lintian (2.116.3) unstable; urgency=medium The "FFP3 (Fixing False Positives, Three Small Changes)" Release. [ Axel Beckert ] * Refresh data. (Loong64 removed from two lists, some fonts and dh_cruft added.) [ Simon McVittie ] * obsolete-packages: libegl1-mesa-dev is not obsolete. [ Andreas Beckmann ] * archive-liberty-mismatch: Add exception for 'non-free-firmware binary package build from non-free source package'. (Closes: #1030325) -- Axel Beckert Sun, 05 Feb 2023 09:10:20 +0100 lintian (2.116.2) unstable; urgency=medium The "FFP2 (Fixing False Positives, too)" Release. [ Axel Beckert ] * Add private script to automate post release version bump. * Fix typo in previous debian/changelog entry. Thanks Lintian! ;-) * Mention that #1024039 got closed by 2.116.1 in its changelog entry. * [Testsuite] Check tag files and docs with spellintian. Thanks to Sylvestre Ledru for noticing the typos this check now finds. * Fix duplicate words and one more typo found by spellintian-textual-content.t. * "currectly" can be a misspelling of "correctly" or "currently" * Fix spellintian false positives found by spellintian-textual-content.t: + "these package" followed by a plural, e.g. "these package sections", + Double word with closing parenthesis inbetween. (So far only opening parentheses were whitelisted.) * Add testsuite check for missing-pkg-php-tools-addon false positive with dh-sequence-phpcomposer. (See MR !438.) * Add testsuite check for a vcs-field-has-unexpected-spaces false positive. (See #1023155 and MR !422.) * debian-rules-uses-unnecessary-dh-argument: Also report found and minimum dh compat level. Additionally also rephrase tag description to no more say "this debhelper compatibility level". Thanks to Anthony Fok for making us aware of the issue in MR !451. [ Cyril Brulebois ] * Teach the is_non_free attribute about the non-free-firmware section. * Stop checking for Standards-Version for installer-only (i.e. udeb) packages. (Closes: #991533) [ Andreas Beckmann ] * backports-upload-has-incorrect-version-number: Fix salsaci version regexp again. (Closes: #1024361) [ Sylvestre Ledru ] * Fix some typos in the doc. [ William Desportes ] * missing-pkg-php-tools-addon: Allow dh-sequence-phpcomposer as alternative to pkg-php-tools-addon. * Lintian::Check::Files::SourceMissing: Ignore files in debian/missing-sources/. Fixes false positives in source-is-missing, source-contains-prebuilt-javascript-object and friends. [ Tino Didriksen ] * vcs-field-has-unexpected-spaces: Allow any order of git branch and path. (Closes: #1023155) Thanks to Bradford D. Boyle for the bug report. [ Johannes Schauer Marin Rodrigues ] * Multiarch terminology: Use "qualifier" instead of "acceptor": Update tag descriptions of rules-require-build-prerequisite and missing-build-depends-for-clean-target-in-debian-rules. Also rename method multiarch_acceptor() to multiarch_qualifier() in Lintian::Relation::Predicate. -- Axel Beckert Sun, 29 Jan 2023 09:32:16 +0100 lintian (2.116.1) unstable; urgency=medium The "No More Neglected Autopkgtest Architectures" Release. [ Axel Beckert ] * bitbucket.org no more supports Mercurial. * [Testsuite] Fix armhf+i386-only test binaries-missing-lfs. Should fix autopkgtest on these architectures. * unknown-section description: Factorize explanations to avoid repetitions as suggested by Cyril Brulebois. (See also below.) * Fix remaining i386 testsuite issues due to missing brackets. * Don't emit inconsistent-appstream-metadata-license with "MIT != Expat". (Closes: #1029055) * Update Lintian User's Manual for pointed hints in tags and overrides. Thanks to Soren Stoutner. (Closes: #1029177) * Whitelist Autobuild, Go-Import-Path, and Ruby-Versions from unknown-field. (Closes: #1014885) * Don't emit spare-manual-page for binaries in /usr/libexec/. (Closes: #1027744) * Refresh static data. * data/java/constants: Default is now Java17, versions available up to Java21. (Closes: #1024039) [ Cyril Brulebois ] * Add non-free-firmware to known archive areas. [ William Desportes ] * Fix lintian package-contains-documentation-outside-usr-share-doc matches python files and robots.txt. (Closes: #997987, #976636) * Add more typo fixes. -- Axel Beckert Mon, 23 Jan 2023 03:32:04 +0100 lintian (2.116.0) unstable; urgency=medium The "Crowd Merging" Release. * Summary of tag changes: + Added: - dbus-policy-in-etc - homepage-github-url-ends-with-dot-git - homepage-gitlab-url-ends-with-dot-git - homepage-salsa-url-ends-with-dot-git - uses-pdm-cli - uses-python-distutils + Removed: - init.d-script-needs-depends-on-lsb-base - old-dpmt-vcs - old-papt-vcs - python-teams-merged [ Sebastian Ramacher ] * Revert "Turn embedded-library into a classification tag. (Closes: #932634)". The tag embedded-library is used by FTP masters for automatic rejects. So let's revert this change. First, #932634 has seen no coordination with FTP masters. Second, it confuses developers when their packages get rejected for tags that are not emitted locally. [ Simon McVittie ] * obsolete-packages: Add some more transitional packages. * desktop/dbus: Check for dbus policy files installed into /etc/. (Closes: #1006631) * Don't emit very-long-line-length-in-source-file for REUSE licenses. (Closes: #1013314) [ Bastien Roucariès ] * Run test suite at build time except on Salsa. * Fix warning: cannot run debian/readme check on package binary:postgresql-15_15~beta2-2+salsaci_amd64 (Closes: #1014175) * Refresh data. * L…/C…/Files/PrivacyBreach.pm: Run lc in sliding windows block. [ Axel Beckert ] * data/spelling/corrections: Remove valid word "licence". * Fix typos and add missing changelog items in 2.115.3 release. * .gitignore: Also ignore debian/*.debhelper files and drop wrong trailing slash for doc/lintian.html. * private/refresh-virtual-packages-data: Replace "egrep" with "grep -E". * Replace "egrep" and "fgrep" in all test suite dummy packages with "grep -E/-F". * Add build-dependencies of the test suite. * Fix test broken by dpatch removal. * Fix test broken by updating the list of virtual packages. * Extend spellintian.t to check all listed misspellings against dictionaries. Add test suite build dependencies on liblist-someutils-perl, wamerican and wbritish. (Closes: #1019541) * Make spellintian.t to use the installed corrections list under autopkgtest. * t/scripts/tags/fields.t: Allow running with just "prove -l". * Remove spelling corrections which are valid words and now caught by the new spellintian.t check against English dictionaries. (Closes: #1019235) * Remove valid word "tye" from data/spelling/corrections. * Remove spelling correction for "curren", it's a valid HTML entity. * Refresh data: Adds Debian Policy 4.6.2 and Loong64 architectures among other things. * Declare compliance with Debian Policy 4.6.2. * Make test for generate-tag-summary more precise and properly cover all cases. * out-of-date-/newer-standards-version: Only output the significant digits of the current policy version. * Salsa CI: Override the lintian version being used to the just built version. * Extend desc-fields.t to only accept known field names, see #1025868. * Fix singular vs plural field name typo. (Fixes ½ of #1025868) * debian/copyright: Bump my copyright years to 2023. * Make "lintian --version" emit versions unique per commit if run from a git checkout. * Fix read error with libpath-tiny-perl ≥ 0.142 if debian/templates is a directory. Thanks to Salvatore Bonaccorso and src:linux. :-) * Fix arm64 autopkgtest by using a shell script as example instead of a compiled C binary for testing bin-sbin-mismatch. Also fix that so far on other architectures there was a bin-sbin-mismatch false negative accepted by the test suite while the true positive on arm64 hadn't been accepted by the test suite. (Closes: #1025868) * inconsistent-appstream-metadata-license: + Versions with trailing ".0" are equivalent to versions without (Closes: #1002053) + Normalize comparison (-or-later/+, -only suffix) + Tag description: Text improvements; add direct reference to AppStream metadata_license tag specification. (Closes: #1014956) * Unpack orig.tar: Ignore warnings about tar ignoring tar ball peculiarities. (Closes: #1028975) * Fix error with Path::Tiny ≥ 0.142 when searching for upstream signatures. (Closes: #1028274) * license-problem-php-license: Also refer to https://ftp-master.debian.org/php-license.html * Delete dangling symlink reporting/harness. (Closes: 1027323) * spellintian.t: Make sure that no bad spelling is used as good spelling of another bad spelling. Prompted by #1027399. Add build-dependency on "libarray-utils-perl " and autopkgtest dependency for that. * Fix bad spellings that were used as good spelling for another bad spelling. (Closes: #1027399) * Do not emit executable-stack-in-shared-library on MIPS architectures for now. (Closes: #1025436, see also #1022787) * run-private-scripts.t: + Do not run auto-reject-diff as it requires network access. + Skip generate-tag-summary without git. Thanks Louis-Philippe Véronneau! [ Akbarkhon Variskhanov ] * debian/control: Bump Standards-Version in Description. [ Simon Quigley ] * Add "lunar" as a known Ubuntu distribution. [ billchenchina ] * README.md: use zless for lintian.txt.gz. [ Philip Hands ] * Accept bpo...+salsaci versions. (Closes: #1024361) [ Aurélien COUDERC ] * Add SingleMainWindow to known-desktop-keys. [ Johannes Schauer Marin Rodrigues ] * transitional-package-not-oldlibs-optional: Developer reference section 6.7.7 is now 6.8.7. * Remove init.d-script-needs-depends-on-lsb-base and add lsb-base to obsolete-packages. (Closes: #1019851) [ Louis-Philippe Véronneau ] * missing-prerequisite-for-pyproject-backend: Add support for pdm-pep517. * uses-pdm-cli: Create new tag. * Fix false-positive for missing-build-dependency-for-dh-addon when using dh-sequence-python3. (Closes: #1016147) * Add new tag 'uses-python-distutils' to warn people of the Python distutils deprecation. * Remove tag 'python-teams-merged', as this transition has been done and no package in the archive raises it anymore. * Remove tags 'old-dpmt/papt-vcs', as this transition has been done and no package in the archive raises them anymore. * Rework the 'package-is-team-maintained' tag. * Mark 'very-long-line-length-in-source-file' as experimental, because of the high number of false-positives. * Update known autopkgtest restrictions to add 'needs-sudo'. * Mark the 'update-debian-copyright' tag as experimental. (Closes: #1025644) * Fix false-positive for missing-prerequisite-for-pyproject-backend when the backend is specified as a Build-Depends-Indep. (Closes: #1025164) * missing-prerequisite-for-pyproject-backend: Add support for hatchling. * Add 'autopkgtest-pkg-pybuild' as known autopkgtest testsuite. * Make sure pybuild-plugin-pyproject is registered as a valid prerequisite for dh-python3. [ Edward Betts ] * spelling: Add a correction. * dh-sequence-vim-addon pulls in dh-vim-addon. * GitHub, GitLab and Salsa URLs shouldn't end with ".git" in Homepage header. [ Fatih Altun ] * Add "yirmiuc" as a known Pardus distribution. [ William Desportes ] * data: Register .{dbf,shp,shx,sbx,sbn,qix} ESRI file extensions. * Fix false positive for license-problem-php-license for pear.php.net source code. [ Luca Boccassi ] * missing-systemd-service-for-init.d-script: Mention future deprecation of generator. [ Christoph Biedl ] * Lintian::Index::FileTypes: Call "file" with "--raw" to unbreak test suite with file/libmagic ≥ 5.42. (Closes: #1026920) -- Axel Beckert Tue, 17 Jan 2023 01:37:56 +0100 lintian (2.115.3) unstable; urgency=medium The "RPB (Restore Previous Behavior)" Release. [ Gioele Barabucci ] * experimental-to-unstable-without-comment: Fix regex (Closes: #101387) [ Axel Beckert ] * Recognise many more binary file type suffixes (Closes: #1014156) [ Guillem Jover ] * Add pedantic hint for OpenPGP files named after specific implementations * Add more extensions for OpenPGP files * In the US "cancelation" is a valid spelling of "cancellation" * Rename debian-watch-does-not-check-gpg-signature tag to say openpgp * Fix --fail-on to revert to original default on error (Closes: #995492) [ Francois-Xavier Le Bail ] * spelling: Add several corrections. [ Bastien Roucariès ] * Restore sliding windows (Closes: #993613) * Add myself as uploaders * Summary of tag changes: + Added: - debian-watch-does-not-check-openpgp-signature - openpgp-file-has-implementation-specific-extension + Removed: - debian-watch-does-not-check-gpg-signature -- Bastien Roucariès Sun, 28 Aug 2022 08:31:41 +0000 lintian (2.115.2) unstable; urgency=medium The "FFP (Fixing False Positives)" Release. [ Axel Beckert ] * Automate importing of Debian archive sections. Thanks to Andrius Merkys. (Closes: #973308) * Make more testsuite scripts being able to simply run under "prove -l". * Move libio-prompt-tiny-perl dependency to debian/tests/control. Cherry-picked from Ubuntu's patches. (LP: #1959004) * Recognise Mac OS X icons (.icns), SQLite files (.sqlite and .sqlite3) and PDF (.pdf) documents as binary files. * Allow HTML files in /usr/share/gtk-doc/html/. (Closes: #970275) Thanks to Simon McVittie, Daniel Kahn Gillmor and Unit193! * Refresh (fonts) data. * Also check dh level for missing-build-dependency-for-dh-addon, not just for missing-build-dependency-for-dh_-command. (Closes: #1000610) * Retroactively mention commit fcaded19 in debian/changelog entry of 2.115.0 as it was erroneously marked with "Gbp-Dch: Ignore". [ Guillem Jover ] * data/fields/name_section_mappings: Add golang section (Closes: #880701) [ Rafael Laboissière ] * Ignore files /var/lib/ocaml/lintian/*.info in test for package-contains-documentation-outside-usr-share-doc (Closes: #1009679) -- Axel Beckert Wed, 29 Jun 2022 02:56:42 +0200 lintian (2.115.1) unstable; urgency=medium The "Things we never tested" Release. [ Axel Beckert ] * Write a test which catches run-time errors of lightweight private scripts. Triggered by libconfig-model-dpkg-perl's autopkgtest failure since it runs private/latest-policy-version and failed. * Fix private/latest-policy-version: $p…->policy_releases → $p…->data->policy_releases. Seems to have been forgotten when policy_releases() moved from Lintian::Profile to Lintian::Data. Should fix libconfig-model-dpkg-perl's autopkgtest failure. * Fix documentation of Lintian::Data->new(). * Switch all GPL URLs in boilerplates and debian/copyright to HTTPS. * Add a debian/duck-override file with some false positives. Lintian is now also DUCK-clean! [ Simon McVittie ] * data: Register *.xcf as binary files -- Axel Beckert Tue, 21 Jun 2022 20:53:27 +0200 lintian (2.115.0) unstable; urgency=medium The Lintian Resurrection Release. * Summary of tag changes: + Added: - alien-tag - chown-with-dot - conflicting-test-fields - declare-python-versions-for-test - drop-python-version-declaration - invalid-override-restriction - missing-prerequisite-for-pyproject-backend - old-devhelp-standard - stray-devhelp-documentation - test-leaves-python-version-untested - uses-poetry-cli + Removed: - crossing-screens - debhelper-compatibility-level-not-a-number - debian-tests-control-and-control-autodep8 - exclusive-runtime-tests-field - package-contains-devhelp-file-without-symlink [ Axel Beckert ] * Adopting Lintian. (Changes #1012289 from ITA to pure RFH.) + Remove Chris Lamb from Uploaders (see #1012289) and re-add myself. * Workarounds until https://github.com/Perl-Critic/Perl-Critic/issues/925 is fixed: + Replace all occurrences of "Copyright ©" with "Copyright (C)" again. + Remove unnecessary usage of UTF-8 from bin/lintian. + Replace UTF-8 characters in mostly Copyright comments. + Replace UTF-8 characters in code with \N{…}. * Remove literal unicode character U+0334 COMBINING TILDE OVERLAY which likely had been added accidentally. (Triggered by the symptoms of https://github.com/Perl-Critic/Perl-Critic/issues/925, but permanent.) * Update copyright years in debian/copyright. * Run perltidy over lib, bin/lintian, private/refresh-perl-provides, private/runtests and several files in t/scripts/. * data/…/perl-provides updated by running "debian/rules refresh-perl-provides". * Add Felix Lechner to debian/copyright based on copyright statements elsewhere. Thanks for all your contributions! * Update t/recipes/README: "debian/rules runtests" → "private/runtests" * Follow module renaming: Perl::Critic::Freenode → Perl::…::Community. * t/s…/h…/tag-coverage.t: Replace "$ENV{'LINTIAN_BASE'}" with "$ENV{'LINTIAN_BASE'} // '.'" to be able to run it with "prove -l". * init.d-general check: Avoid relying on line numbers in #DEBHELPER# replacement code. * very-long-line-length-in-source-file: Ignore files listed in new data file binary-file-extensions. (Closes: #1005046) * Fix false positives for adopted-extended-field with X- prefixed fields. (Closes: #999768) + Empty hints files seem to require a Test-Against field in desc. * Update own source lintian-overrides for "pointed hints". + Make them work with old and new lintian versions by using wildcards. * Rename README.developers to have a proper file suffix (.pod). * Switch syntax marker of README.developers.pod from "perl" to "pod". * Documentation update: Replace directory "frontend/" with "bin/". * Fix a bunch of "Use of uninitialized value $_ in concatenation" warnings when running tests with "prove -l" directly. * README.developers.pod: Explain the difference between check and test. * lintian(1): Drop mentioning of never existing --no-overrides option. * Replace unfitting Text::Glob with more flexible Regexp::Wildcards (Closes: #1003353) + Add unit test for Lintian::Util::match_glob. The current testsuite does not seem to be able to cover such a case. * Declare compliance with Debian Policy 4.6.1. (No changes needed.) * Refresh data using private/refresh-data. Skip unreleased policy though for now. * Fix "Use of uninitialized value $step in concatenation" in Lintian::Version which showed up as unrecognized tag (!) when running the test suite on the git repo already tagged for a release. * debian/gbp.conf: Declare so far used tag format so that gbp uses it. * Add lintian override for very-long-line-length-in-source-file in Lintian::Check::Cruft as well as test-leaves-python-version-untested. * Use versioned Breaks instead of Conflicts against lzd, see #1001655. Thanks Lintian for reporting ;-) and Paul Gevers for the sanity check! [ Felix Lechner ] * Refresh manual references. * Use Text::Glob to match hint contexts with override patterns. Replaces a trusted homegrown routine. (Closes: #1003272) * Refresh list of