Bug#1132969: marked as done (tracker.debian.org: AppStream hint seems never to be updated)

This is a multi-part message in MIME format...

------------=_1776481381-3740125-0
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain; charset="utf-8"

Your message dated Sat, 18 Apr 2026 13:00:18 +1000
with message-id <[email protected]>
and subject line Re: Bug#1132969: tracker.debian.org: AppStream hint seems =
never to be updated
has caused the Debian Bug report #1132969,
regarding tracker.debian.org: AppStream hint seems never to be updated
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)


--=20
1132969: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=3D1132969
Debian Bug Tracking System
Contact [email protected] with problems

------------=_1776481381-3740125-0
Content-Type: message/rfc822
Content-Disposition: inline
Content-Transfer-Encoding: 7bit

Received: (at submit) by bugs.debian.org; 8 Apr 2026 11:11:01 +0000
X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02
	(2024-03-25) on buxtehude.debian.org
X-Spam-Level: 
X-Spam-Status: No, score=-15.1 required=4.0 tests=BAYES_00,
	BODY_INCLUDES_PACKAGE,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,
	DKIM_VALID_EF,HAS_PACKAGE,RCVD_IN_DNSWL_MED,RCVD_IN_MSPIKE_H2,
	RCVD_IN_VALIDITY_CERTIFIED_BLOCKED,RCVD_IN_VALIDITY_RPBL_BLOCKED,
	RCVD_IN_VALIDITY_SAFE_BLOCKED,SPF_HELO_PASS,SPF_PASS autolearn=ham
	autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02
X-Spam-Bayes: score:0.0000 Tokens: new, 11; hammy, 116; neutral, 33; spammy,
	0. spammytokens: hammytokens:0.000-+--HTo:N*Debian,
	0.000-+--H*Ad:N*Bug, 0.000-+--H*Ad:N*Tracking, 0.000-+--HTo:N*System,
	0.000-+--HTo:N*Bug
Return-path: <[email protected]>
Received: from mout02.posteo.de ([185.67.36.66]:44513)
	by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_X25519__RSA_PSS_RSAE_SHA256__AES_256_GCM:256)
	(Exim 4.96)
	(envelope-from <[email protected]>)
	id 1wAQoG-005iMl-1g
	for [email protected];
	Wed, 08 Apr 2026 11:11:01 +0000
Received: from submission (posteo.de [185.67.36.169]) 
	by mout02.posteo.de (Postfix) with ESMTPS id 0A91E240101
	for <[email protected]>; Wed,  8 Apr 2026 13:10:54 +0200 (CEST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=posteo.jp; s=2017;
	t=1775646655; bh=c5F79XWz2ZdB3k5P21ZisDbDHS61i1DPLuFP/dOe+Bk=;
	h=Content-Type:MIME-Version:Content-Transfer-Encoding:From:To:
	 Subject:Message-ID:Date:From;
	b=oK1aWHs2Ue8iQwVL2khemt8vMSkcj6YOdS6HWRXtSQxugl8AIKJ7SY9QMqskHmLNO
	 z/IK12VOiBhRddMPgUrQsZtRRmJqtk8GkAmkB3E17ouQUti9X0JCfJRBCyl/VkiFu5
	 00AyFbUKVEST2NWCMIjapEQBGIhKGIT9oEPS+Ghzs8F8OqI4NlI1JWk6Z28xlHPfe6
	 bw4T3jnQe1DMBc0Q8jLgWwzLU/19lCR1Tk97t1BNcKVnN/OjwNkvyHnx1j2EMEuk2M
	 7t3U0obNrE3SqSweNMbU8mmLTSmLieO7Ul7/bU0zfBBjMmFJhgCqgHhOMVHcBbi9G0
	 HWZEUS7a62Yyg==
Received: from customer (localhost [127.0.0.1])
	by submission (posteo.de) with ESMTPSA id 4frL322Yl8z6twB;
	Wed,  8 Apr 2026 13:10:53 +0200 (CEST)
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
From: Christian Buhtz <[email protected]>
To: Debian Bug Tracking System <[email protected]>
Subject: tracker.debian.org: AppStream hint seems never to be updated
Message-ID: <177564664078.7182.6453113475212994709.reportbug@quark>
Date: Wed, 08 Apr 2026 11:10:54 +0000
Delivered-To: [email protected]

