Re: Low-hanging fruits reminder for 2025-07-21, 17:00 UTC (tomorrow)

Sean Whitton <[email protected]> Tue, 22 Jul 2025 11:20:57 +0100
Newsgroups gmane.linux.debian.devel.perl
Message-ID <[email protected]>
Hello,

On Mon 21 Jul 2025 at 11:31pm +02, gregor herrmann wrote:

> On Mon, 21 Jul 2025 15:57:51 +0100, Sean Whitton wrote:
>
>>On Mon 21 Jul 2025 at 12:00am +01, Dominic Hargreaves wrote:
>>>  * dgit experience exchange / tutorial
>>Maybe this should be tag2upload experiences, now? :)
>
> I'm a bit concerned about the missing pristine-tar integration. From my
> understanding (which might be wrong) the following could happen:
>
> - Person A imports a new upstream release (as a tarball from the    CPAN) and
>  uploads the package with tag2upload.
> - tag2upload in this case creates an *.orig.tar.gz not from the
>   pristine-tar branch but with git-deborig from one or another    upstream
>  tag.
> - Person B wants to upload a -2 revison and doesn't use tag2upload.    In this
>   case their build system will generate an *.orig.tar.gz from    the
>  pristine-tar branch and include its checksum in *.dsc file.
> - And boom!, dak will reject the upload because different checksums.

Yes, I think you're right, that could be a problem indeed.

-- 
Sean Whitton
signature.asc (application/pgp-signature, 869 B)
-----BEGIN PGP SIGNATURE-----
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=nMG0
-----END PGP SIGNATURE-----