available Debhelper commands. * Refresh list of installable fonts. * Generate section references for Lintian manual from repo; point to website. * Accept globbing patterns in profiles when enabling and disabling checks or tags. * Refresh data sources in parallel. * Add the New Maintainer's Guide to the list of quotable authorities. * Eliminate unpredictable output in the check siles/privacy-breach. * Honor the environment variable NO_COLOR as specified in https://no-color.org/. * More attempts to eliminate unpredictable output in the check files/privacy-breach. * Drop the tag debian-tests-control-and-control-autodep8. * Set authority references apart from other data sources. * Provide rudimentary Emacs integration. (See: #968758) * Associate Emacs modules with the 'editors' archive section. * Recognize /usr/bin/raku as a known interpreter for scripts. (Closes: #1002828) * Do not depend on any particular Lzip implementation. (Closes: #1001655) * Exempt installables designated as documentation from warning about new Python2 packages. (Closes: #995286) * Update citations in two tags. (Closes: #1003131) * Drop version requirement from skip-systemd-native-flag-missing-pre-depends. (See: #1003271) * Import new CSS style sheet from the website. * Recognize dh-sequence-sphinxdoc as a valid prerequisite for dh_sphinxdoc. (Closes: #999810) * Tolerate multiarch acceptors in prerequisites for Debhelper commands and addons. (Closes: #1000234) * Issue yet more pointed hints. * Recognize pybuild-plugin-pyproject as a valid prerequisite for the python3 Debhelper plugin. (Closes: #1003668) * Exempt bullseye backports from changelog-file-missing-explicit-entry. (Closes: #941656) * Mask long source lines in autotools-generated files. (Closes: #996740) * Turn embedded-library into a classification tag. (Closes: #932634) * Require the targets build-arch and build-indep in debian/rules. (Closes: #657390) * Do not insist on a particular name for unversioned links to a shared library. (Closes: #963099) * Exempt the names of Debian folks associated with a package from spelling checks. (Closes: #989381) * Require py3version invocation consistent with presence of X-Python3-Version in d/control. (See: #1001677) * Exempt CGI scripts from executable-in-usr-lib. (Closes: #1003941) * CGI scripts can be ELF executables. (See: #1003941) * Exempt Python's .dist-info and .egg-info folders everywhere from documentation-outside-usr-share. (Closes: #1003913) * Flag an outdated Debian copyright just once; use the most recent year. (Closes: #1003817) * Implement '--no-show-overrides'; honor it for overrides and masks alike. (See: #1004240) * Allow the command-line option '--no-info' to reverse 'info=yes' in the configuration file. (Closes: #1004240) * Elide manual references to ancient Lintian versions; use modern examples. (Closes: #1004231) * Deprecate --no-tag-display-limit for '--tag-display-limit 0'; update documentation. (Closes: #1004239) * Also provide a default output width for lintian-annotate-hints. (Closes: #1004660) * Mask examples in tests from package-does-not-install-examples. (Closes: #1005184) * Recognize Java 18 in unstable, and Java 19 as otherwise available. (Closes: #1005762) * Leave default Java bytecode version at 56. (See: #1005762) * Adjust documentation reference to manual page for dh_make. (Closes: #1006390) * Warn about devhelp index files that use version 1. (Closes: #1006859) * Store ELF information from readelf in an MLDBM database. (Closes: #1003456) * Issue pedantic hint for dot in 'chown user.group' instead of a colon. (Closes: #1007140) * Upgrade missing-systemd-timer-for-cron-script to warning; no longer experimental. (Closes: #1007257) * Read locale codes directly from /usr/share/locale/json/. Add dependency on iso-codes for that. [ Ryan Finnie ] * Provide a constant citation for systemd-service-file-uses-nobody-or-nogroup. (Closes: !385) [ Louis-Philippe Véronneau ] * Check that tests pulling in all Python versions also query which ones are available. (Closes: !361) * Add new Python tags for pyproject.toml build backends according to PEP-517. (Closes: !384) * Rename 'python3-flit' to 'flit', as there is no 'python3-flit' package. (Closes: !386) [ Daniel Kahn Gillmor ] * Correct lintian-annotate-hints manpage. [ Simon McVittie ] * Silence a very widespread false positive for detached debug symbols. (Closes: #1000977, !387) [ Simon Quigley ] * Add "kinetic" as a known Ubuntu distribution. (Closes: !392) [ xiao sheng wen(肖盛文) ] * Add riscv64 support (Closes: #1012090, !394) [ Damyan Ivanov ] * Update releases.json data for Debian policy releases (4.6.1 added; closes: !393) [ Paul Wise ] * Add more obsolete domains for former source code hosting services. -- Axel Beckert Mon, 20 Jun 2022 13:23:02 +0200 lintian (2.114.0) unstable; urgency=medium [ Felix Lechner ] * Issue no-code-sections only for entire archives that contain no code sections at all. (Closes: #1000469) * Provide better file pointers for defective override files. (Closes: #1000494) * In the refresh script fetching font data, use the new Contents-all.gz file served by the Debian archive. * Refresh fonts data using new script and record all installables in which font is shipped. * Refresh Debhelper add-ons and commands and recognize click and dh_click from click-dev. [ Rafael Laboissière ] * Stop checking for bash-centric terms after 'exec' in shell scripts. (Closes: #999756) -- Chris Lamb Sat, 27 Nov 2021 17:20:56 +0000 lintian (2.113.0) unstable; urgency=medium * Summary of tag changes: + Added: - anticipated-repack-count - dfsg-version-with-tilde - dot-before-repack-count - elf-error - elf-warning - no-code-sections - static-link-time-optimization + Removed: - apparently-corrupted-elf-binary [ Felix Lechner ] * Bump the maximum plausible bug number to 1,500,000. (Closes: #1000148) * Flag static archives without code sections, as can happen with LTO objects. (Closes: #977596) * Flag use of link-time-optimization (LTO) in static archives. (Closes: #963057) * Exempt Coq's cmxs files from the shared-library-lacks-prerequisites tag. (Closes: #999602) * Accommodate dune's file names for the bytecode in OCaml interfaces. (Closes: #999601) * Drop 'type' from the list of bash-centric expressions. (Closes: #999878) * Fix CI failure on armhf due to a parsing failure of readelf output. * Adjust refresh script fetching debhelper data for the new Contents-all.gz served by archive. * Refresh debhelper data. [ Kentaro Hayashi ] * Add the dfsg-version-with-tilde tag, as opposed to a plus. * Add a new tag about a possibly unnecessary repack count for upstream sources. * Add a tag about source versions with a dot before the repack count. -- Chris Lamb Sat, 20 Nov 2021 16:43:03 +0000 lintian (2.112.0) unstable; urgency=medium * Summary of tag changes: + Added: - add-component-copyright - adopted-extended-field - archive-liberty-mismatch - build-prerequisite-in-installable-section - circular-installation-prerequisite - composer-prerequisite - control-file-contains-dh-make-vcs-comment - installable-field-mirrors-source - invalid-systemd-documentation - kill-mode-none - no-source-section - prefer-uscan-symlink - redundant-installation-prerequisite - relative-library-search-path - rules-do-not-require-root - rules-require-root-explicitly - unicode-trojan - update-debian-copyright - upstream-metadata + Removed: - binary-control-field-duplicates-source - build-info-in-binary-control-file-section - control-file-contains-dh_make-vcs-comment - package-depends-on-itself - rules-does-not-require-root - rules-requires-root-explicitly - section-area-mismatch - stronger-dependency-implies-weaker - upstream-metadata-field-present - xc-package-type-in-debian-control - xs-testsuite-field-in-debian-control - xs-vcs-field-in-debian-control [ Felix Lechner ] * Flag potential 'trojan' Unicode codepoints. * In debian/watch, suggest the use of 'USCAN_SYMLINK=rename' when 'filenamemangle' is present. * Add field content to and rename old tag to 'upstream-metadata'. (Closes: #993813) * Find invalid URIs for Documentation in systemd .service files. (Closes: #980447) * Flag 'KillMode=none' in systemd service files. (Closes: #978048) * Flag outdated copyright years for debian files relative to latest changelog entry. (Closes: #949201) * Flag relative RPATHS separately and use a regular tag for absolute RPATHS only. (Closes: #732682) * Flag missing versions in debian/watch only for files with meaningful content. (Closes: #992569) * Flag when orig source components are not mentioned by name in debian/copyright. (Closes: #915384) * Flag sources declaring a package relationship on the PHP composer. (Closes: #977150) * Fix path to external documentation in tag description. (Closes: #999477) * Allow the "Description" field in .dsc and in source stanzas of debian/control. (Closes: #998115) * Re-enable OSC 8 terminal hyperlinks following GCC's lead. [ Stephen Kitt ] * Calculate game executable permissions correctly. [ xiao sheng wen ] * Update tags/g/groff-message.tag for LC_ALL=C.UTF-8. -- Chris Lamb Sat, 13 Nov 2021 15:25:15 +0000 lintian (2.111.0) unstable; urgency=medium * Summary of tag changes: + Added: - generated-file [ Chris Lamb ] * Mention that --with=sphinxdoc (or dh_sphinxdoc) is the easiest way to prevent including Sphinx .doctree files in binary packages. [ Felix Lechner ] * Limit Python dot directories to those starting with a dot. (Closes: #997662) * Offer classification tag "generated-file" for source files that look generated. (Closes: #993662) [ Simon Quigley ] * Add "jammy" as a known Ubuntu distribution. -- Chris Lamb Sat, 30 Oct 2021 09:03:59 +0000 lintian (2.110.0) unstable; urgency=medium * Summary of tag changes: + Added: - bash-term-in-posix-shell [ Felix Lechner ] * Consider source exemptions for embedded-libraries when no regex is present. (Closes: #996684) * Accept nodejs:any as a prerequisite for Node.js scripts. (Closes: #996710) * Fix parsing of debian/symbols files for those with multiple sonames. (Closes: #996688) * Move the filename-length check to archive/file/name/length. * Update release epoch for oldstable in a maintainer scripts check. * Drop mention of 'tempfile' from tag descriptions. (Re: #994275) * Issue only Lenna-specific tag for known bad Lenna files. (Re: #996093) * Disregard long text lines in SVG images. -- Chris Lamb Sat, 23 Oct 2021 14:18:51 +0000 lintian (2.109.0) unstable; urgency=medium * Summary of tag changes: + Added: - redundant-build-prerequisites - redundant-control-relation + Removed: - duplicate-in-relation-field - package-has-a-duplicate-build-relation [ Felix Lechner ] * Do not complain about library sections that do not exist. (Closes: #995991) * Python :any handling: * In tag descriptions, never ask for :any in Python prerequisites. (Re: #995498) * Fix processing of the :any multiarch acceptor in package relationships. (Closes: #995490, #995498) * Allow make:any as a prerequisite for using usr/bin/make in scripts. (Closes: #994902) * Make the condition of a missing interpreter look less like a recommendation. * Fix non-sensical line lengths in hints from cruft check. (Closes: #996111) * Add a new Lenna image to the list of banned files. (Closes: #996093) * Also allow private folders in lib from custom library search path. (Closes: #996270) * Clarify in tag descriptions for debian/rules check that hint context is not a recommendation. (Closes: #995981) -- Chris Lamb Fri, 15 Oct 2021 08:01:45 +0000 lintian (2.108.0) unstable; urgency=medium * Summary of tag changes: + Added: - odd-static-library-name - static-library-has-unneeded-sections + Removed: - static-library-has-unneeded-section [ Felix Lechner ] * Report static libraries with "_s.a" suffix in the filename. (Closes: #698398) * Enable the failing test binaries/binaries-missing-depends-on-numpy-abi in autopkgtests. * Fix the missing-dependency-on-numpy-abi tag to work with newer Python 3 versions. * Adjust test suite to debhelper reversal of systemd installation paths. (Re: #992711, #992465) * Provide full path to init scripts in context. [ Simon McVittie ] * debian/tests: Correct name of python3-all-dev. [ David Steele ] * Revise a statement that sysvinit support is required. [ "Unit 193" ] * Preserve DEB_VENDOR as it's used later to set the profile. -- Chris Lamb Fri, 08 Oct 2021 08:36:47 +0000 lintian (2.107.0) unstable; urgency=medium * Summary of tag changes: + Added: - architecture-escape - control-interpreter-without-predepends - ldconfig-escape - runtime-test-file-uses-supported-python-versions-without-test-depends + Removed: - breakout-link - preinst-interpreter-without-predepends - runtime-test-file-uses-supported-python-versions-without-python-all-build-depends [ Felix Lechner ] * Repurpose breakout-link; split into two new tags to find a use. (Closes: #968525, #971707) * Do not expect files in sudoers.d to have standard file permissions. (Closes: #995261) * Do not flag missing matches for Files-Excluded; uscan already got rid of them. (Closes: #994271) * Fix documentation for --fails-on command line option. (Closes: #994414) * Exempt empty packages so declared from empty-binary-package. (Closes: #994711) * Allow maintainer manual pages for executables also so provided. (Closes: #994689) * Only create diffstat when the diff.gz is mentioned in the dsc or the changes. (Closes: #994793) * Fix minimum version for init-system-helpers in a tag description. (Closes: #918137) * Be ambivalent between /lib and /usr/lib for systemd service files. (See: #992465) * Adopt latest style from website for the standalone HTML output often shown in Salsa CI. * Implement the multiarch selector :any in package relationships. (Closes: #994902) [ Paul Wise ] * Revert "Upgrade superficial-tests tag to warning". -- Chris Lamb Fri, 01 Oct 2021 08:28:20 +0000 lintian (2.106.1) unstable; urgency=medium [ Felix Lechner ] * Add Breaks: libconfig-model-dpkg-perl (<< 2.151) to debian/control. This avoids blocking testing migration in the Debci infrastructure. (See: #968000) * Fix an autopkgtest failure on i386 related to the shared-libs-non-pic-i386 test. -- Chris Lamb Tue, 14 Sep 2021 14:05:49 +0000 lintian (2.106.0) unstable; urgency=medium * Summary of tag changes: + Added: - file-included-already - source-ships-excluded-file - superfluous-file-pattern + Removed: - copyright-excludes-files-in-native-package - source-includes-file-in-files-excluded - unused-file-paragraph-in-dep5-copyright - wildcard-matches-nothing-in-dep5-copyright [ Felix Lechner ] * Drop recommendation to implement usr-merge for individual packages. (Closes: #993955) * Use default output width of 80 characters. (Closes: #993908) * Issue homepage-in-binary-package only when there is none in the source. (Closes: #993975) * Implement Files-Included field in DEP-5 copyright files. (Closes: #993758) * Parse path to source .dsc using a more robust method. (Closes: #994088) [ gregor herrmann ] * Refresh data/fields/perl-provides. -- Chris Lamb Mon, 13 Sep 2021 09:55:19 +0000 lintian (2.105.0) unstable; urgency=medium * Summary of tag changes: + Added: - backgrounded-test-command - crossing-screens - duplicate-p3dist-override - elevated-privileges - illegal-variable - misplaced-systemd-tmpfiles - missing-conffile - no-versioned-debhelper-prerequisite - nodejs-missing-version-override - obsolete-vim-addon-manager - pypi-homepage - python-traceback-in-manpage - ruby-interpreter-is-deprecated - rubygem-homepage - rules-require-build-prerequisite - rust-boilerplate - source-contains-editor-backup-file - source-contains-patch-failure-file - source-contains-quilt-control-dir - superficial-tests - systemd-service-in-odd-location - systemd-tmpfile-in-var-run - unexpected-conffile - unknown-conffile-instruction - unmerged-usr - upstream-metadata-field-unknown - wrong-team + Removed: - ancient-standards-version - conffile-is-not-in-package - missing-build-dependency - missing-python-build-dependency - octal-permissions - package-lacks-versioned-build-depends-on-debhelper - package-needs-versioned-debhelper-build-depends - setgid-binary - setuid-binary - setuid-gid-binary - systemd-service-file-outside-lib - systemd-tmpfiles.d-outside-usr-lib [ Chris Lamb ] * Check for Python tracebacks in manual pages, usually caused by failing help2man calls (and cause reproducibility issues). * Correct confusion between left and right parens that was leading to output such as ")2 errors)". * Bump Standards-Version to 4.6.0.1. [ Felix Lechner ] * Implement usr-merge; flag files shipped in /bin, /sbin or /lib. * Flag systemd temporary files placed in /var/run. (Closes: #984678) * Do not repeat tag name when annotating hints. (Closes: #969398) * Refuse to read installable control data in national encodings. * Stop shipping modules in system path. (Closes: #968011) - Provide a dedicated, non-public executable to obtain the latest policy version from Lintian data. (See: #978672) * Flag the use of DEB_BUILD_MULTIARCH in some Debian files. (Closes: #983219) * For team-maintained packages, flag names in another team's name space. * Provide a generalized method to grant exemptions to package families (screens). - Exempt ELPA packaging scripts for Emacs modules from executable-in-usr-lib. (Closes: #974175) - Exempt GNAT's read-only .ali files from non-standard-file-perm. (Closes: #986400) * Treat NMU edge cases for non-consecutive-debian-revision. (Closes: #942013) * Recommend the newer php-markdown over libmarkdown-php when embedded. (Closes: #898867) * Convert possible-gpl-code-linked-with-openssl to a classification tag. (Closes: #972181) * Turn maybe-not-arch-all-binnmuable into a classification tag. * Combine, rename two confusing debhelper tags. (Closes: #977332) * Warn when trying to issue duplicate hints; provide more context to disambiguate similar hints. * Add --output-width; wrap EWI tag descriptions to width of output terminal otherwise. * Assume that all interactive terminals are hyperlink-capable, but change default to off. * Send all debugging and status information to STDERR. * Drop support for custom visibility levels in profiles. * Prefer spaces over commas as field separators in profiles. * Build test packages automatically when running tests. (Closes: #927476, #935907) * Use semantic versioning for the output of '--version'; omit Git hash from Lintian version strings. * Refer to new website in output. * Update manual references for the first time in almost two years. * Update the JSON data file for Debian policy releases; include all up to 4.6.0.1. * Drop UTF-8 PerlIO