Package: tracker.debian.org
Severity: normal

Hello,

as an example please see <https://tracker.debian.org/pkg/backintime>.
There you find an AppStream hint (from 23th February) about two missing
screenshots

<https://appstream.debian.org/sid/main/issues/backintime-qt.html>

The error happend because the screenshot hoster (codeborg) was down.
This was nearly two months ago months ago.

The hoster is available again. The appstream hint component should run from
time to
time and see if the error persists. It shouldn't update only if the package
gets
updated (uploaded).

For "backintime" this is a false-positive error.

Thanks
Christian Buhtz
Upstream maintainer of backintime

------------=_1776481381-3740125-0
Content-Type: message/rfc822
Content-Disposition: inline
Content-Transfer-Encoding: 7bit

Received: (at 1132969-done) by bugs.debian.org; 18 Apr 2026 03:00:35 +0000
X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02
	(2024-03-25) on buxtehude.debian.org
X-Spam-Level: 
X-Spam-Status: No, score=-103.6 required=4.0 tests=BAYES_00,BODY_CLICK_HERE,
	DKIMWL_WL_HIGH,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,
	FOURLA,FROMDEVELOPER,HAS_BUG_NUMBER,SPF_HELO_NONE,SPF_NONE,
	UNPARSEABLE_RELAY,USER_IN_DKIM_WELCOMELIST autolearn=ham
	autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02
X-Spam-Bayes: score:0.0000 Tokens: new, 43; hammy, 150; neutral, 242; spammy,
	0. spammytokens:
	hammytokens:0.000-+--Hx-spam-relays-external:sk:stravin,
	0.000-+--H*RT:sk:stravin, 0.000-+--Hx-spam-relays-external:311,
	0.000-+--H*RT:311, 0.000-+--H*RT:108
Return-path: <[email protected]>
Received: from stravinsky.debian.org ([2001:41b8:202:deb::311:108]:40116)
	by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256)
	(Exim 4.96)
	(envelope-from <[email protected]>)
	id 1wDvv9-00FgqW-0U
	for [email protected];
	Sat, 18 Apr 2026 03:00:35 +0000
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=debian.org;
	s=smtpauto.stravinsky; h=X-Debian-User:Content-Transfer-Encoding:Content-Type
	:In-Reply-To:From:References:To:Subject:MIME-Version:Date:Message-ID:Reply-To
	:Cc:Content-ID:Content-Description;
