Re: Low-hanging fruits reminder for 2025-07-21, 17:00 UTC (tomorrow)

gregor herrmann <[email protected]> Mon, 21 Jul 2025 23:31:46 +0200
Newsgroups gmane.linux.debian.devel.perl
Message-ID <[email protected]>
On Mon, 21 Jul 2025 15:57:51 +0100, Sean Whitton wrote:

>On Mon 21 Jul 2025 at 12:00am +01, Dominic Hargreaves wrote:
>>  * dgit experience exchange / tutorial
>Maybe this should be tag2upload experiences, now? :)

I'm a bit concerned about the missing pristine-tar integration. From 
my understanding (which might be wrong) the following could happen:

- Person A imports a new upstream release (as a tarball from the 
   CPAN) and uploads the package with tag2upload.
- tag2upload in this case creates an *.orig.tar.gz not from the 
   pristine-tar branch but with git-deborig from one or another 
   upstream tag.
- Person B wants to upload a -2 revison and doesn't use tag2upload. 
   In this case their build system will generate an *.orig.tar.gz from 
   the pristine-tar branch and include its checksum in *.dsc file.
- And boom!, dak will reject the upload because different checksums.

Just my understanding right now, and I might be wrong, and I hope I 
am :) But currently I'm a bit unsure about using tag2upload 1) in a 
team which 2) works from upstream tarballs.


Cheers,
gregor

-- 
  .''`.  https://info.comodo.priv.at -- Debian Developer https://www.debian.org
  : :' : OpenPGP fingerprint D1E1 316E 93A7 60A8 104D  85FA BB3A 6801 8649 AA06
  `. `'  Member VIBE!AT & SPI Inc. -- Supporter Free Software Foundation Europe
    `-
signature.asc (application/pgp-signature, 963 B)
-----BEGIN PGP SIGNATURE-----
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=rrpL
-----END PGP SIGNATURE-----