layers for STDOUT and STDERR from almost all executables and the test suite. (Closes: #972876, #972878) * Do not pretend to show hashbang in hint context for unusual interpreters. (Closes: #982630) * Treat Testsuite field as a comma-separated list for the teams pkg-perl and pkg-js. (Closes: #976801) * Use current program names in help messages and version announcements. (Closes: #977261) * Allow tilde in names of installed JAR archives. (Closes: #976681) * Flag source packages that declare only tests with the 'superficial' restriction. (Closes: #932870) * Ignore SIGWINCH in the test suite. (Closes: #974575) * For manual pages, extract section information correctly from .TH header. (Closes: #962601) * Recognize Architecture and Classes as valid fields in d/tests/control. (Closes: #977976) * Restructure tags for file permissions; combine tags for setuid/setgid executables. * Detect Rust boilerplate in package descriptions. (See: !344) * Do not fail on dangling symlinks when looking for obsolete, missing or invalid content. (Closes: #978534) * Always print full path to patch files. (Closes: #980247) * Tolerate manual pages for subcommands when main command is documented. (Closes: #947258) * Tighten regex for no-op-testsuite to stop false positives. (Closes: #980824) * Allow environment prefix when recognizing 'dh' sequencer. (Closes: #981712) * Ignore build profiles when requiring dh helper for Python prerequisites. (Closes: #991242) * Ignore build profiles when flagging use of py3versions in d/rules. (Closes: #978144) * Do not flag Python3 entry point definitions as out-of-place documentation. (Closes: #981268) * Flag duplicates in d/py3dist-overrides. (Closes: #980987) * Flag PyPI homepages in source control files. (Closes: #981932) * Flag Rubygem homepages in source control files. (Closes: #981935) * Accept the virtual package dh-sequence-dkms as B-D for 'dh --with-dkms'. (Closes: #982834) * Drop reference to archive keyring from package-installs-apt-sources. (Closes: #983598) * Read error message from Config::Tiny via the advertised mechanism. (Closes: #985064) * Add 'utils.h' to the list of overly generic headers. (Closes: #982322) * Drop package file names from tag context for unknown-field. (Closes: #980560) * Flag backgrounded Test-Commands in autopkgtest declarations. (Closes: #988591) * For multi-component sources, always drop common prefixes for sub-components. (Closes: #976643) * Accept more than two components in architecture wildcards for package relationships. (Closes: #981163) * Add Breaks: lintian-brush (<< 0.88) to debian/control due to failing autopkgtests. * Implement two perltidy policies. * Implement 87 perlcritic policies; disregard four others. * Ignore special attributes like 'remove-on-upgrade' in DEBIAN/conffiles. (Closes: #993531, #993711) * Read checks separately from ./lib and ./checks; forego symbolic link. (Closes: #993651) [ Simon McVittie ] * Update lists of registered build-profile names [ Paul Wise ] * spelling: Add several corrections * Upgrade superficial-tests tag to warning [ Xavier Guimard ] * Verify that nodejs module does not use semantic-release * Fix and simplify search when parsing pkg-js-autopkgtest files. (Closes: #981279) [ Emmanuel Bourg ] * Detect obsolete Servlet API 3.1. (See: !348) [ Alexandre Rossi ] * Recognize empty and very small files as architecture-independent. [ Jelmer Vernooij ] * Fix typo: valgring => valgrind. * Fix archive section mapping for rust development packages. * Check upstream field names in upstream metadata. (Closes: #969762) [ gregor herrmann ] * Add another spelling correction. [ Victor Westerhuis ] * Add --no-rename as a recognized option for dpkg-divert. [ Brian Murray ] * Recognize Ubuntu's next release, named 'impish', among the known-dists. [ Louis-Philippe Véronneau ] * Add check for obsolete installation prerequisite vim-addon-manager. [ Fatih Altun ] * Add profile for Pardus Linux [ Antonio Terceiro ] * Stop suggesting ruby-interpreter as a prerequisite. (See: !365) * Warn about the outdated prerequisite ruby-interpreter. (See: !365) [ Peter Pentchev ] * Adjust to debhelper's new install location for systemd service files. (Closes: #992465) -- Chris Lamb Tue, 07 Sep 2021 09:43:56 +0000 lintian (2.104.0) unstable; urgency=medium [ Baptiste Beauplat ] Recognize the recently-released Standards-Version 4.5.1 as a valid policy version. [ Sylvestre Ledru ] * Accept field X-Cargo-Built-Using for installable packages; they are used by Rust. [ Paul Wise ] * Add several spelling corrections. -- Chris Lamb Fri, 27 Nov 2020 09:20:48 +0000 lintian (2.103.0) unstable; urgency=medium * Summary of tag changes: + Added: - duplicate-override-context [ Felix Lechner ] * Merge subindices for "orig" sources with multiple tarball components. (Closes: #970750, #971597, #972567) * Do not try to drop a common prefix from indices when a file of that name already exists (Closes: #974820) * Ignore dysfunctional output from readelf (for empty archives) and undefined version strings in readelf output. * Announce names used by the maintainer when flagging overrides for renamed tags. (Closes: #972877) * Turn off CSS generation in Pod::Simple::HTMLBatch for reprotest. * Accept Build-Depends-Packages (plural) as a valid field in symbols control files. (Closes: #974971) * Use Pod::Simple::XHTML to generate docs (instead of Pod::Simple::HTML). * Fix detection of an unwanted prefix for "orig" component tarballs without their own folder. * Rename repeating segments when dropping common path prefixes from indices. * Accept renamed tag names in custom profiles. (Closes: #974946) * Collapse successive slashes in file paths extracted from tar(1). * Update data/fields/perl-provides. [ Paul Wise ] * Add several spelling corrections. -- Chris Lamb Sat, 21 Nov 2020 18:22:40 +0000 lintian (2.102.0) unstable; urgency=medium * Summary of tag changes: + Added: - empty-rust-library-declares-provides [ Felix Lechner ] * Do not flag uninstalled examples unless installation packages are present. (Closes: #972614) [ Sylvestre Ledru ] * Rust libraries hitherto used empty installation packages with long Provides lines to deal with peculiarities in Rust packaging. It is no longer considered acceptable because it strains the archive infrastructure, so flag empty Rust libraries that declare Provides. * Provide a tip/clue in case of profile coverage errors. * Fix a typo in the CONTRIBUTING.md file. -- Chris Lamb Fri, 13 Nov 2020 09:57:52 +0000 lintian (2.101.0) unstable; urgency=medium * Summary of tag changes: + Removed: - debian-watch-file-declares-multiple-versions - debian-watch-file-missing-version - debian-watch-file-unknown-version + Added: - missing-debian-watch-file-standard - multiple-debian-watch-file-standards - obsolete-debian-watch-file-standard - older-debian-watch-file-standard - unknown-debian-watch-file-standard [ Felix Lechner ] * Accept postgresql-all as an additional build prerequisite for the pgxs debhelper addon. (Closes: #973503) * Declare debian/watch file version 2 obsolete and flag version 3. (Closes: #973637) * Show full paths for changelog-related tags in installation packages. * In lintian-explain-tags, produce valid JSON output for multiple tags. * Make JSON output reproducible by removing explicit maintainer field. -- Chris Lamb Fri, 06 Nov 2020 09:22:42 +0000 lintian (2.100.0) unstable; urgency=medium * Summary of tag changes: + Added: - bogus-python-prerequisite - python2-script-but-no-python2-dep - python3-script-but-no-python3-dep + Removed: - python-script-but-no-python-dep [ Felix Lechner ] * Update guile versions that are considered valid installation prerequisites. (Closes: #973335) * Flag bogus Python prerequisites from what-is-python. (Closes: #973011) * Fix architecture wildcard logic for override declarations. (Closes: #972595) * Recognize standard installation path for tcsh as /bin. (Closes: #973367) * Do not look into quilt's .pc/ folder during source scans. (Closes: #971973) * Provide a tag HTTP reference that does not change over time. (Closes: #973334) * Drop unversioned Python references from a number of scripts. * Mark testsuite-autopkgtest-missing as the old name for missing-tests-control. (Closes: #972844) [ Louis-Philippe Véronneau ] * Add missing tests for old-dpmt-vcs and old-papt-vcs (and also fix package-is-team-maintained). * Refresh debhelper data using private/refresh-debhelper-data. [ Andrius Merkys ] * Update data/fields/archive-sections to https://metadata.ftp-master.debian.org/sections.822 (as of 2020-10-28). [ Simon Quigley ] * Add "hirsute" as a known Ubuntu distribution. -- Chris Lamb Fri, 30 Oct 2020 08:49:07 +0000 lintian (2.99.0) unstable; urgency=medium [ Chris Lamb ] * Update the declares-possibly-conflicting-debhelper-compat-versions tag as we could be specifying the level in debian/rules or debian/control. (Closes: #972464) [ Louis-Philippe Véronneau ] * Bump severity of the script-uses-unversioned-python-in-shebang tag and reword the warning message. [ Felix Lechner ] * Fix prefix detection for single orig tarball components that only have one directory component. [ Paul Wise ] * Add several spelling corrections and sort the dictionary. -- Chris Lamb Fri, 23 Oct 2020 09:13:20 +0000 lintian (2.98.0) unstable; urgency=medium * Summary of tag changes: + Renamed - missing-depends-line -> undeclared-elf-prerequisites [ Chris Lamb ] * Drop reference to missing manual page. [ Felix Lechner ] * Allow out-of-place documentation for R packages. (Closes: #971740) * Recognize virtual package dh-sequence-nodejs as an alternative to pkg-js-tools. (Closes: #971656) * Reduce read buffer size when duplicating tar stream. (Closes: #971895) * Issue python-module-in-wrong-location only once for each module. * Rename missing-depends-line to undeclared-elf-prerequisites. -- Chris Lamb Fri, 16 Oct 2020 11:12:52 +0000 lintian (2.97.0) unstable; urgency=medium * Summary of tag changes: + Renamed: - papt-dmpt-merged -> python-teams-merged [ Chris Lamb ] * Relax checks around looking for the dh(1) sequencer by not looking for the preceding "target:\n". (Closes: #970920) * Add prominent and up-to-date information on how to run the testsuite. (Closes: #923696) * Drop Colin Watson and Russ Allbery from Uploaders (last upload 10+ years ago) with sincere thanks for their past efforts. * Run wrap-and-sort -sa. [ Louis-Philippe Véronnea ] * Rename "papt-dpmt-merged" to "python-teams-merged". * Document packages needed to run the testsuite. [ Felix Lechner ] * Exempt some SNMP MIB-related files from the package-contains-documentation-outside-usr-share-doc tag. (Closes: #971427) * Amend/update documentation for first contributors. [ Xavier Guimard ] * Update NodeJS checks to accept "dh-sequence-nodejs". -- Chris Lamb Fri, 02 Oct 2020 09:00:30 +0000 lintian (2.96.0) unstable; urgency=medium * Summary of tag changes: + Added: - old-dpmt-vcs - old-papt-vcs - papt-dmpt-merged + Removed: - wrong-vcs-location-for-dpmt - wrong-vcs-location-for-papt [ Chris Lamb ] * Update the expected Vcs-{Browser,Git} location of modules and applications maintained by the Python module team. (Closes: #970743) [ Louis-Philippe Véronneau ] * Update DPMT and PAPT VCS tags for new Python Team. * Add a new papt-dmpt-merged tag for Debian Python Team Maintainer. [ Felix Lechner ] * Enforce code style as part of autopkgtest testing. * Do not install pkg-js-tools as part of running the autopkgtests until path conflicts are resolved. -- Chris Lamb Fri, 25 Sep 2020 10:35:54 +0000 lintian (2.95.0) unstable; urgency=medium * Summary of tag changes: + Added: - no-debian-changes - source-contains-cmake-cache-file - source-contains-debian-substvars + Removed: - empty-debian-diff - missing-versioned-depends-on-init-system-helpers + Renamed: - diff-contains-arch-control-dir -> debian-adds-arch-control-dir (etc.) [ Chris Lamb ] * Clarify which Vcs-* the vcs-field-not-canonical tag is being emitted for, and update its long description to remove misleading messages. (Closes: #970201) [ Felix Lechner ] * Remove the obsolete scripts-missing-versioned-depends-on-init-system-helpers-without tag. (Closes: #932378) * Repurpose diff-contains-* tags to work on all Debian changes in other formats. [ Pino Toscano ] * Also detect duplicate Debian menu files for games. [ Sebastian Ramacher ] * Mark libavresample-dev from ffmpeg as being obsolete in favour of libswresample-dev. [ Xavier Guimard ] * Fix the search for pkg-js-tools tests. -- Chris Lamb Fri, 18 Sep 2020 09:46:19 +0000 lintian (2.94.0) unstable; urgency=medium * Summary of tag changes: + Added: - number-of-patches - unpack-message-for-deb-control - unpack-message-for-deb-data - unpack-message-for-orig - unpack-message-for-source + Removed/merged: - tar-errors-from-control - tar-errors-from-data - tar-errors-from-source [ Chris Lamb ] * Don't emit odd-mark-in-description for large numbers such as "300,000". (Closes: #969528) * Update all "my $LINTIAN_VERSION" instances in binary scripts, not just the ones we specify as we had added and removed some. * Correct a typo in the long description for odd-mark-in-description. * Don't try and open debian/patches/series if it does not exist. * Update CONTRIBUTING.md: - Merge data/README into this file. - Use the "#" Markdown style for headings. - Drop recommendation to update debian/changelog manually. [ Felix Lechner ] * Allow namespaced tags in override files; fix parsing inconsistency. (Closes: #969719) * Rename two utility programs so their names start with 'lintian'. * Widen output when looking for groff errors in manual pages. (Re: #892423) * Allow new Gitlab-style "includes" in CI pipeline specifications. * Adjust private/regenerate-profiles to new tag file extension and regenerate profiles. * Announce match for sensible utils in context of missing-depends-on-sensible-utils. * Move number-of-patches to a separate check file. [ Peter Wienemann ] * Add a new number-of-patches classification tag. [ Dominic Hargreaves ] * Remove obsolete advice regarding alternate depends for dual-lived perl modules in the package-superseded-by-perl tag. [ Simon McVittie ] * data: Use correct separator for all dh addons and commands -- Chris Lamb Fri, 11 Sep 2020 08:31:01 +0000 lintian (2.93.0) unstable; urgency=medium [ Felix Lechner ] * Process display options according to truth value, not presence. (Closes: #969406) * Only announce left over processes in debug mode, fixing autopkgtest failures. * Clean up profile code and drop {VENDOR} notation in profile names. * Support newlines in file names. (Re: #929729) [ Peter Pentchev ] * Ignore *.txt files in Python egg-info directories. [ Reiner Herrmann ] * Add PrefersNonDefaultGPU to known-desktop-keys. -- Chris Lamb Thu, 03 Sep 2020 21:54:58 +0000 lintian (2.92.0) unstable; urgency=medium [ Felix Lechner ] * Drop obsolete output formats ColonSeparated, FullEWI, LetterQualifier and XML. * Provide a Perl-native implementation to index and extract tar files in parallel. (Closes: #968611) * Reduce visibility level of redundant-globbing-patterns to pedantic. (Closes: #967961) * Reset file_info for TeX Font Metric files incorrectly categorized as gzip. (Closes: #963589) * Replace python2 with python3 in debian/tests/control. (Closes: #936952) * Split bin/lintian-info into separate annotate-lintian-hints and explain-lintian-tags. * Drop Lintian version from tag URLs offered in "standalone" HTML mode. * Use Text::Glob to match globbing patterns to file names in debian/copyright. * Remove IO::Async from Depends in debian/control and move to debian/tests/control. * Update tag description files: - Rename file extensions from *.desc to *.tag. - For friendlier field names, rename Info: to Explanation: and Ref: to See-Also: - Use Text::Markdown::Discount to facilitate Markdown content. - Also decode HTML5 entities in plain output; add libhtml-html5-entities-perl to debian/control. - Replace underscores with the _ HTML5 entity. [ Chris Lamb ] * Don't emit patch-not-forwarded-upstream for README files under debian/patches. (Closes: #968845) * Update private/generate-tag-summary to reflect change of tag definition filename extension change from .desc → .tag. [ Dmitry Shachnev ] * Refresh data/files/fonts using refresh-fonts-data script. -- Chris Lamb Fri, 28 Aug 2020 12:29:46 +0100 lintian (2.91.0) unstable; urgency=medium [ Felix Lechner ] * Set most spelling-related tags to info or pedantic level and improve line references for spelling errors in override files. (Re: #968416) * Issue the repeated-path-segments tag only directories only. * For the first time, unpack tarballs in orig index and use centralized streaming unpacker. [ Chris Lamb ] * Clarify the grammar of the package-uses-old-debhelper-compat-version tag. -- Chris Lamb Thu, 20 Aug 2020 21:20:00 +0000 lintian (2.90.0) unstable; urgency=medium [ Felix Lechner ] * Un-deprecate /etc/lintianrc, remove file on upgrade and ship in doc/examples. (Closes: #968326) * Move all executables not meant for shipping to ./private. * Large number of internal changes to use IPC::Run3 over IO::Async. [ Andrius Merkys ] * Fix a typo in the long description of the breakout-link tag. -- Chris Lamb Fri, 14 Aug 2020 08:55:33 +0000 lintian (2.89.0) unstable; urgency=medium * Summary of tag changes: + Added: - systemd-service-file-uses-deprecated-syslog-facility - systemd-service-file-uses-nobody-or-nogroup [ Chris Lamb ] * Check for User=nobody and Group=nogroup in systemd .service files. (Closes: #966623) * Check for StandardOutput= and StandardError= that uses the deprecated "syslog" or "syslog-console" facility. (Closes: #966617) * Fix a false positive with no-dh-sequencer due to target dependency. (Closes: #968108) * Drop an unused $skip_tag argument to "extract_service_file_values" routine. [ Felix Lechner ] * Prefer settings in configuration files over other defaults and allow command line to override both. (Closes: #968067) * Add unzip to Depends in debian/control and drop from debian/tests/control. Also add lzop to Depends in d/control. (Closes: 968041) -- Chris Lamb Mon, 10 Aug 2020 09:59:45 +0000 lintian (2.88.0) unstable; urgency=medium [ Felix Lechner ] * For DEP-5 copyrights, disregard the debian/ folder in upstream sources. (Closes: #967226) * In the files/compressed/lz check, do not stat(2) lzip command for every file in the index. * Move executables from ./frontend to ./bin and set indirect links from /usr/bin. Also move our test executables from t/bin to ./bin. * Install the Lintian library modules to /usr/share/lintian/lib. * Use Perl's