	bh=gSCm18s4mbqSXCE+N7HszNzuXjovd1hmdE2hF0IJKr0=; b=qgkvGnSRx94l04yb+6Xw97nnDu
	rbZDl2dQ32v7cbPB37dlJ0APDLh9qOvdfzvs34TO1cfsGCtHK7gpaWT1usy45Ph9BRpf6720pEeiV
	t8UGLzRK3nUiDbMcr2a36J5YwASsICyp+aiWm4UzuLQh+TYn+tptXHeYpo56mw/1o7K0xNWX9gngp
	NrKUM93ndeaPmr1npi9fe0DBvDIeidyOZuuLNWHmz9jvA/MvyOE3bAfFjYD6I+/XDYDp8xQxJ84+1
	cR5sWkJXbNdTVc5BWir0gOyHPkB6CGxcR2zVO9Z4Eu/rAAEeDU/EDXIscDhuPaH/mAx90UO4xno/J
	YnNpQUAA==;
Received: from authenticated user
	by stravinsky.debian.org with esmtpsa (TLS1.3:ECDHE_X25519__RSA_PSS_RSAE_SHA256__AES_128_GCM:128)
	(Exim 4.96)
	(envelope-from <[email protected]>)
	id 1wDvuz-00FqPP-05;
	Sat, 18 Apr 2026 03:00:27 +0000
Message-ID: <[email protected]>
Date: Sat, 18 Apr 2026 13:00:18 +1000
MIME-Version: 1.0
User-Agent: Mozilla Thunderbird
Subject: Re: Bug#1132969: tracker.debian.org: AppStream hint seems never to be
 updated
To: Christian Buhtz <[email protected]>, [email protected]
References: <177564664078.7182.6453113475212994709.reportbug@quark>
From: Stuart Prescott <[email protected]>
Content-Language: en-GB
Autocrypt: [email protected]; keydata=
 xsFNBFB3ScwBEACzJ9ehyV3mYYBk+LKkJC4Bnz20a9PGs1hs5pYGWxx8dy59VVUkAnGyHVrX
 fs0o0E4WdXZDx8mHVKWvRdBN8izuDX/rB11ItPckVJAINLt8r+iHnb3EzcXXQnWdW7VWVvR4
 AdL2fSF0sq0RXdG48XyHF+LqIAvohIcywe/379mblhFjYxv9YVJSANotP4J+w5voRSuyB53v
 JLzJlkuyZLiJu3BE36zFRq+zMJ28t+F+PjtdtK2/f3XQVAlQ1DFJkOgKtm7n9QESponJz3y6
 t3/wWjAtSjEGCLtAho78ySZy/Q3VwxWRA9eZwlw9OHXM5itHYF584NIZptixp//9DgEgUdEP
 vPiFbY1UKSNvahx78PfNPqAQBL5c/SDbiBrz7/pa4ygr4BvKjjgTr4DLQuTO9NVuTVlF+cwK
 g3JxWbRTDUOLle3vG410vhaiyb2SizL6PBybVbnnlu9Fuivr5Da0Zdjs8nBj15hzXrSVuq0J
 TfXoHuQMJ4NM6vDxo1nAC9eYdFDXLikOeixXHqkwbfHWR82RbEICYwmw6ERq2CW9OJSRejvu
 4e3Z8KUk15hTOfnkSEXAa6gIfEjauCeuYF492aw1Dvrj1VoaAZ8LgrnB0WrSAA03xDBJLlPk
 wzRnlypVdcnImZ8dHr8oOBefXaGKeW3/WGr7QJngFWiBfQCBIQARAQABzSNTdHVhcnQgUHJl
 c2NvdHQgPHN0dWFydEBkZWJpYW4ub3JnPsLBdwQTAQgAIQUCUHdSFgIbAwULCQgHAwUVCgkI
 CwUWAgMBAAIeAQIXgAAKCRC7wX67E5by9z9vD/40ckDNUAIJIJZjhkxrGUnk/1U0MSlrFT2e
 /E2rleBTaqGMiGXU8ZexBLuUtwOdmvjqJJDOSNNQEOTxcOrkbTal3IMg8cRcYojMYpX2v9lP
 F66oXWke4PlWzwUxDJK44RsdODBPqf/juQ6b4Vuguo5UYIxJ7yXAO8Tz+Rzr9tha/64MK+zF
