC6 OaMY1PNO99LXsHFQbqgTMBkSyPQ1AuvacHAqpx2bD8JoglRCtwVVnBGuuuitpn4e n3iHpwzlYE1iezkMBHzs3AwaoDQl+ThTY2hDkQQDVtznd+j+LqU8bL27sSJLgvSl W+3tPSAxNJyglSawtdSf9e//Lrsp8PEtXAL49xvinUyNeNPZ2RR1MKXu1mrEXc4m YJheovPRalKN/GoDdHfoqLPl2kHgFjP/VXsyeJMq1s9jgp9qJPVyS0Rz95ka5ofr mRge0JH4V/MPJonHRYkcUK15CuPcBS2OHLm+/dOUUtS5dBLxo6fKDUphLOVTDWjI CrQTguq4eEi1kX25XY7x2S/MLlhCbaklKOVTD+9Zvtwlc5bvLNEhgMM2olgr/mOe UmhS8dz3FR1gv3g0bnQtHnXjB+EIbnO7YjkviWMPWAwQcaSTokaoqXZ+6rFKg/ZY WCePeeKTb8Aho97MHqR2XdQGA+r5bjWFs1cDEFO8DQQBxynjvg3nNx63Jzz1E7ly 4iOXf/98cRsDPGb1c+7KME98EUMjDF2A0mCFls0o5dhYxBGT9fU= =rrpL -----END PGP SIGNATURE-----