FindBin to reliably detect the base directory for Lintian. * Stop installing Test modules in Perl system path. * Split lintian, lintian-info and spellintian into three independent scripts. -- Chris Lamb Fri, 07 Aug 2020 12:13:12 +0000 lintian (2.87.0) unstable; urgency=medium [ Chris Lamb ] * Add support for clzip as an alternative for lzip. (Closes: #967083) * Add justification for lzip dependency in previous debian/changelog entry. (Closes: #966817) [ Felix Lechner ] * Run no tests when building to reduce Build-Depends and drop the nocheck build profile as a consequence. * Replace frontend/dplint with a simpler startup script at frontend/lintian. -- Chris Lamb Tue, 04 Aug 2020 11:53:25 +0000 lintian (2.86.0) unstable; urgency=medium [ Felix Lechner ] * Revert running each check in a separate process to prevent some file descriptor regression. (Closes: #966122, #966368) * Also consider pseudo-headers allowed by DEP-3 when examining patches. (Closes: #966024) * Do not issue the patch-not-forwarded-upstream tag when Origin: is upstream or backport. (Closes: #966140) * Analyse matching behavior and relative order of globbing patterns in debian/copyright. (Closes: #905747) * Rename two similar tags related to Rules-Requires-Root. * Flag overrides with mismatched context separately from those that are not used. * Wait for each lexgrog and man and convert documentation/manual check to IPC::Run3. (Closes: #966072) * Salsa setup: - Set CCACHE_DISABLE in t/bin/build-test-packages; otherwise standard Salsa CI pipelines will fail. - Use the Salsa CI team's standard pipeline instead of Lintian's custom CI setup. * Remove three obsolete tags from pkg-perl team checks. * Add lzip to Depends and Build-Depends. Due to a particularity in the implementation of safe_qx via IO::Async it was not recognised as a requirement until now. [ Chris Lamb ] * Avoid false-positives when matching sensible-utils utilities (eg. "i3-sensible-pager"). (Closes: #966022) * Rename send-patch to patch-not-forwarded-upstream; tag names should ideally be descriptions of the world, not instructions. Update regex to search for released version numbers in a .changes file. -- Chris Lamb Sat, 01 Aug 2020 14:41:32 +0000 lintian (2.85.0) unstable; urgency=medium [ Felix Lechner ] * Fix wildcard-matches-nothing-in-dep5-copyright. (Closes: #888001) * Don't emit send-patch when Applied-Upstream is set. (Closes: #965119) * Disregard watch files containing only comments. (Closes: #965385) * Account properly for license identifiers in debian/copyright and split wildcard matching from license parsing. (Closes: #779676) * Expect only {S,B,C} to be capitalised when following a leading X in field names. (Closes: #965966) * Add test case demonstrating false-positive for dep5-copyright-license-name-not-unique is fixed. (Closes: #801182) * Parse lists of distributions in changes files. * Add a test case for email address with missing closing bracket. (Re: #965335) * Move Salsa CI specification to debian/salsa-ci.yml. [ gregor herrmann ] * Add another debian/copyright template. [ Axel Beckert ] * Replace debhelper level 12 with 13 in tag descriptions examples. * Add correction for a "debhelper" misspelling and correct in some previous changelog entries. [ Chris Lamb ] * Drop reminders from 26 tags that false-positives should be reported to Lintian as this is implicit in all ~1,500 tags. -- Chris Lamb Tue, 21 Jul 2020 22:02:39 +0000 lintian (2.84.0) unstable; urgency=medium * Summary of tag changes: + Added: - arch-any-package-needs-newer-cdbs - autopkgtest-needs-use-name - include - legacy-vendorarch-directory - missing-tests-control - module-build-tiny-needs-newer-cdbs - module-build-tiny-needs-newer-debhelper - no-git - no-team-tests - no-team-url - no-tests - no-testsuite-header - nodejs-bad-buffer-usage - send-patch - specification + Removed: - inconsistent-testsuite-field - testsuite-autopkgtest-missing [ Felix Lechner ] * Strip architecture from two filenames in tests, and ignore tags seen only on some architectures as it causes autopkgtest regressions on arm64. * Unconditionally allow /dev/null as a symlink target in source packages. (Re: #964111) * Fix national-encoding for DEP-3 patches without quilt notice. (Closes: #964281) * Add a reminder to send forwardable DEP-3 patches upstream. (Closes: #755153) * Add two classification tags for Salsa CI detection. * For testsuites, parse debian/control instead of .dsc and drop the inconsistent-testsuite-field tag. * Convert program error for missing test fields to a tag and reinstate old tag under new name. * Removed debhelper compat 5 and 6 from tests. * Allow optional, private namespaces for tags. (Re: #943525) * Merge all checks and tags from pkg-perl and pkg-js. * For R API version parsing, allow any character that is legal in package names. (Re: #961709) [ Trek ] * Exclude some more templated (ie. "@") systemd .service files. -- Chris Lamb Wed, 15 Jul 2020 22:15:30 +0000 lintian (2.83.0) unstable; urgency=medium [ Felix Lechner ] * Add a new standalone HTML output mode. * Warn about embedded javascript files provided by sphinx. (Closes: #964013) * Exempt links that stay inside /usr/lib from breakout-link. (Closes: #964073) * Rename second mention of tag manpage-in-wrong-directory. (Closes: #964282) * Extend spell check to all parts of debhelper rule targets. (Closes: #963765) * Only check the DEP-3 header for legacy encodings in debian/patches. (Closes: #964281) * Restrict top folder for breakout-link to architecture in /usr/lib and permit links freely within. (Closes: #964073) * Use the new path to test recipes in autopkgtest. (Closes: #964405) * Drop a test no longer building due to new restraints on version strings. (See: #953554) * Exempt Lintian's own test suite from scans in source files and remove programmatic conditionals in checks. * Replace references to 'manpages' with 'manual pages' in tag descriptions. [ Chris Lamb ] * Correct a reference to "override_dh_" in the long description of the excessive-debhelper-overrides tag. [ Lev Lamberov ] * Update Debian Emacsen team wiki page link. [ Paul Wise ] * Add several spelling corrections. -- Chris Lamb Tue, 07 Jul 2020 22:50:19 +0000 lintian (2.82.0) unstable; urgency=medium [ Felix Lechner ] * Replace files ignored by dpkg-source in dpkg-source; their absence was causing a FTBFS on the official buildds. * Drop two legacy tests that produced architecture-specific tags but were not needed. [ Dmitry Shachnev ] * Add sphinx as a possible build-dependency for dh_sphinxdoc. -- Chris Lamb Fri, 26 Jun 2020 11:58:12 +0000 lintian (2.81.0) unstable; urgency=medium [ Felix Lechner ] * Remove command line option --fail-on from the settings in configuration files. (Closes: #962157) * Use UTF-8 codepoint for copyright sign in copyright files. (Closes: #961975) * Add tag for architecture-specific paths in debian/not-installed. (Closes: #961973) * Rename tag to recursive-privilege-change and explain usage of runuser(1). (Closes: #895597) * Do not enable Perl warnings globally to reduce output clutter from external modules. * In debian/control, add dh-r to Build-Depends. (See: #961709) * Add two test cases from Ansgar's 'colorful' test package. (See: #962277) * Drop Email::Valid as obsolete and use regex to check emails for fully qualified hosts. (See: #962277) * Flag the use of acute accents in manpages. (Closes: #554897) * Flag ANSI escape characters in all fields of primary packaging control files. (See: #962277) * In check menus, title-case the hash keys representing field labels to make the tag context more human-readable. * Rename tag for mailing list on Alioth and convert to classification tag. (Closes: #962448) * Add a classification tag for field contents in primary package control files. * Find the correct section when looking at combined manpages. (Closes: #962601) * Read manual references as UTF-8 to show "en" dash correctly. (Closes: #904885) * Issue 'required-field' and 'recommended-field' tagsper Debian Policy section 5 instead of field-specific tags. * Fix mail host validation in debian/changelog and rename tag for bogus hosts. * Do not allow unsafe symlinks in autopkgtests. (Closes: #954860) * Broaden tag descriptions for lower custom compression settings. (Closes: #909696) * Do not impose a umask when running tests as it partially obscured a bug in Dpkg. (See: #945869 & #796257) * Emit a classification tags with octal file permissions for all files sources and installables. (See: #945869, #796257) * Reset process umask before unpacking source tarballs. (Closes: #945869) * Use case-sensitive field names in control files, package relations, debconf templates and autopkgtest files. * Mark commas not followed by whitespace in package descriptions. (Closes: #591665) * Do not use the Bash shell when syntax checking maintainer scripts using /bin/sh. (Closes: #954459) * Point out variant spellings of field names in control files. * Use case-sensitive Deb822 parser for profiles, tags, checks, internal harness tests,private scripts, and in readelf data within Processable::Objdump. * Add new tag breakout-link for such links in /usr/lib. (Closes: #243158) * Stop exempting files in debian/missing-sources from source-is-missing. (See: #962583) * Provide test case with JS sources in subdir of d/missing-sources. (Closes: #962583) * Issue tag for repeated path segments in installed files. (Closes: #950052) * Restore case-invariant access to control fields, per Debian Policy section 5.1. * Add an internal harness test requiring a declared diagnostic value for tag-related test. (Closes: #962671) * Parse mail addresses in package control fields in one place and validate domains using Data::Validate::Domain. * Add new checks for maintainer-provided manpages and desktop entries. (Closes: #755161) * Restore program failure when error tags are found. (Closes: #962158) * Rename documentation/man to documentation/manual and debian/manpages to debian/manual-pages. Also rename tags that refer to a 'manpage' to 'manual-page' or another name. * Combine various national encoding tags into one and issue all in one check. * Rename new item-looping entry points in checks as not all items are files. * Provide script diagnostics in the "control index". * Remove conflict between no-template-description and untranslatable-debconf-templates. (Closes: #914256) [ Chris Lamb ] * Update data/fields/perl-provides for Perl 5.030003. [ Paul Wise ] * Add several corrections and sort using the UTF-8 locale. [ Dylan Aïssi ] * Add the requires-r-api and ships-r-site-library tags for the R statistics language. (Closes: #961709) [ Mo Zhou ] * Add a new "linked-with-obsolete-library" tag; marks only libcblas from the Debian Science team for now. [ Rafael Laboissière ] * Fix false positives in the no-dh-sequencer tag when Makefile command prefixes (eg. "+") are used. (Closes: #963212) -- Chris Lamb Tue, 23 Jun 2020 09:47:18 +0100 lintian (2.80.0) unstable; urgency=medium * Summary of tag changes: + Added: - national-encoding-in-text-file [ Chris Lamb ] * Check for execute_after/execute_before spelling mistakes, etc., just like for override_. [ Felix Lechner ] * Add check for nationally encoded text files in installation packages. (Closes: #796170) * Mention discussion about allowing some paths for the script-not-executable tag. (Closes: #368792) * Fix regex for Guile bytecode with respect to ELF-related tags. (Closes: #961961) [ Paul Wise ] * Add several spelling corrections. -- Chris Lamb Wed, 03 Jun 2020 09:30:24 +0000 lintian (2.79.0) unstable; urgency=medium [ Felix Lechner ] * Perform a mass-rename of tags for consistency according to the RFC. (Closes: #922544) * Use Email::Address::XS to parse all address components. (Closes: #961924) * Replace configuration option LINTIAN_PROFILE with 'profile'. (Closes: #961855) * Combine tags for missing native and non-native changelogs in installation packages. (Closes: #935072) * Clarify tag names related to shlibs control and shared libraries. (Closes: #534938) [ Paul Wise ] * Add several spelling corrections. -- Chris Lamb Mon, 01 Jun 2020 09:16:03 +0000 lintian (2.78.0) unstable; urgency=medium * Summary of tag changes: + Added: - maintainer - uploader + Renamed/split: - changed-by-address-looks-weird & changed-by-address-missing -> malformed-changed-by-field - maintainer-address-looks-weird & maintainer-address-missing -> malformed-maintainer-field - uploader-address-looks-weird -> malformed-uploaders-field [ Felix Lechner ] * Use settings from configuration files when they were previously undefined. (Closes: #961802) * Accept some environmental variables as valid keys in the configuration file. (Closes: #961800) * Use Email::Address::XS to parse fields for Maintainer, Uploaders etc. * Consider renamed tags when ignoring unknown tags obtained from ftpmaster. [ Raul Benencia ] * Add section numbering to the user manual. [ Paul Wise ] * Add several spelling corrections. -- Chris Lamb Sat, 30 May 2020 09:15:59 +0000 lintian (2.77.1) unstable; urgency=medium [ Felix Lechner ] * Deal gracefully with empty configuration files. (Closes: #961684) * Amend a tag description with how to add missing upstream signatures to the archive. (Closes: #954743) -- Chris Lamb Wed, 27 May 2020 22:07:44 +0000 lintian (2.77.0) unstable; urgency=medium [ Simon Quigley ] * Add a new --fail-on command-line option for more control over the exit status. (Closes: #709932) [ Felix Lechner ] * Fix several 'TODO' tests using the "literal" match strategy. (Closes: #921112) * Reverse the exit statuses for program errors and policy violations. (Re: #709932) * Pin installation of debhelper to -backports in the continuous integration pipeline for buster. * Use the Config::Tiny Perl module to parse configuration files. * Merge two stages of the Gitlab CI pipeline. [ Peter Pentchev ] * Fix a Python 2.x -> 3.x typo in a tag description. [ Chris Lamb ] * Refresh data/fields/perl-provides. [ Paul Wise ] * Add several spelling corrections. -- Chris Lamb Wed, 27 May 2020 09:13:37 +0000 lintian (2.76.0) unstable; urgency=medium * Summary of tag changes: + Added: - depends-on-misc-pre-depends [ Chris Lamb ] * Check for packages that include ${misc:Pre-Depends) in the Depends field. (Closes: #961290) [ Raul Benencia ] * Fix "em" dashes in Lintian manual. [ Paul Wise ] * Add several spelling corrections. * Capitalise "Verilog" spelling correction. [ Felix Lechner ] * In the CI pipelines, request more detailed output when installing build prerequisites. * Ignore unknown tags when generating profiles and disconnect the "main" profile from "ftp-master-auto-reject" [ Simon Quigley ] * Allow for non-Debian profiles to specify the location of Debian VCSes. -- Chris Lamb Sat, 23 May 2020 09:31:35 +0000 lintian (2.75.0) unstable; urgency=medium [ Chris Lamb ] * Clarify the error messge when the file specified to check does not exist. (Closes: #960970) [ Felix Lechner ] * Strip comments in debian/rules correctly. -- Chris Lamb Tue, 19 May 2020 12:14:01 +0000 lintian (2.74.0) unstable; urgency=medium [ Chris Lamb ] * Ignore comments when checking for no-dh-sequencer. (Closes: #960485) * Allow the stable-bpo and stable-bpo-test-packages Gitlab CI pipelines on Salsa to pass for now. -- Chris Lamb Sat, 16 May 2020 12:33:09 +0000 lintian (2.73.0) unstable; urgency=medium * Summary of tag changes: + Added: - desktop-entry-unknown-type - homepage-refers-to-filesystem-listing [ Chris Lamb ] * Add dh_gnome (and dh_gnome_clean) as an explicit alternative to dh-sequence-gnome in debhelper/dh_commands-manual. (Closes: #958500) * Factor out matching Homepage fields to data/fields/bad-homepages. * Check for Homepage fields that point to filesystem directory listings. (Closes: #960366) [ Kari Pahula ] * Warn about unknown file types in desktop files. -- Chris Lamb Tue, 12 May 2020 21:57:51 +0000 lintian (2.72.0) unstable; urgency=medium * Summary of tag changes: + Added: - package-contains-icon-cache-in-generic-dir [ Chris Lamb ] * Check for packages installing /usr/share/icons/hicolor/icon-theme.cache as they will invariably clash with other packages. (Closes: #959855) [ Paul Wise ] * Add "tigris.org" to the list of obsolete sites. * Add several spelling corrections [ Alex Muntada ] * Correct the spelling of "XDG_DIR". [ Felix Lechner ] * Use aspcud solver in apt like the experimental buildds in an attempt to restore Gitlab continuous integration tests. * Ensure apt-get is non-interactive when installing apt-cudf and use the cache. -- Chris Lamb Sat, 09 May 2020 13:14:55 +0000 lintian (2.71.0) unstable; urgency=medium * Mark the debian-rules-uses-as-needed-linker-flag tag as being pedantic & experimental until (at least) the release of bullseye. Thanks to Mattia Rizzolo and Christian Kastner. (Closes: #959696) * Replace "Copyright (C)" with the Unicode copyright symbol in our own code for consistency and update my copyright years. -- Chris Lamb Tue, 05 May 2020 18:17:01 +0000 lintian (2.70.0) unstable; urgency=medium * Summary of tag changes: + Added: - non-debug-file-in-debug-package [ Chris Lamb ] * Warn about automatically-generated debug packages that ship files other than .debug. (Closes: #958945) [ Axel Beckert ] * Fix misleading typo in the long description of the testsuite-dependency-has-unparsable-elements tag. [ Felix Lechner ] * Exempt udebs from executable-in-usr-lib. (Closes: #959037) * Fix text and formatting in tag description for portable-executable-missing-security-features. (Re: #953212) * Explain ordering of standalone License and Files paragraphs in the description of missing-license-paragraph-in-dep5-copyright tag. (Closes: #959067) * Decouple a Debhelper-related tag description from the currently recommended level. (Closes: #959126) -- Chris Lamb Sat, 02 May 2020 12:45:14 +0000 lintian (2.69.0) unstable; urgency=medium * Summary of tag changes: + Removed: - pre-depends-directly-on-multiarch-support [ Chris Lamb ] * Ignore build profiles when checking packages for "py3versions -s" without the corresponding Build-Depends. (Closes: #958794) * Remove the pre-depends-directly-on-multiarch-support tag; any package pre-depending on multiarch-support will not be installable in bullseye. (Closes: #798762) * Move debhelper itself to compatibility level 13 so it does not emit package-uses-old-debhelper-compat-version for itself. [ Felix Lechner ] * Bump recommended debhelper compat-level to 13; move experimental to 14. (Closes: #958932) * Fix common prefix detection for extracted tar files. (Closes: #958845) -- Chris Lamb Tue, 28 Apr 