 Daeiw5wllDbWoRw9X4guzmfCnWcNyfEhlA7Umicp08E2QeWAXe5kWDnq0V2nA4TUgqRCwBoy
 p0IlVH44D2qNyHEn6HJmZtasVDED3aFTt6rfbE8KYYfK1i+KhMxTBNDtuvRV4DJ9C4cYETFR
 vFwEpXpw/0Y8aQSPFU5fLKgpT6MPumM7FtiWG4rxUB6NcNlTpoepKuQX6/7Yjdwza867o6zp
 CQVFrF7dxYsSdkGw7zfSWVxeIe7fwcHgo3cgViW8HbYo49y5P9WsroPz1B/WMlnwLX+zrP1i
 p0hu0/JmPrmwJp2Oka+8YunMwoFoVSVO/hmKoJ3P4gvh/RPExX98i5SrBYqRBemu3ln5dkf7
 +W49jkIxOylC0g9g37aDYoIPLy0S470xuu1Jqw5+RaL9+pOtamI50VMKrfShW3amvMFZEYFZ
 ufOfIS8tX+XAP8iF2wdX/puYgSeljFbk4YGVqC7T9ee2Kw8BG/6XiniZgOZHvKTk37B4H9RV
 4c7BTQRQd0nMARAA7MFqEl6qFInnuQntu6/cTdClOpo7Kl//6PZotBnYDPK9El+xPxEKyf07
 EP7m79EqkgOzmJgwII70rCxciAHEsf1esUet+6d+iZBWdqNhkEGWvOkQtV68PjJIUqjyMQpC
 w80tJjjacpj2hq3cxi69wUjl4e4LznXa7xSZFo68a5VxObkLdEuNHDrAaQ4utv5smgcmpJGv
 /wydIBSVjkgqAucdzB+/KFkEmRglSHnzvJ7/e6Tt7rpyC++uQPrvh3go0poGFNvLMX6JOOq/
 wXX/jUOhO+0+2FIEI0GvQ0ZMvQ26FSdHXhz/bVi9wHRlEDS/i1j7MHp4jt7TD6Gu+s0tCW+S
 rJ/7pj2yr4csmwLg5/VNCjQzzLV1x3xHwB7WaZNm8E1IN3ala6y3oQ9bV6fNrxjNJmPZmOk4
 h6GTx9gCdWGR6k8uEGmigSuOC2nC0HWFUsl51IHRcuF78WXHOGcNkilI6D5z6lUb4adQhGHb
 6Ck2uUI0vIaA+Y1v7vbNXfLzt+7K/bo7x3PPV8vh8U7dN49HTVovyJwnEOuoJoZneRuyHb4n
 lkvj/Bm878lui1xJiQ6+fRLxgJZDrCwTA1ZVjJ3upFmCsZnzVgLwwLxAyaYVgeFwc2oc+qZC
 Xc2CNDSwD5scDX1enbgtkMkn/3P8jKyA9JHGVo/dMwCSgmI5DrkAEQEAAcLBXwQYAQgACQUC
 UHdJzAIbDAAKCRC7wX67E5by9ycmD/9RCWFdHUxTIPtIbClBsTNrCf8kRaUQAHK944hXfzMe
 8m9Ncd2ttiAP2PcOZxH/KjPGDyL98tIwM+8c1UI0+oHZqvsVMEbRM0f5qS9hVPNh5+o/SeFT
 lrwlC7k7w9NDycDw1AlBneQF+QSQaglMJQe/LKrxUihYmDWCmSSjkCItlxmhmRfN87DQkfuO
 oCqtam+uWiqy+aKNN8bJ/kP5gO71JFeOqoXM52HmSJAEuJ4tb3P0sgNc7tJZrm2eZ3qpbT4P
 jwbNVyN+Cq2fqsEXt4Cl0P9P5Feef0EWV4vJNvGeW59UEcBRHOy6HFQEg+5GOWUYbHJ2XAvX
 SCRgiRkucKXq0w8OZgJLAXkktmEoj4adAxrDdUfjd8HG8Ac1de0tzG957fZg0v59Z/O6O+6o
 o8m3Iweb7vzDaEOTPDqMK++GuRRC2RurKGEHkX9sWNvBadOHALoUP2XJTkRQ2lBgXu0yvEEJ
 QpeuO3/pTdt86SGVGQ/fCcbmdk9ZgC0GixtTP/lbhBtdj+62ym2VdcOGAQESuNPoFtbNLHTP
 4Ohh8Q4vj3oz8pSSr2Dx5wqh5uvLxH6F7Dn4WI9+H7s7blqwZsrWBYrz5NQLAteeDqyeCkX/
 rNAdrJokPzdpa8SzpmOz7lqGR0U5FBdjobMd+e2twXWY2+VdWPRCcVH/IrLNenvS9w==
In-Reply-To: <177564664078.7182.6453113475212994709.reportbug@quark>
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 8bit
X-Debian-User: stuart