2020 19:46:15 +0000 lintian (2.68.0) unstable; urgency=medium [ Chris Lamb ] * Mark mailing-list-obsolete-in-debian-infrastructure as being experimental, essentially hiding it. (Closes: #958666) * Warn about packages --with=systemd with a debhelper compatibility level of 10 or higher. (Closes: #949844) [ Michael Biebl ] * Stop recommending dh-systemd as a Build-Depends alternative in the long description of maintainer-script-calls-systemctl. [ Simon Quigley ] * Add "groovy" as a known Ubuntu distribution. -- Chris Lamb Sat, 25 Apr 2020 08:54:19 +0000 lintian (2.67.0) unstable; urgency=medium * Summary of tag changes: + Added: - debian-rules-uses-as-needed-linker-flag - mailing-list-obsolete-in-debian-infrastructure - native-source-file-without-utf8-name [ Axel Beckert ] * Stop correcting "extraversion" to "extroversion" as it causes false positives. [ Chris Lamb ] * Add a warning regarding lists.alioth.debian.org mailing list addresses. (Closes: #958182) * Check for debian/rules files that specify -Wl,--as-needed as this is now the default linking method from bullseye. (Closes: #956146) * Detect "dh $*" as using the Debhelper sequencer. (Closes: #930679) * Also check for "override dh_install" in debian/rules; in 99% of cases this will be an omission of an underscore. [ Felix Lechner ] * Do not check for circular root references when a file index is empty. (Closes: #958113) * Do not prompt for password for encrypted zip members. (Closes: #935292) * Fix the output for JSON; it is encoded already. * Dynamically generate file names that are not valid UTF-8 in tests. * Add new tag for non-UTF-8 file name in the source tree. [ Vincent Blut ] * Add 'needs-internet' to the list of permitted values for the restrictions field in autopkgtest control files. -- Chris Lamb Thu, 23 Apr 2020 10:21:16 +0000 lintian (2.66.0) unstable; urgency=medium * Summary of tag changes: + Added: - patched-file-without-utf8-name - upstream-file-without-utf8-name + Renamed: - file-name-is-not-valid-UTF-8 -> shipped-file-without-utf8-name [ Chris Lamb ] * Build-Depends-Arch and Build-Depends-Indep do not imply each other so don't warn about "duplicate" dependencies in this case. (Closes: #956368) [ Felix Lechner ] * Warn about invalid UTF-8 file names in package sources. (Closes: #956723) * Downgrade internal uft8 flags on all file system paths delivered by File::Path. (Re: #956233, #956723) * Rename shipped-file-without-utf8-name from file-name-is-not-valid-UTF-8. (Re: #956723) [ Sandro Tosi ] * Switch all checks, tests and tags over to use python3-numpy away from the legacy Python 2.x version. -- Chris Lamb Fri, 17 Apr 2020 17:35:15 +0000 lintian (2.65.0) unstable; urgency=medium * Summary of tag changes: + Renamed: - description-too-long -> synopsis-too-long [ Chris Lamb ] * Allow python3-all-dev and python3-all-dbg to satisfy the check for packages that use "py3versions -s". (Closes: #955799, #956134) * Don't warn about package-relation-with-self if we have specified a required architecture; assume the maintainer knows what they are doing in these cases. (Closes: #956227) [ Felix Lechner ] * Parse debian/changelog in source packages as UTF-8. (Closes: #956151) * Improve line count in the fields/description check, renaming the tag to synopsis-too-long. * Speed up indexing for patched files from source packages. * Significantly speed up parsing of output from md5sums(1). * Also speed up parsing of magic file-info output from file(1). [ Paul Wise ] * Add several spelling corrections. -- Chris Lamb Fri, 10 Apr 2020 10:03:11 +0000 lintian (2.64.0) unstable; urgency=medium [ Felix Lechner ] * Do not check for conffiles in udebs. (Closes: #956077) -- Chris Lamb Tue, 07 Apr 2020 07:17:57 +0000 lintian (2.63.0) unstable; urgency=medium * Summary of tag changes: + Added: - national-encoding-in-debconf-template [ Chris Lamb ] * Do not warn about empty dh_dwz-generated "multifiles". (Closes: #955752) [ Felix Lechner ] * Assume that all dpkg-style configuration files are encoded in UTF-8. * Do not strip relative prefixes or extra slashes from wildcards in debian/copyright files. (Closes: #955538) * Add an experimental JSON output format. * Prefer PerlIO layer :encoding(UTF-8) over :utf8 everywhere. [ Paul Wise ] * Add several spelling corrections. -- Chris Lamb Mon, 06 Apr 2020 09:41:12 +0000 lintian (2.62.0) unstable; urgency=medium * Summary of tag changes: + Added: - broken-{bz2,gz,lz,lzma,lzo,xz,zip} - named-copyright-for-single-installable - no-debian-copyright-in-source - no-newline-at-end + Removed: - binary-is-wrong-architecture - field-name-typo-in-dep5-copyright - gz-file-not-gzip - no-debian-copyright [ Chris Lamb ] * Don't emit duplicate-short-description or duplicate-long-description if they contain substitution variables. (Closes: #947168) * Drop .travis.yml file; we are using Salsa now. [ Felix Lechner ] * Require Perl 5.20 and use "pragma utf8" throughout. * Remove the xdeb check. (Closes: #954415) * Check for broken gz, xz, zip, lz, lzo and lzma files. (Closes: #702545) * Rename no-debian-copyright to no-debian-copyright-in-source. * Add a new named-copyright-for-single-installable tag. * Remove the field-name-typo-in-dep5-copyright tag. * Add a new no-newline-at-end tag to check specific files for a newline at EOF. [ Paul Wise ] * Add several spelling corrections. * Sort the spelling dictionary. -- Chris Lamb Thu, 02 Apr 2020 16:02:11 +0000 lintian (2.61.0) unstable; urgency=medium * Summary of tag changes: + Added: - debian-rules-uses-installed-python-versions - debian-rules-uses-supported-python-versions-without-python-all-build-depends - runtime-test-file-uses-supported-python-versions-without-python-all-build-depends [ Axel Beckert ] * Switch links to http://refspecs.linuxfoundation.org to use HTTPS. [ Chris Lamb ] * Warn when "py3versions -s" is used without a python3-all dependency. (Closes: #954763, #954868) * Improve checking for "py3versions -i" in autopkgtests and also check debian/rules files too. * Make some cosmetic improvements to CONTRIBUTING.md. * Correct reference to bug in previous changelog entry. [ Felix Lechner ] * Do not issue any tags for udebs in when checking md5sums. (Closes: #954803) * Simplify mechanism when looking for foreign architectures. (Re: #954415) [ Paul Wise ] * Add several spelling corrections. -- Chris Lamb Mon, 30 Mar 2020 10:33:17 +0000 lintian (2.60.0) unstable; urgency=medium * Summary of tag changes: + Added: - runtime-test-file-uses-installed-python-versions - upstream-metadata-not-yaml-mapping [ Chris Lamb ] * Do not check the length of Checksums-Sha256 fields. (Closes: #954798) * Don't check for an md5sums control files in udebs. (Closes: #954803) * Expand possible-missing-colon-in-closes to also check for semicolons used in place of colons. (Closes: #954484) * Check for calls to py3versions -i in autopkgtests. (Closes: #954763) [ Felix Lechner ] * Do not run the fields/length check on .changes or .buildinfo files. (Closes: #954798) * Check for upstream metadata without a YAML mapping at the "document" level. [ Scott Kitterman ] * Update "old" and "ancient" python-version-field tags descriptions to suggest also checking for incorrect use of "py3versons -r". (Closes: #954819) -- Chris Lamb Wed, 25 Mar 2020 10:56:21 +0000 lintian (2.59.0) unstable; urgency=medium [ Chris Lamb ] * Remove some annotations. Thnaks to gregoa for the patch. (Closes: #954338) [ Felix Lechner ] * Do not check the length of the Installed-Build-Depends field. (Closes: #954341) * Disable checks for man pages, copyright and changelog in udebs. (Closes: #954428) * Update an expected XML output and regular expression for a reproducible build. -- Chris Lamb Sun, 22 Mar 2020 20:22:08 +0000 lintian (2.58.0) unstable; urgency=medium * Summary of tag changes: + Added: - executable-in-usr-lib [ Felix Lechner ] * Fix interaction between two gzip timestamp tags. (Closes: #954146) * In terminal output, print overrides in a subdued color. (Closes: #954224) * Add tag and check for executables in /usr/lib, which violates the FHS. (Closes: #954149) * Use the "Severity" field in tags to determine their display prominence directly. (Closes: #935706) * Remove temporary directories for pools when they are no longer needed. (Closes: #924449) -- Chris Lamb Fri, 20 Mar 2020 09:56:18 +0000 lintian (2.57.0) unstable; urgency=medium * Summary of tag changes: + Added: - absolute-symbolic-link-target-in-source - bash-completion-with-hashbang - binary-is-wrong-architecture - copyright-excludes-files-in-native-package - explicit-default-in-package-type - new-package-uses-date-based-version-number - upstream-metadata-missing-bug-tracking - upstream-metadata-missing-repository + Removed: - pkg-config-references-unknown-shared-library [ Chris Lamb ] * Check for debian/upstream/metadata files without bug tracking information and upstream repository locations. (Closes: #950115, #950117) * Check for new packages that use a date-based versioning scheme (eg. YYYYMMDD-1) without a 0~ suffix. (Closes: #953036) * Don't report about using a newer Standards-Version when uploading to backports. * Clarify the error message when tags are not covered in the testsuite. [ Felix Lechner ] * Also analyse Ubuntu's automatic debug packages which have the non-standard suffix .ddeb. (Closes: #951513, #953857) * Parse newline escapes correctly in md5sum files. (Closes: #929729) * Remove tag pkg-config-references-unknown-shared-library; outside of Lintian's purview. (Closes: #953099) * Rewrite check for compressed gzip archives; print modification time of first member. (Re: #762105) * Add a new tag called bash-completion-with-hashbang. * Add tag and check for absolute symbolic link targets in source trees. * Reduce severity and mark PE32+ related tag experimental; set security features for test binary explicitly. * Offer to calibrate test results for literal matching strategy. * Strip leading slashes from absolute paths for file names and hard link targets. * Issue a tag when the Excluded-Files field is present in copyright within native packages. * Display Lintian's command-line options in the process table (eg. top(1), etc.) [ Paul Wise ] * Add several spelling corrections. [ Xavier Guimard ] * Extend NodeJS checks to modules that use naming such as "@foo/bar". -- Chris Lamb Mon, 16 Mar 2020 23:21:34 +0000 lintian (2.56.0) unstable; urgency=medium * Summary of tag changes: + Added: - nodejs-lock-file [ Chris Lamb ] * Check for NO_START and FOO_NO_START etc. in /etc/default scripts. (Closes: #950238) * Deprecate debhelper compat level 9. (Closes: #950453) [ Felix Lechner ] * Fix POD markup in man page; indent level caused literal display of formatting codes. (Closes: #952529) * Fix the selection of classification tags with -T command line switch. (Closes: #952539) * Use JSON::MaybeXS instead of plain JSON in the NodeJS checks. * Remove and replace the open_gz, open and file_contents subroutines from File::Path. * Provide method for all ->descendants in File::Path and use it, retiring breadth-first recursion. [ Xavier Guimard ] * Check if NodeJS modules install lock files. -- Chris Lamb Wed, 26 Feb 2020 18:30:19 +0000 lintian (2.55.0) unstable; urgency=medium * Summary of tag changes: + Added: - adduser-with-home-var-run [ Chris Lamb ] * Emit rules-requires-root-explicitly for values other than "binary-targets". (Closes: #951650) [ Felix Lechner ] * In checks related to debian/copyright DEP-5 parsing, use the 'patched' to match files. (Closes: #951760) * Do not sort hard links when printing tag as the order is predetermined in File::Index. * For directories, File::Path->basename no longer returns a trailing slash. * Add libdevel-size-perl to Depends and Build-Depends. * Correct false positives for missing systemd keys. [ Topi Miettinen ] * Add check for adduser --home /var/run in {pre,post}inst. -- Chris Lamb Sun, 23 Feb 2020 17:43:29 +0000 lintian (2.54.0) unstable; urgency=medium [ Chris Lamb ] * Also permit millisecond-resolution timestamps in tar archives. (Closes: #951594) [ Felix Lechner ] * Parse the output of the md5sum utility properly in all circumstances. (Closes: #951136) * Parse file indices for .deb files with a new utility in Lintian::File::Path. (Closes: #929729) * Revert adding libdata-parsebinary-perl to Depends and Build-Depends and related functionality; Data::ParseBinary did not function as required. [ Xavier Guimard ] * Replace the deprecated node-uglify with uglifyjs in build dependencies. -- Chris Lamb Thu, 20 Feb 2020 20:42:40 +0000 lintian (2.53.0) unstable; urgency=medium * Summary of tag changes: + Added: - nodejs-module-not-declared [ Xavier Guimard ] * Check if Node.js modules installed in the Node.js root directories are declared in the "Provides:" field. [ Felix Lechner ] * Parse tarball file listings using tar's C quoting style. (Closes: #950589) -- Chris Lamb Sun, 16 Feb 2020 20:08:35 +0000 lintian (2.52.0) unstable; urgency=medium * Summary of tag changes: + Added: - nodejs-module - nodejs-module-installed-in-bad-directory - symlink-target-in-build-tree - symlink-target-in-tmp [ Xavier Guimard ] * Add classification tags for nodejs modules in order to check if modules are installed in a directory with another name. [ Felix Lechner ] * Suppress inconsistent-maintainer on derivatives. (LP: #1862787) * Differentiate dir-or-file-in-build-tree and dir-or-file-in-tmp into the symlink-target-in-build-tree symlink-target-in-tmp tags. -- Chris Lamb Thu, 13 Feb 2020 12:18:18 +0000 lintian (2.51.0) unstable; urgency=medium * Summary of tag changes: + Added: - debian-watch-upstream-component [ Peter Pentchev ] * Allow quoted "$@" arguments when checking for no-dh-sequencer. [ Xavier Guimard ] * Add debian-watch-upstream-component classification tag. -- Chris Lamb Mon, 10 Feb 2020 11:53:42 +0000 lintian (2.50.0) unstable; urgency=medium * Summary of tag changes: + Added: - debian-watch-line-invalid [ Felix Lechner ] * In watch files, allow spaces between options when commas are present. (Closes: #950250, #950277) * Add a new "debian-watch-line-invalid" for watch lines that fail to parse. [ Andrius Merkys ] * Fix '<' and '>' in the long description of pkg-js-autopkgtest-test-is-missing. -- Chris Lamb Fri, 07 Feb 2020 13:05:25 +0000 lintian (2.49.0) unstable; urgency=medium * Summary of tag changes: + Added: - upstream-metadata-exists - upstream-metadata-field-present - upstream-metadata-in-native-source [ Felix Lechner ] * Issue new classification tags upstream-metadata-exists and upstream-metadata-field-present. (Closes: #950115, #950117) * Clarify meaning of 'arch dependent' in tag description for tags/n/nodejs-module-installed-in-usr-lib.desc. (Closes: #950231) * Reword tag description for unused-file-paragraph-in-dep5-copyright. (Closes: #950471) * Add new upstream-metadata-in-native-source tag. * Free up lab space unconditionally and as part of regular processing. (re: #924449) -- Chris Lamb Tue, 04 Feb 2020 16:47:30 +0000 lintian (2.48.0) unstable; urgency=medium [ Felix Lechner ] * Return the correct status code for successful collection tasks. (Closes: #949805) * Correctly order classification tags in output. (Closes: #949797) * For one i386-only test package, only build it on i386. (Closes: #949066) * Remove data/override/renamed-tags; they are defined in the tag declarations now. -- Chris Lamb Wed, 29 Jan 2020 10:21:40 +0000 lintian (2.47.0) unstable; urgency=medium * Summary of tag changes: + Added: - empty-field - source-contains-prebuilt-yapp-parser + Removed: - empty-section-field - latest-debian-changelog-entry-without-new-version + Renamed: - fortran-module-does-not-declare-version -> gfortran-module-does-not-declare-version - missing-prerequisite-for-fortran-module -> - missing-prerequisite-for-gfortran-module [ Chris Lamb ] * Recognise 4.5.0 as the latest Standards-Version. * Ensure that Lintian itself is "Lintian clean" by not warning about our Yapp::Parser test fixture. [ Felix Lechner ] * Skip only empty lines when packages to be checked are specified in a file. (Closes: #949398) * Add a check for empty fields in binary packages. (Closes: #879809) * Check for prebuilt Parse::Yapp parser files. (Closes: #921080) * Remove tag latest-debian-changelog-entry-without-new-version. (Closes: #935070) * Look at binaries from entire group when finding unused manpages. (Closes: #949063) * Exclude "flang" modules from the check for GFortran modules. (Closes: #948033) -- Chris Lamb Fri, 24 Jan 2020 11:15:46 +0000 lintian (2.46.0) unstable; urgency=medium [ Gianfranco Costamagna ] * Build Lintian with the new "python2" package. (Closes: #949065) -- Chris Lamb Sun, 19 Jan 2020 10:06:28 +0000 lintian (2.45.0) unstable; urgency=medium * Summary of tag changes: + Renamed: - systemd-service-file-pidfile-refers-to-var-run -> systemd-service-file-refers-to-var-run [ Chris Lamb ] * Check for ListenStream configuration keys in systemd .socket files that refer to /var/run. (Closes: #948478) * Prevent false positives in missing-build-dependency-for-dh_-command by adding entries for dh-sequence-ada and dh-sequence-sphinxdoc. (Closes: #947836) * Refresh all "private" debhelper data. * Create .cache directory in the test runner if it does not exist. [ Louis-Philippe Véronneau ] * Recommend the use of the "+dfsg" version suffix over "-dfsg" in the repackaged-source-not-advertised tag's long description. -- Chris Lamb Mon, 13 Jan 2020 12:23:40 +0000 lintian (2.44.0) unstable; urgency=medium * Summary of tag changes: + Added: - manpage-in-udeb - orphaned-package-maintained-in-private-space + Renamed: - obsolete-commands-in-modprobe.d-file -> obsolete-command-in-modprobe.d-file - very-long-line-length-in-source-file -> insane-line-length-in-source-file [ Chris Lamb ] * Adjust certainty of no-dh-sequencer to "possible". (Closes: #948376) * Replace loaded term in the name of the check for suspiciously-long lines in source files. [ Paul Wise ] * Add several spelling corrections. * Correct a couple of misspelled corrections. [ Felix Lechner ] * Avoid Perl undefined array references when checking manpages. (Closes: #947429, #947682) * Add a check for orphaned packages maintained privately. (Closes: #947671) * Change test prerequisite to libcrypt-dev following a recent change to glibc. * Reduce the severity of repackaged-source-not-advertised. (Re: #471537) * Do not warn about explicit targets when looking for dh sequencer. (Re: #930679) * Ensure that no new tags are added from Lintian that are not tested. * Rename obsolete-command-in-modprobe.d-file from its plural equivalent. * Do not run internal harness tests on partial selections to aid tag renaming after tag coverage test was tightened. [ Topi Miettinen ] * Update systemd hardening flags to include "PrivateNetwork" and "ProtectKernelLogs". [ Xavier Guimard ] * Fix debian/watch parsing for "dversionmangle=auto". -- Chris Lamb Wed, 08 Jan 2020 11:41:45 +0000 lintian (2.43.0) unstable; urgency=medium * Summary of tag changes: + Added: - obsolete-commands-in-modprobe.d-file - package-name-defined-in-config-h - unused-entry-in-debian-source-include-binaries [ Felix Lechner ] * Allow curly braces in $@ for the dh-sequencer tag. (Closes: #947115) * Fix the tag description of the no-dh-sequencer tag. (Closes: #947269) * Add a check for PACKAGE_NAME in config.h C/C++ include files. (Closes: #733598) * Add add check for unused entries in debian/source/include-binaries. (Closes: #528001) * Look for COM (not COFF) binaries when warning against Windows executables in sources. See #913867 for more info. [ Chris Lamb ] * Add missing tag summaries to older debian/changelog entries and fix the generate-tag-summary script to match our newer style of changelog entry placeholder in the future. [ Topi Miettinen ] * Check for obsolete "install" or "remove" commands in modprobe.d files. -- Chris Lamb Fri, 27 Dec 2019 18:28:08 +0000 lintian (2.42.0) unstable; urgency=medium * Summary of tag changes: + Added: - concatenated-upstream-signatures - doubly-armored-upstream-signature - empty-upstream-sources - explicitly-armored-upstream-signature - fortran-module-does-not-declare-version - inconsistent-maintainer - missing-prerequisite-for-fortran-module - no-dh-sequencer - opentype-font-prohibits-installable-embedding - opentype-font-wrong-filename - quoted-placeholder-in-mailcap-entry - repackaged-source-not-advertised - spurious-fields-in-upstream-signature - truetype-font-prohibits-installable-embedding - truetype-font-wrong-filename - wrong-vcs-location-for-dpmt - wrong-vcs-location-for-papt + Removed: - service-key-has-whitespace - source-contains-empty-directory [ Felix Lechner ] * Add new checks to identify and notify about issues in upstream signatures. (Closes: #929429, #929434, #929435, #929436) * Do not consider manpages from related packages when looking for manpages without executables. (Closes: #946471) * Add a new check for unsafe mailcap entries. (Closes: #33486) * Add new Fortran checks to validate module versions and prerequisites. (Closes: #796352) * Add new checks for empty upstream sources and for when repackaged sources are not properly advertised as such. (Closes: #471537) * Drop the source-contains-empty-directory tag as it was mostly ignored. (Closes: #907727) * Remove the bogus service-key-has-whitespace tag. (Closes: #946763) * Check TrueType and OpenType fonts for licensing terms. (Closes: #635068) * Allow "boolean false" directory components in link targets. (Closes: #892127) * Add a new tag for consistent maintainer fields between changes and source processables. (Closes: #546525) * Add a new no-dh-sequencer tag to be issued when the debhelper(7) dh(1) sequencer is not used. [ Guido Günther ] * Update the PureOS distribution names in the "vendor" configuration. [ Louis-Philippe Véronneau ] * Ensure proper VCS location for Debian Python Module Team and Debian Python Application Team packages. -- Chris Lamb Thu, 19 Dec 2019 12:01:30 +0000 lintian (2.41.0) unstable; urgency=medium * Summary of tag changes: + Added: - debian-watch-file-standard - duplicate-packaging-file - image-file-has-conflicting-name - image-file-has-unexpected-name - incorrect-packaging-filename - manpage-without-executable - tab-in-license-text [ Felix Lechner ] * Check for tab characters in debian/copyright files. (Closes: #946026) * Add checks for incorrect/duplicate filenames amongst packaging files, including files called "TODO" and potentially-misnamed files with lowercase "debian" (eg. "NEWS.debian"). (Closes: #946126) * Do not access network when validating XML files by adding XML::LibXML as a binary dependency and removing XML::Simple. (Closes: #926543) * When analysing debian/copyright, take files from the unpatched "orig_index" tree to prevent false-positives with respect to wildcard-matches-nothing-in-dep5-copyright. (Closes: #844274) * Warn about out image files with unrelated or conflicting names. (Closes: #717818) * Issue a classification tag for the specific uscan(1) standard version in use. (Closes: #542713) * Warn with manpage-without-executable when a manpage is not accompanied by an executable in, for example, /usr/bin. (Closes: #583125) * Remove references to the obsolete IPv4.php PEAR module. (Closes: #935609) * Switch templates for tests to use the debhelper-compat virtual package instead of debian/compat. * Allow long values for the Package-List field. * Adjust a test for the new locations of obsolete DES routines in glibc >= 2.29-5. [ Chris Lamb ] * Move field-to-long exceptions to a list. * Drop an unused List::MoreUtils "any" import. [ Paul Wise ] * Add several spelling corrections. -- Chris Lamb Mon, 09 Dec 2019 11:24:05 +0000 lintian (2.40.0) unstable; urgency=medium * Summary of tag changes: + Added: - package-is-co-maintained - package-is-maintained-by-individual - package-is-team-maintained [ Chris Lamb ] * Sync data/fields/build-profiles and the long description of invalid-profile-name-in-build-profiles-field with the latest profiles, particularly including the new "noinsttest". (Closes: #945891) * Use "is_executable" over checking for a specific umask for debian-rules-not-executable and update the long description of this tag to not imply that (exactly) 0755 permissions are required. (Closes: #945869) * Don't rebuild test packages if the test specifications have not changed; build-test-packages will do the right thing now. [ Felix Lechner ] * Split all test specifications into separate instructions for the building and the evaluation of test packages. [ Peter Wienemann ] * Add new classification tags for packages maintained by individuals, groups and teams. -- Chris Lamb Tue, 03 Dec 2019 20:41:17 +0000 lintian (2.39.0) unstable; urgency=medium * Summary of tag changes: + Added: - debian-rules-not-executable - package-depends-on-an-x-font-package [ Scott Talbert ] * Add wmem{cpy,move,set} to the list of excluded hardened functions to avoid many false-positives. (Closes: #921136) [ Louis-Philippe Véronneau ] * Check to ensure debian/rules files are executable. * Update instructions to download build-dependencies with "apt" instead of "apt-get". [ Chris Lamb ] * Don't emit debian-rules-not-executable if debian/rules is a symlink; we warn about this via debian-rules-is-symlink. -- Chris Lamb Thu, 28 Nov 2019 10:34:27 +0000 lintian (2.38.0) unstable; urgency=medium * Summary of tag changes: + Removed: - package-depends-on-an-x-font-package [ Felix Lechner ] * Process all overrides for a particular tag, not just the last one. (Closes: #945276, #945299) * For all output types except XML and "universal" impose a tag order when emitting. (Closes: #944807) * In checks, use the new attribute accessors from Processable and remove references to the outdated 'info' attribute. [ Stephen Kitt ] * Drop the package-depends-on-an-x-font-package as packages can now depend on X fonts directly (see #941803). -- Chris Lamb Fri, 22 Nov 2019 20:09:51 +0000 lintian (2.37.0) unstable; urgency=medium [ Chris Lamb ] * Don't emit missing-depends-on-sensible-utils for sensible-utils itself. (Closes: #944895) * Correct logic when excluding .path/.timer & .service pairs from systemd-service-file-missing-install-key. Thanks, Richard Laager . (Closes: #944145) [ Paul Wise ] * Add several spelling corrections. -- Chris Lamb Tue, 19 Nov 2019 16:23:48 +0000 lintian (2.36.0) unstable; urgency=medium * Don't emit systemd-service-file-missing-install-key for .service files with corresponding .path or .timer pairs. (Closes: #944145) -- Chris Lamb Fri, 15 Nov 2019 12:18:04 +0000 lintian (2.35.0) unstable; urgency=medium * Summary of tag changes: + Added: - package-placeholder-in-symbols-file [ Chris Lamb ] * Don't complain about Build-Ids or Description fields that are too long; there is nothing really actionable for Lintian to complain about. (Closes: #942493) * Drop quoting around the field that violates "field-too-long" whilst a convincing case can certainly be made for quoting the offending field (eg "'Depends'") it feels too inconsistent with the rest of Lintian. [ Felix Lechner ] * Detect PACKAGE placeholders in debian/symbols files. (Closes: #944047) * Drop minimum version requirement 8.30 for coreutils; process files containing newlines separately. (Closes: #944258) * Associate the multiline-field tag with the fields/multi-line check. * Provide a new check fields/multi-line to do what Lintian::Processable did previously in that regard. * Fix missing module for --version; remove eval shielding error. [ Fabrice Bauzac ] * Update the location of the local HTML documentation. [ Adam D. Barratt ] * Remove myself from uploaders -- Chris Lamb Mon, 11 Nov 2019 13:58:05 +0000 lintian (2.34.0) unstable; urgency=medium [ Chris Lamb ] * Don't emit package-supports-alternative-init-but-no-init.d-script when we have a .path and .service pair, in parallel to allowing .service and .timer pairs released in Lintian 2.29.0 via #933109. (Closes: #944094) * Don't emit changelog-file-missing-explicit-entry for stable updates. (Closes: #944098) [ Felix Lechner ] * Insert 'keys' before hashes for Perl in stretch. (Closes: #943910) * In text-output, offer hyperlinks to tag descriptions on . * Turn the Lintian::Collect package into a Moo common role for all consumers of collected data. * Test for POD coverage in all files but allow exceptions via Pod::Coverage::TrustPod. Add libpod-coverage-trustpod-perl to Build-Depends. * In Info::Changelog::Entry, adjust POD to avoid runtime errors. [ Peter Wienemann ] * Simplify the testing of the 'standards-version-classifications' tag. -- Chris Lamb Thu, 07 Nov 2019 18:44:29 +0000 lintian (2.33.0) unstable; urgency=medium [ Chris Lamb ] * Suggest switching from debian/compat to debhelper-compat. (Closes: #933304) * Upgrade the severity of missing-systemd-service-for-init.d-script from pedantic to a warning. (Closes: #943957) [ Felix Lechner ] * Add 'noguile' to the list of valid build profiles. (Closes: #943947) * Add libclass-xsaccessor-perl and libnamespace-clean-perl to Depends and Build-Depends. * Fix the tag description for the symbols-file-missing-build-depends-package-field tag. * In the tests add the newly appearing pedantic tags to the list of expected tags. * In Unpacker, eliminate an 'eval' that obscured messages to improve error handling. * In Lintian::Collect::{Binary,Source}, read from MLDBM in new facilites for details on java-info. [ Peter Wienemann ] * Add a "standards-version" classification tag to extend the collection of plots on . -- Chris Lamb Mon, 04 Nov 2019 17:40:59 +0000 lintian (2.32.0) unstable; urgency=medium [ Chris Lamb ] * Skip entirely whitespace lines when checking the override_dh_auto_test-does-not-check-DEB_BUILD_OPTIONS tag. (Closes: #943684) * Don't build Git tags on salsa. [ Felix Lechner ] * Clarify boolean return value in Collect::Binary->is_pkg_class. (Closes: #943724) * In Lintian::Collect::Binary, read from MLDBM in new facilites for details on scripts. * In Lintian::Collect::Package, read from BerkeleyDB in new facilites for details on binary package "control" scripts. [ David Prévot ] * Update a file reference in the long description of the unnecessary-source-date-epoch-assignment tag. [ Paul Wise ] * Add several spelling corrections. -- Chris Lamb Thu, 31 Oct 2019 17:09:52 +0000 lintian (2.31.0) unstable; urgency=medium [ Chris Lamb ] * Avoid false-positives for missing ${sphinxdoc:Depends} when "dh" calls include dynamic variables. (Closes: #943711) * Include more verbose debugging info (eg. concurrency) when running Lintian's autopkgtests. [ Felix Lechner ] * Rework the warning for overly-long binary package fields. -- Chris Lamb Tue, 29 Oct 2019 12:51:32 +0000 lintian (2.30.0) unstable; urgency=medium [ Chris Lamb ] * Warn about packages that use the deprecated $ADTTMP autopkgtest variable. [ Sylvestre Ledru ] * Emit a warning for overly-long binary package fields. (Closes: #942493) [ Felix Lechner ] * Generate the qa-list.txt data file from the Ultimate Debian Database and update this file in the package. * Extract the auto-reject tags from the data published by the FTP Master team and update locally. * In the cruft check, use the new ->tag subroutine instead of the Lintian::Tag::tag global. -- Chris Lamb Sat, 26 Oct 2019 18:03:17 +0000 lintian (2.29.0) unstable; urgency=medium * Summary of tag changes: + Added: - sphinxdoc-but-no-sphinxdoc-depends [ Chris Lamb ] * Warn about missing ${sphinxdoc:Depends} when either "--with sphinxdoc" or dh_sphinxdoc is used. (Closes: #940999) * Don't emit package-supports-alternative-init-but-no-init.d-script when we have a foo.service and foo.timer pair. (Closes: #933109) * Bump the minimum version required version for debhelper Build-Depends now that version 10 is satisfied in oldstable. (Closes: #942632) * Add python2 and python2-minimal as satisfying Build-Depends for Python packages. (Closes: #942658) * Improve the test package generation logging output to include a current/total status. * Add a trailing ellipsis to the "Prepearing X work directories" to denote processing is occuring in the background. [ Felix Lechner ] * Migrate all checks to use the new internal ->tag(..) subroutine. [ Sylvestre Ledru ] * Provide more information in the case of a sorting-order.t test failure to facilitate debugging. -- Chris Lamb Sun, 20 Oct 2019 10:06:13 +0000 lintian (2.28.0) unstable; urgency=medium [ Felix Lechner ] * Correctly calculate an appropriate prior changelog version for source NMUs. (Closes: #942411) * Split check/files.pm into smaller components; invoke parts through the old scripts. [ Simon Quigley ] * Add "focal" as a known Ubuntu distribution. [ Adam Schmalhofer ] * Clarify the long description for the package-contains-python-tests-in-global-namespace tag to specifically mention "test_foo" directory-based moduiles and not "test_foo.py" files. [ Paul Wise ] * Add several spelling corrections. -- Chris Lamb Thu, 17 Oct 2019 18:00:48 +0000 lintian (2.27.0) unstable; urgency=medium [ Chris Lamb] * Don't warn about package-supports-alternative-init-but-no-init.d-script and systemd-service-file-missing-install-key and for units installed in a subdirectory of (for example) /lib/systemd/system. (Closes: #941419) * Update data/fields/perl-provides. [ Felix Lechner ] * In the tests, load profiles only from one location, ensuring one is loaded in pod-syposis.t. (Closes: #942252) * Make subchecks of 'fields' stand on their own: - Associate tags with new subchecks for original check 'fields'. - Add to the debian/main profile the new checks split from 'fields'. * Add editing aid section to all Perl files that do not have it, except in tests. -- Chris Lamb Sun, 13 Oct 2019 22:27:26 +0000 lintian (2.26.0) unstable; urgency=medium [ Chris Lamb ] * Avoid false-positives in non-consecutive-debian-revision by only performing the test when Debian revisions (eg. -2, -3, etc.) are whole integers. (Closes: #941395, #942013) * Correct/improve the grammar of the non-consecutive-debian-revision tags long description. [ Felix Lechner ] * Convert all test checks to use instantiated objects. -- Chris Lamb Wed, 09 Oct 2019 23:51:26 +0000 lintian (2.25.0) unstable; urgency=medium * Fix false positives for templated (eg. "foo@.service") service files when checking for packages that appear to lack corresponding init scripts. * Update the long description of the init.d-script-depends-on-all-virtual-facility tag and whitelist the sysvinit package from all such init.d checks. (Closes: #941140) * Add 4.4.1 as a known Standards-Version. -- Chris Lamb Wed, 02 Oct 2019 08:52:55 +0000 lintian (2.24.0) unstable; urgency=medium [ Felix Lechner ] * Do not emit changelog-file-missing-explicit-entry when maintainer revision is 0 (eg. 1.2.5-0+deb10u1). (Closes: #940994) * Remove internal support for checking whether binary packages are "native". * Various code cleanups, splitting checks/fields.pm into smaller components, moving numerous tags, etc. -- Chris Lamb Fri, 27 Sep 2019 08:15:59 +0000 lintian (2.23.0) unstable; urgency=medium * Allow the lowercase version of "UNRELEASED" changelog entries in various tags. This is a convention used in the Debian ports archive. (Closes: #940877) * Drop matching for Source-Version substvars; they are not supported by dpkg-dev anymore and results in us accidentally matching an incorrect "Source-:Upstream-Version" variable. (Closes: #940878) * Bump severity of script-uses-unversioned-python-in-shebang (ie. "#!