Hi Christian

On 08/04/2026 21:10, Christian Buhtz wrote:
> Package: tracker.debian.org
> Severity: normal
> 
> Hello,
> 
> as an example please see <https://tracker.debian.org/pkg/backintime>.
> There you find an AppStream hint (from 23th February) about two missing
> screenshots
> 
> <https://appstream.debian.org/sid/main/issues/backintime-qt.html>
> 
> The error happend because the screenshot hoster (codeborg) was down.
> This was nearly two months ago months ago.
> 
> The hoster is available again. The appstream hint component should run from
> time to
> time and see if the error persists. It shouldn't update only if the package
> gets
> updated (uploaded).
> 
> For "backintime" this is a false-positive error.

This is not a false positive.

Let's start at the error message that the appstream checker shows, it says:

/-----
Warnings

     screenshot-save-error
     Unable to store screenshot for 
'https://translate.codeberg.org/media/screenshots/bit_16to9_960x540_mainwindow.png': 
Could not load source screenshot for storing: Format der Bilddatei unbekannt
     screenshot-save-error
     Unable to store screenshot for 
'https://translate.codeberg.org/media/screenshots/bit_16to9_1280x720_general_ssh.png': 
Could not load source screenshot for storing: Format der Bilddatei unbekannt
-----/


Now I'll hazard a guess that your fluency in German is better than 
mine... Image file format unknown.


The URLs that are used by backintime have anti-AI-scrapers sitting in 
front of them. Attempting to access those URLs requires a 
javascript-aware browser to be able to actually obtain the image.

The appstream checker will have ended up with precisely what I just 
ended up when checking the URLs:

/-----

$ wget 
https://translate.codeberg.org/media/screenshots/bit_16to9_960x540_mainwindow.png
--2026-04-18 12:48:36-- 
https://translate.codeberg.org/media/screenshots/bit_16to9_960x540_mainwindow.png
Resolving translate.codeberg.org (translate.codeberg.org)... 
217.197.84.142, 2a0a:4580:103f:c0de::3
Connecting to translate.codeberg.org 
(translate.codeberg.org)|217.197.84.142|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 516 [text/html]
Saving to: ‘bit_16to9_960x540_mainwindow.png’

bit_16to9_960x540_mainwindow 
100%[===========================================>]     516  --.-KB/s 
in 0s

2026-04-18 12:48:38 (30.7 MB/s) - ‘bit_16to9_960x540_mainwindow.png’ 
saved [516/516]

$ file bit_16to9_960x540_mainwindow.png
bit_16to9_960x540_mainwindow.png: HTML document, ASCII text, with very 
long lines (516), with no line terminators

$ cat bit_16to9_960x540_mainwindow.png
<!doctype html><meta content="1; url=?trans-rights=human-rights" 
http-equiv=refresh><meta content="light dark" 
name=color-scheme><title>Cookie monster!</title><body><p>This is an 
automated check to get rid of most bots. If you have JavaScript enabled, 
it should redirect to the real page soon. If you don't, it still should 
redirect soon, but you can <a href="?trans-rights=human-rights">click 
here</a> if you're 
fast.</p><script>document.cookie="x-robot-challenge-2=passed;path=/";window.location.reload();</script>

-----/


So I would say that "Image format unknown" is exactly what the appstream 
checker should say when it receives an HTML+JS challenge page rather 
than a PNG image.

I assume that apps trying to consume the appstream data will have the 
same problem as they too will not also not have js-aware or a 
meta-refresh-aware browser built into them.

regards
Stuart