/usr/bin/env python") from classification to "pedantic" severity for now. (Closes: #934853) -- Chris Lamb Tue, 24 Sep 2019 10:31:54 +0000 lintian (2.22.0) unstable; urgency=medium * Summary of tag changes: + Added: - homepage-refers-to-obsolete-debian-infrastructure - license-file-listed-in-debian-copyright - odd-historical-debian-changelog-version + Removed: - debian-changelog-version-requires-debian-revision - hyphen-in-native-debian-changelog-version - latest-debian-changelog-entry-changed-to-native - pear-package-feature-requires-newer-pkg-php-tools + Renamed: - rules-requires-root-implicitly -> rules-requires-root-missing [ Chris Lamb ] * Check for packages still refering to the deprecated Alioth service in their Homepage field. (Closes: #933500) * Quote the package build path to avoid test failures when building in a directory whose name contains a '+' or other regex metacharacters. (Closes: #939674) * Don't emit the missing-build-dependency, package-uses-debhelper-but-lacks-build-depends or debhelper-but-no-misc-depends tags for packages that do not use debhelper but use specific parts of dh-autoreconf. (Closes: #939874) * Emit missing-build-dependency for packages that do not use debhelper but use specific parts of dh-autoreconf without build-depending on it. * Revert merging our two CI pipeline stages. Whilst this avoided an additional ~5 minute initial setup/teardown time, it meant that the cache misses attempted to do both the within the 1h timeout. Whilst we might still timeout overall, at least with a split we are very likely to have cached the build packages. * Upgrade and rename classification-level tag rules-requires-root-implicitly to rules-requires-root-missing. (Closes: #933240) * Drop the unnecessary pear-package-feature-requires-newer-pkg-php-tools tag. Thanks, Antonio Ospite and David Prévot. (Closes: #939698 * Don't emit latest-debian-changelog-entry-changed-to-native if the latest changelog entry references "native package". [ Felix Lechner ] * Remove parts related to gzip timestamps from the files-general test. (Closes: #939673) * Refocus the 'binaries-missing-lfs' test on the tag 'binary-file-built-without-LFS-support'. (Closes: #939639) * Add the changelog-distribution-does-not-match-changes-file tag to the ftp-master-auto-reject profile * In Lintian::Collect::Source, use a centralized version parser. * Add new tag 'license-file-listed-in-debian-copyright' to avoid unnecessary clutter. * Fix command-line processing for --check-part so 'all' can also be part of a list. * Associate the multiline-field tag with the 'lintian' check. [ Xavier ] * Fix false-postivies when checking for the pkg-js-autopkgtest-file-does-not-exist tag with regards to comments. (Closes: #940082) [ Rafael Laboissiere ] * Avoid false positives for library-not-linked-against-libc with Octave add-ons. (Closes: #940282) [ Faidon Liambotis ] * Use the "build-depends-all" relation to correctly detect binaries built with Go. -- Chris Lamb Sat, 21 Sep 2019 02:49:05 +0000 lintian (2.21.0) unstable; urgency=medium * Add 'iIF' to the list of spelling exceptions ignored in binaries. Thanks to Graham Inggs and Matthias Klose. (Closes: #939637) * Suggest using libjs-bootstrap over libjs-twitter-bootstrap as the latter is not available in Debian buster. Thanks to Carsten Schoenert for the suggestion. (Closes: #939416) * Merge our two CI pipeline stages, avoiding an additional ~5 minute initial setup/teardown time as well as avoiding having to parse the checksums of the yet-to-be-downloaded build dependencies. -- Chris Lamb Sat, 07 Sep 2019 13:44:36 +0000 lintian (2.20.0) unstable; urgency=medium * Summary of tag changes: + Added: - pkg-js-autopkgtest-test-is-empty - pkg-js-tools-test-is-empty [ Chris Lamb ] * Ignore Python scripts that are shipped under /usr/lib/python3/dist-packages as these files aren't supposed to be called as scripts. (Closes: #933167) * Avoid a large number of false-positives for package-does-not-use-debhelper-or-cdbs by actually taking into account whether the package uses CDBS or not. (Closes: #933902, #933903) * Avoid package-does-not-use-debhelper-or-cdbs false-positives for packages using the pkg-kde-tools CDBS routines. (Closes: #933901) * Don't emit python3-depends-but-no-python3-helper when we build-depend on dh-sequence-python3, etc. (Closes: #939050) * Split out building the test packages into a new CI stage, reducing the test iteration time by approximately 30 minutes in many cases. (Closes: #930487) [ Felix Lechner ] * Adjust the testing default to run only the declared check to speed up testing and make said tests more specific. * Combine the checks changelog-file and source-changelog into a new "changelog"-type check. [ Xavier ] * Group all Node.js-related tests into a new checks/nodejs.pm package. * Warn if the debian/tests/pkg-js/test file is empty or otherwise devoid of meaningful test content. -- Chris Lamb Tue, 03 Sep 2019 07:57:19 +0000 lintian (2.19.0) unstable; urgency=medium * Summary of tag changes: + Added: - older-source-format - unreleased-changelog-distribution + Removed: - source-field-does-not-match-pkg-name [ Chris Lamb ] * Don't emit the latest-debian-changelog-entry-without-new-version warning for uploads to the "buster" distribution. (Closes: #934982) * Also check for "${source:Upstream-Version}" etc. in the version-substvar-for-external-package tag, not just "${source:Version}". (Closes: #935138) * Update the name of the node-html5shiv library for the privacy-breach-uses-embedded-file-html5shiv and embedded-javascript-library tags. (Closes: #935083) [ Felix Lechner ] * Emit a wishlist tag for source format 1.0 packages. (Closes: #884498) * Complain about UNRELEASED distribution in changelogs if the .changes file is signed. (Closes: #873520) * Generate the HTML manual from reStructuredText; use latter as plain text. (Closes: #865847) * Convert the untestable source-field-does-not-match-pkg-name tag to a fatal program error. * In the test suite, use a default 3.0 source format and add default version numbers. [ Niels Thykier ] * commands/lintian: - Ensure @serializable is properly created. - Use wait_all during clean up; we are more interested in getting as much cleaned up over failing fast. [ Simon McVittie ] * Add /usr/bin/gjs-console as a recognised interpreter/shebang. (Closes: #934981) [ Raphaël Hertzog ] * Update the Kali Linux profile to make the dir-or-file-in-opt tag overridable. [ Paul Wise ] * Refer to the HTML version of the Debian Policy Upgrading checklist. -- Chris Lamb Wed, 21 Aug 2019 16:34:36 +0000 lintian (2.18.0) unstable; urgency=medium * Summary of tag changes: + Added: - nodejs-module-installed-in-usr-lib + Removed: - dh-manual-sequence-control-obsolete [ Chris Lamb ] * Don't emit package-name-doesnt-match-sonames for udebs. (Closes: #934748) * Remove "busses" as a false-positive plural for "bus". Thanks to Jörg Frings-Fürst for the report. (Closes: #934452) * Recommend that maintainers do not override the "latest-debian-changelog-entry-changed-to-native" tag. * Don't emit changelog-file-missing-explicit-entry for uploads to the security archive (Re: #934026). [ Felix Lechner ] * Remove the "dh-manual-sequence-control-obsolete" tag as it cannot be tested due to debhelper changes. [ Xavier ] * Add a "nodejs-module-installed-in-usr-lib" tag to check if Node.js modules are installed in the (correct) new location. * Update the node-package-install-in-nodejs-rootdir test to search in all Node.js module directories. -- Chris Lamb Wed, 14 Aug 2019 15:56:02 +0000 lintian (2.17.0) unstable; urgency=medium * Summary of tag changes: + Added: - empty-debian-tests-control + Removed: - control-file-duplicate-field - control-file-syntax-error - debian-source-dir-unknown-source-format - debian-tests-control-is-not-a-regular-file - missing-runtime-tests-field - syntax-error-in-control-file - syntax-error-in-debian-tests-control - testsuite-control-missing-test-field - testsuite-control-not-file - testsuite-control-syntax-error - unknown-source-format [ Chris Lamb ] * Don't emit command-in-sbin-has-manpage-in-incorrect-section for symlinks; they are invariably provided for legacy/compatibility reasons. (Closes: #931951) * Update regex matches against lines in debian/rules correctly identify debhelper calls starting with environment modification (eg. "LC_ALL=C.UTF-8"). (Closes: #932128) * Factor out mangling of fatal error messages in the frontend configuration and correct the exit code if the specified profile does not exist. (Closes: #932215) * Expand the long description of the duplicate-files check to suggest how to remove them. Thanks to Rebecca Palmer for the suggested text. (Closes: #932411) * Downgrade command-in-sbin-has-manpage-in-incorrect-section to pedantic severity for the time being. (Closes: #570998) * Downgrade the severity and certainty of the package-supports-alternative-init-but-no-init.d-script tag for the time being. (Closes: #931889) * Correct multiple "gobject-introspection" typos. Thanks to Simon McVittie (smcv) for the pointer. (Closes: #933394) * Ignore all initscripts provided by the initscripts binary package instead of whitelisting issues individually or requiring overrides; these will never be regular-style initscripts. (Closes: #933383) [ Felix Lechner ] * Do not trigger repack requirement when the Debian revision includes the "repack" indicator. (Closes: #931846) * Drop Depends and Build-Depends on libparse-debianchangelog-perl. (Closes: #933134) * Quote the spelling corrections that consist of multiple words. * Use the null character as the line delimiter in collection/md5sums. * Show logs for tests with parse errors when unattended and show all parse errors in TAP. * Always show log when failing to build a test package. * Store tags is separate, small files under ./tags. * Remove MatchVars check from PerlCritic configuration. * In the test runner, add an option to accept all tag changes. [ Paul Wise ] * Add several spelling corrections. -- Chris Lamb Tue, 06 Aug 2019 16:45:11 +0100 lintian (2.16.0) unstable; urgency=medium The "post-buster" release. * Summary of tag changes: + Added: - bin-sbin-mismatch - command-in-sbin-has-manpage-in-incorrect-section - directory-in-etc-sv-directory-without-executable-run-script - package-supports-alternative-init-but-no-init.d-script [ Chris Lamb ] * Add 4.4.0 as a known Standards-Version. * Post-buster changes: - Reflect the release, updating dates (etc.) of "oldstable" and so on. - Bump the recommended debhelper level to 12 (see #918809). - Bump the old and ancient version numbers for Python 3 checks (see #903399). - Drop the deprecated --fail-on-warnings option to help towards fixing Debian bug #709932. - Upgrade package-uses-vendor-specific-patch-series to "E:" level severity (see #904302). * Warn about files referencing /usr/bin/foo if the binary is actually installed under /usr/sbin/foo. (Closes: #930702) * Check that a package that ships a /etc/sv/foo directory then /etc/sv/foo/run exists and is executable. (Closes: #931426) * Support suppress-tags-from-file in Lintian configuration file. (Closes: #930700) * Don't emit pkg-js-tools-test-is-missing if the "dh" invocation uses variables in its arguments. (Closes: #928283) * Fix "mistake||correction" delimiter for a number of entries in data/spelling/corrections-case. (Closes: #931446) * Disable the duplicate word checker when analysing patch files. (Closes: #931183) * Override dh_dwz in a binaries-general test to avoid testsuite hanging. (Closes: #931632) * Avoid false-positives in source-contains-prebuilt-doxygen-documentation against Doxygen templates. (Closes: #930109) * Exclude "X Bitmap Graphic" (.xbm) files from being flagged as extra license files. (Closes: #930211) * Add an exception for documentation outside of /usr/share/doc for "R" statistical computing modules; users expect them under /usr/lib/R/site-library. (Closes: #930311) * Interpolate $DPKG_MAINTSCRIPT_PACKAGE in debconf(7) template names in maintainer scripts. (Closes: #930677) * Check that packages that provide support for alternative init systems also provide an init.d script. (Closes: #926471) * Add /lib/runit/invoke-run as a known interpreter to avoid false positives in checking runit scripts under /etc/sv/*/run. (Closes: #930701) * Don't emit latest-debian-changelog-entry-without-new-version for uploads to (eg.) buster-security to avoid false-positives when performing "no-change" uploads with a ~debXuY suffix. [ Felix Lechner ] * Bump the minimum perltidy version required to avoid test failures. * Add runtime dependency on liblist-compare-perl. * Reduce the complexity of code in Lintian::Unpacker. [ Dmitry Bogatov ] * Check for commands in /sbin or /usr/sbin with manpages in the incorrect section. (Closes: #570998) [ Adam D. Barratt ] * Lintian::Reporting::Util: Add missing import of Exporter::import. [ Axel Beckert ] * checks/systemd.pm: Fix "systemctl --daemon-reload" vs "systemctl daemon-reload". * Fix typo in description of debian-watch-does-not-check-gpg-signature. -- Chris Lamb Mon, 08 Jul 2019 01:24:09 +0000 lintian (2.15.0) unstable; urgency=medium [ Chris Lamb ] * t/bin/runtests: Correct equality operator preventing the correct parsing of --onlyrun="" used when (eg.) executing autopkgtests and apply a patch from Felix Lechner to specify a missing --work-dir argument when building test packages. (Closes: #929430) * Add references to Debian Policy §4.9.2 and §5.6.31 for checks regarding Rules-Requires-Root. (Closes: #929428) * Correct more false-positives for missing-systemd-timer-for-cron-script due to an incorrect regular expression. Thanks again to Francesco Poli (wintermute) for the patch. (Closes: #927970) * Remove unnecessary commas from tag long descriptions and improve grammar in the description of testsuite-autopkgtest-missing. [ Vagrant Cascadian ] * Add Guile 2.0 & 2.2 to and remove "ancient" versions 1.6 & 1.8 from the list of versioned interpreters. (Closes: #929501) [ Paul Wise ] * spelling: Add several corrections -- Chris Lamb Sun, 26 May 2019 14:12:53 +0000 lintian (2.14.0) unstable; urgency=medium [ Chris Lamb ] * Correct false-positives in missing-systemd-timer-for-cron-script due to an incorrect regular expression. Thanks to Francesco Poli (wintermute) for the patch. (Closes: #927970) * Adjust package-contains-python-header-in-incorrect-directory as Python 3.8 dropped the "m" modifier that was used in Python 3.7 and below (eg. /usr/include/python3.7m). (Closes: #928617) [ Ivo De Decker ] * Check for sources in the "main" section with only binaries in the "contrib" section. (Closes: #928126) [ Michael Biebl ] * Consider the now-preferred /usr/share/dbus-1/{system,session}.d directories (supported since dbus 1.9.18) when checking D-Bus services. (MR: !187) [ Xavier ] * Fix an error where debian/tests/pkg-js/files contained deep (but valid) directory. (MR: !199) [ Paul Wise ] * Add/fix several spelling corrections. * Sort the dictionary * Prefer American spelling for American typos -- Chris Lamb Wed, 22 May 2019 07:47:56 +0000 lintian (2.13.0) unstable; urgency=medium * Summary of tag changes: + Added: - debhelper-compat-level - patch-system - pkg-js-autopkgtest-file-does-not-exist - pkg-js-autopkgtest-test-is-missing - pkg-js-tools-test-is-missing - vcs - vcs-uri [ Niels Thykier ] * gitlab-ci: Run commands with the time command to get an estimate for each part. * Ensure that LINTIAN_CFG is always defined as it is used in debug output. * Fix a typo that called the wrong clean-up function with --unpack. * Extract reporting related utilities into a separate module. * Remove unused system_env function from Lintian::Util * Move Deb822 parsing into its own module called Lintian::Deb822Parser. [ Felix Lechner ] * Implement universal output format in Lintian. * Only run tests in t/bin/runtests but do not build any packages. [ Xavier ] * Test for Node.js packages that don't ship a debian/tests/pkg-js/test file or ship a debian/tests/pkg-js/files that contains invalid/missing references. (Closes: #923339) * Test for Node.js packages that use "--with nodejs" in debian/rules but do not specify a debian/tests/pkg-js/test file. (Closes: #923331) [ Adam D. Barratt ] * Update private/refresh-locale-codes to work with newer isoquery(1) and refresh data/files/locale-codes and data/fields/virtual-packages to match. [ Lucas Nussbaum ] * Emit a classification tag about the current debhelper compat level in use. (Closes: #926766) * Emit a classification tag that records the patch system in use. (Closes: #926767) * Emit a classification tags about the revision control system used by the package. (Closes: #926768) [ Michael Biebl ] * Also look in /usr/share/dbus-1/{system,session}.d for dbus configuration files. (MR: !187) [ Simon Quigley ] * Add "eoan" as a known Ubuntu distribution. (MR: !198) [ Chris Lamb ] * Clarify "Could not determine what you meant by" test harness error message; it is not always a parse error. [ Paul Wise ] * Add/fix several spelling corrections. -- Chris Lamb Mon, 22 Apr 2019 09:01:36 +0000 lintian (2.12.0) unstable; urgency=medium * Summary of tag changes: + Added: - doc-base-file-references-wrong-path - systemd-service-file-shutdown-problems [ Chris Lamb ] * Make the argument to --jobs non-optional to prevent a "0" job count being parsed if the argument is omitted. This resulted in Lintian getting stuck as it did not have any runners to perform work with. (Closes: #925970) * Fix false-positives in the version-substvar-for-external-package tag when a Provides field contains multiple items and/or with leading whitespace. (Closes: #833608) * Don't check for the x86-specific "SafeSEH" hardening feature for code that is JIT-compiled by the Mono runtime. (Closes: #926334) * Collapse the rather long-winded explanation regarding typos in the long description of the version-substvar-for-external-package tag. * Drop double-spaces in .desc files. [ Felix Lechner ] * Allow symlinks in autopkgtest paths. [ Niels Thykier ] * Restrict the number of parallel clean up jobs to match --jobs parameter. (Closes: #924714) [ Osamu Aoki ] * Check for files in doc-base control files that list paths pointing outside of /usr/share/{doc,info}. (Closes: #925200) [ Xavier Guimard ] * Don't emit the debian-watch-file-should-mangle-version tag if dversionmangle is set to "auto". (Closes: #926166) [ Topi Miettinen ] * Check for systemd service files that use DefaultDependencies=no and Conflicts=shutdown.target without Before=shutdown.target. (MR: !177) * Update the systemd hardening flags. (MR: !178) [ Balint Reczey ] * Run autopkgtest tests in parallel, autodetecting CPU count. (MR: !75) [ Paul Wise ] * Add/fix several spelling corrections. -- Chris Lamb Thu, 04 Apr 2019 08:20:06 +0000 lintian (2.11.0) unstable; urgency=medium [ Chris Lamb ] * Support dh-sequence-{gir,gnome,python3} etc. virtual packages as satisfying various build-dependencies. (Closes: #924082) * Don't detect non-maintainer upload (NMU) versions when checking for maintainer scripts that support "ancient" package versions. (Closes: #924501) * Correct false-positives in when checking for dh-runit packages that lack a "Breaks" substvar by ensuring that the binary package actually uses runit. (Closes: #924116) * Update the long description of the new-package-should-not-package-python2-module tag to justify further why a changelog entry is more appropriate than an override. * Remove errant "#" from the long description of inconsistent-appstream-metadata-license. [ Felix Lechner ] * Deprecate static labs; all labs are temporary from now on. * In autopkgtests, allow output to stderr to shorten waiting period. * Fix the rules-requires-root-implicitly test on stretch. * For stretch-backports, also Build-Depend on the "XS" version of the Text::CSV Perl module in addition to the pure Perl version. [ Stewart Ferguson ] * Allow *.pth files in Python directories to avoid false-positives for unknown-file-in-python-module-directory. (Closes: #924417) [ Paul Wise ] * Add/fix several spelling corrections. -- Chris Lamb Mon, 18 Mar 2019 22:20:48 +0000 lintian (2.10.0) unstable; urgency=medium [ Chris Lamb ] * Check for placeholder "" strings in debian/watch files as it can resut in uscan(1) generating a file with shell metacharacters. (Closes: #923589) * Add "itialize" to the list of "spelling-error-in-binary" exceptions. (Closes: #923725) * Don't emit orig-tarball-missing-upstream-signature if the package uses the "opts=mode=git,pgpmode=gittag" in debian/watch. (Closes: #920763) * Use less-clunky "for entries that are too short" in the long description of debian-changelog-line-too-short. [ Paul Wise ] * Add several spelling corrections. -- Chris Lamb Fri, 08 Mar 2019 17:26:37 +0000 lintian (2.9.1) unstable; urgency=medium [ Felix Lechner ] * Add missing runtime dependency on libtry-tiny-perl. (Closes: #923262) [ Chris Lamb ] * Add an initial .gitab-ci.yml. -- Chris Lamb Mon, 25 Feb 2019 16:38:19 +0000 lintian (2.9.0) unstable; urgency=medium [ Felix Lechner ] * Add missing runtime dependency on libpath-tiny-perl. (Closes: #923229) [ Chris Lamb ] * Add /lib/runit/invoke/run as a known interpreter. (Closes: #923232) -- Chris Lamb Mon, 25 Feb 2019 12:36:32 +0000 lintian (2.8.0) unstable; urgency=medium [ Chris Lamb ] * Emit an experimental warning for packages that ship a cron script without an equivalent systemd .timer file. (Closes: #922862) * Make orig-tarball-missing-upstream-signature a "dsc" check so it also appears when running against non-.changes files. (Closes: #922557) * Check all combinations of processables and binary package names in order to avoid false-positives or unused override warnings in spelling checks depending on whether a .deb or .dsc (etc.) is passed to Lintian. (Closes: #921814) * Prevent pkg-config-references-unknown-shared-library false positives: - Ignoring entries such as -lfoo{install_suffix} as they are interpolated at runtime by Autoconf. (Closes: #922511) - Create an exception list and populating with shared objects shipped by libc6-dev and libgcc1. (Closes: #922402) - Manually add "gcc" as an exception. * Use the source package name (not the package section) when checking for uses-dpkg-database-directly exceptions. (Closes: #922530) * Correct reference to mips64el architecture to ensure we emit binary-from-other-architecture on this arch. Thanks to Helmut Grohne. (Closes: #921573) * Don't emit source-nmu-has-incorrect-version-number for uploads to backports. (Closes: #923060) * Ensure libpath-tiny-perl is installed regardless of nocheck build profile as it is needed to generate the Pod documentation. * Add dpatch to "nocheck" Build-Depends to avoid skipping tests and then don't emit build-depends-on-obsolete-package for Lintian itself as a result. * Remove "nocheck" Build-Depends restriction for libcapture-tiny-perl and specify it as a runtime dependency too. * Don't emit source-contains-prebuilt-java-object against Lintian itself as we ship a trivial HelloWorld.jar as a test fixture. * Don't print "Offering to re-calibrate..." message if we aren't actually about to offer. [ Felix Lechner ] * Ensure unpack loop stops when process succeeds after processable failed to try and prevent Lintian from occasionally hanging. (Closes: #922737) * Fix detection of security features in Portable Executable (PE) binaries. * Update recommendation in an update-menus long description that will not trigger a check for full path names in maintainer scripts. (MR: !149) * Interactively calibrate the expected tags in failing tests (MR: !145) and use green and red terminal colors when adding or removing tags during said calibration. (MR: !153) * t/runtests: * Split processing between scripts and tag tests. * Split out test routines to process universal tags. * Change options and arguments for stand-alone operation. * Drop obsolete old-format-menu-file tag. [ Guillem Jover ] * Don't hardcode ".gz" in the output of the malformed-deb-archive tag's extra information. (Closes: #922534) [ Paul Wise ] * Add several spelling corrections. -- Chris Lamb Sun, 24 Feb 2019 22:13:53 +0000 lintian (2.7.0) unstable; urgency=medium * Summary of tag changes: + Added: - script-uses-unversioned-python-in-shebang [ Chris Lamb ] * Track static libraries to avoid false-positives in pkg-config-references-unknown-shared-library. (Closes: #921872) * Assume that license files themselves do not require coverage in DEP-5 copyright files. (Closes: #921752) * Ignore spelling errors in patch author names. (Closes: #922233) [ Dmitry Bogatov ] * Add a classification tag to identify the number of scripts using unversioned Python shebangs. (Closes: #909510) [ Felix Lechner ] * Demote the Test-Against test metadata field to be a selector for false-positives only. (MR: !142) [ Paul Wise ] * Add several spelling corrections. -- Chris Lamb Thu, 14 Feb 2019 08:37:22 +0000 lintian (2.6.0) unstable; urgency=medium * Summary of tag changes: + Added: - package-contains-sass-cache-directory - package-uses-dh-runit-but-lacks-breaks-substvar - pkg-config-references-unknown-shared-library [ Chris Lamb ] * Enhancements: - Check for pkg-config(1) files that reference unknown shared objects via (for example) "Libs: -lfoo". (Closes: #920699) - Check for packages that use dh_runit without specifying a Breaks on the "${runit:Breaks}" substvar. (Closes: #920299) - Require that build paths aren't "/" when checking for file-references-package-build-path. - Check for packages that ship with .sass-cache directories. (Closes: #920593) - Detect accidental ".git.git" (etc.) in Vcs-Git headers. (Closes: #921084) * Bug fixes: - Fix FTBFS by avoiding "self" false-positives when checking for file-references-package-build-path in the Lintian test suite. (Closes: #920536) - Ignore duplicate .buildinfo files which can be supplied by using mergechanges(1) from devscripts. (Closes: #920469) - Rewrite "old" version calculation to prevent false-positives in the maintainer-script-supports-ancient-package-version tag. (Closes: #920638) - Prevent false-positives in the command-with-path-in-maintainer-script checks for sections automatically added by debhelper. (Closes: #920568) - Ignore quilt .pc directories when checking for inconsistent-appstream-metadata-license. (Closes: #920647) * Reporting improvements: - Include the upload and release dates in the output of the maintainer-script-supports-ancient-package-version tag. - Add a reference to the official specification in the long description of the unnecessary-source-date-epoch-assignment tag. * Misc: - Move to "Semantic Versioning" (https://semver.org/) scheme. - Print Carp tracebacks in --debug mode. [ Felix Lechner ] * Fix a race condition by stopping loop for collections after a task fails. (Closes: #920691) * Remove Test-For from all test specifications. (MR: !138) * Consolidate scripts in t/scripts; move internal harness tests there. * Clean up ./t; move helper binaries, including t/runtests, to t/bin. * Add an empty Test-Against to all tests that do not have one. * Calculate Test-For and Test-Against from new "Check" parameter in runner. * Add an internal self-test for all the fields in "desc" files. * Move all t/tags/tests addressing a single check into t/tags/checks/. (MR: !141) [ Jeremy Bicha ] * Drop "GTK" -> "GTK+" correction. (Closes: #911449) * Set "multimaint-merge" in debian/gbp.conf. (MR: !125) [ Xavier Guimard ] * Update debhelper addon specification now that nodejs-dev has been replaced by pkg-js-tools. (MR: !135) [ Paul Wise ] * Add several spelling corrections. -- Chris Lamb Wed, 06 Feb 2019 22:51:14 +0100 lintian (2.5.124) unstable; urgency=medium * Summary of tag changes: + Added: - obsolete-crypt-alias - obsolete-des-encryption [ Chris Lamb ] * Locate and process .buildinfo files if mentioned in a .changes file; previously it was only examined if explicitly referenced. Thanks to James Clarke. (Closes: #920228) * If the changelog entry is missing a maintainer (eg. " -- "), don't assume that it's an NMU. (Closes: #920184) * Permit "-b" branch specifications in Mercurial Vcs-Hg control fields. (Closes: #920314) * Really fix summary generation code to match the "WIP" entry in the changelog after moving to gbp-dch(1). * Add "could break" as a spelling correction. [ Felix Lechner ] * Allow tests to be freely organised such as by check. (MR: !132, !134) [ Zack Weinberg ] * Add a check for binaries using obsolete DES encryption. (Closes: #920376) [ Paul Wise ] * Add several spelling corrections. -- Chris Lamb Thu, 24 Jan 2019 23:47:53 +0100 lintian (2.5.123) unstable; urgency=medium * Summary of tag changes: + Added: - inconsistent-appstream-metadata-license - package-contains-python-header-in-incorrect-directory + Renamed: - package-contains-usr-unmerged-pathnames -> package-contains-real-file-outside-usr [ Chris Lamb ] * Group warnings that only differ on the architecture in the HTML reports. (Closes: #919162) * Prevent a large number false-positives when checking "new style" init scripts that use "#!/usr/bin/env /lib/init/init-d-script" as their shebang. (Closes: #919604) * Check for packages that ship headers in /usr/include/python3.x. (Closes: #919979) * Check for inconsistencies between debian/copyright and the information embedded/duplicated in AppStream metadata files. Thanks to Daniel Kahn Gillmor for the idea. (Closes: #907072) * package-contains-usr-unmerged-pathnames tag: - Prevent false-positives for leading directories. (Closes: #919839) - Rename from package-contains-real-file-outside-usr. - Move to "Classification" severity instead of a pedantic/experimental combination. * Use a verb in the debian-changelog-line-too-short tag description. * Use "state cache" vs "state-cache" consistently between source and binary packages when printing warnings during report generation. * Update added/removed tag summary generation code to match "WIP" now we are using gbp-dch(1). [ Niels Thykier ] * lib/lintian: Do entry removals asynchroniously in temp labs. * Lintian::Unpacker: * Migrate to use IO::Async. * Refactor to extract a "find_next_task"-sub(-generator). * Add a simple queue to avoid some overhead. * Support prioritizing unpacking by collections. [ Felix Lechner ] * Template cleanup: (MR: !131) - Rename tests-watchfile and tests-pedantic. - Use renamed template sets in skeletons for suite tests. - Move upstream/metadata from debian-native to debian-extra-non-native. - Delete unused template set source-arch-independent. [ Mike Miller ] * Reword the description of the description-too-long tag to match the actual check. (Closes: #919740) [ Paul Wise ] * Add several spelling corrections. -- Chris Lamb Mon, 21 Jan 2019 18:53:24 +0000 lintian (2.5.122) unstable; urgency=medium * Summary of tag changes: + Added: - example-incorrect-path-for-interpreter - incorrect-path-for-interpreter - package-contains-real-file-outside-usr - zero-byte-executable-in-path [ Chris Lamb ] * Add a check for empty executable files in PATH; these files do not do anything and produce no error message. (Closes: #919458) * Prevent false-positives in the maintainer-script-should-not-use-dpkg-maintscript-helper tag by adding optional support for ignoring sections automatically added by debhelper. (Closes: #917567) * Split the wrong-path-for-interpreter tag into "wrong" and "incorrect" variants, the latter with a reduced severity and capturing incorrect (but working) shebangs such as "#!/usr/bin/env perl". Thanks to Ivo De Decker for the report. (Closes: #917790) * Update Debian Policy regex and manual references since this document moved to Sphinx. (Closes: #918963) * Also update the Java policy references as a new version of Docbook generates different HTML links. * Tests: - Tidy "sorry" message in t/runtests. - Drop changelog-format.t tests now we are trialling using gbp-dch. - Add a note that using a "maintainer-script-should-not-" tag prefix ensures that the tag will automatically pass the internal coverage tests. * debian/control: - Clarify some grammar in the package long description. - Prune Uploaders field to the current members of the "lintian" LDAP group. With thanks to all who have contributed in the past. [ Felix Lechner ] * Always use the extracted testing code in autopkgtests. (Closes: #919096) * Exit test runner with error code after parsing errors on the command line. * Convert test modules to the "Test Anything Protocol" (TAP). - Run TAP scripts for all tests through TAP::Harness. (MR: !124) - Add a generic test script for TAP::Harness. - Add name of the generic TAP script to the default settings. - Install generic TAP script into work directories during preparation. * Make harness timestamp calculation more robust for non-existent files. * Always use the installed "dplint" in autopkgtests. [ Josh Triplett ] * Add a pedantic-level package-contains-real-file-outside-usr tag to detect files installed to /. (MR: !128) [ Paul Wise ] * Add several spelling corrections. -- Chris Lamb Thu, 17 Jan 2019 15:52:23 +0000 lintian (2.5.121) unstable; urgency=medium * Summary of tag changes: + Added: - maintainer-script-should-not-use-dpkg-maintscript-helper - maintainer-script-supports-ancient-package-version * checks/shared-libs.pm: + [CL] Fix symbols-file-missing-build-depends-package-field false-positives when a package contains more than one library. Thanks to Mike Gabriel for the bug report. (Closes: #918473) * checks/scripts.{desc,pm}: + [CL] Check for manual calls to dpkg-maintscript-helper(1) in maintainer scripts; recommend using dh_installdeb .maintscript files instead. (Closes: #917567) + [CL] Check for packages that have maintainer scripts that ship support code for legacy versions of Debian. (Closes: #917566) * data/debhelper/compat-level: + [CL] Don't emit a pedantic warning for compat level 12 "until bullseye to avoid having to revert that change in case you need an unblock for the buster release". (Closes: #918809) * data/scripts/interpreters: + [CL] Apply a patch from Mo Zhou to fix the Julia interpreter path. (MR: !120) * t/*: + [CL] Apply a patch from Felix Lechner to ensure the debhelper-compat-experimental tag is run after the upgrade to debhelper compat level 12. (MR: !117) + [CL] Apply a patch series from Felix Lechner to support adaptive rebuilding, speeding up the test suite by a factor of 17 (excluding "scripts" tests). (MR: !118) + [CL] Apply a patch series from Felix Lechner to add a number of "internal" tests for the test apparatus itself. (MR: !119) + [CL] Apply a patch series from Felix Lechner to split the preparation of tests from the test runner itself. (MR: !122) -- Chris Lamb Thu, 10 Jan 2019 21:16:24 +0000 lintian (2.5.120) unstable; urgency=medium * Summary of tag changes: + Removed: - versioned-dependency-satisfied-by-perl * checks/binaries.pm: + [CL] Guile object files do not objdump/strip correctly so exclude them from a number of tests. (Closes: #918444) * checks/fields.{desc,pm}: + [CL] Drop versioned-dependency-satisfied-by-perl; Perl now provides its dual-lived module packages with versions. (Closes: #917967) * checks/{menus,patch-systems}.desc: + [CL] Clarify that spelling-* tags also correct various grammatical errors too. * checks/rules.desc: + [AB] override_dh_auto_test-does-not-check-DEB_BUILD_OPTIONS: Replace misleading "profile" with "option" in long description. See #889746 and https://lists.debian.org/debian-devel/2019/01/msg00047.html * checks/systemd.pm: + [CL] Apply a patch from Robin Jarry to handle service templates for missing init scripts. (MR: !115) * checks/testsuite.pm: + [CL] Apply a patch from Ondřej Nový fix false-positives in the unnecessary-testsuite-autopkgtest-field tag with non-"autopkgtest" values in the Testsuite control field. (Closes: #918621) * data/systemd/init-whitelist: + [CL] Add "brightness" to the list of initscripts that do not need a corresponding service file. (Closes: #918459) * debian/control: + [AB] Build-conflict with libperl-critic-pulp-perl (except with nocheck build profile) as it adds additional perlcritic rules which cause several checks under t/scripts/01-critic/ to fail. * lib/Lintian/Util.pm: + [CL] Add optional support for stripping comments at EOL in read_dpkg_control via DCTRL_COMMENTS_AT_EOL. (Closes: #917964) -- Chris Lamb Mon, 07 Jan 2019 22:19:07 +0000 lintian (2.5.119) unstable; urgency=medium * checks/changelog-file.pm: + [CL] Avoid false-positives in changelog-file-missing-explicit-entry when uploading updates to updates such as "1.2-3+nmu2" or "1.2-3deb8u2". * checks/cruft.pm: + [BR] Following #916095, tag "invariant sections" modified by upstream versions as non official. * checks/debhelper.desc: + [CL] Include the debhelper-compat method of setting the compatibility level in a number of tag descriptions. Thanks to Jeremy Bicha for the idea. (Closes: #917345) * checks/python.desc: + [CL] Update the dependency-on-python-version-marked-for-end-of-life tag's description to mention that a commented override would be useful in order to document that the package will not ported to Python 3.x. Thanks to Scott Kitterman. (Closes: #917264) * checks/shared-libs.desc: + [CL] Clarify that "Build-Depends-Package" lines should start in column 1 of the file and not be indented to align with the symbols themselves. * checks/upstream-signing-key.pm: + [CL] Apply a patch from Felix Lechner to provide writable temporary home directory for GPG. (Closes: #913930) * data/debhelper/compat-level: + [CL] Bump the recommended and experimental debhelper compat levels to 12 and 13 respectfully. (Closes: #917344) * data/files/js-libraries: + [BR] Detect the html5shiv library. This library is the de facto way to enable the use of HTML5 "sectioning" elements in legacy Internet Explorer. + [BR] Detect the mocha testing framework and recommend libjs-mocha. + [BR] Detect the "chai" testing framework, recommending libjs-chai. * data/files/privacy-breaker-websites: + [BR] Suggest using libjs-html5shiv over linking to an external version. + [BR] Detect the libjs-chai package. + [BR] Detect the libjs-expect.js package. * data/spelling/corrections: + [PW] Add a number of corrections. * debian/control: + [CL] Move to debhelper compatibility level 12. * t/tests/*: + [CL] Apply a patch eries from Felix Lechner to ensure the tests pass under groff 1.22.4-1. (Closes: #917752, #917844) + [CL] Apply a patch series from Felix Lechner to update the Debhelper compatibility level in tests. The value is now read from Lintian::Data and no longer hardcoded. (MR: !111) * t/tests/debhelper-compat-experimental/tags: + [CL] Apply a patch from Felix Lechner to remove a tag that is no longer emitted. (MR: !112) -- Chris Lamb Tue, 01 Jan 2019 14:55:01 +0000 lintian (2.5.118) unstable; urgency=medium * Summary of tag changes: + Added: - changelog-file-missing-explicit-entry - debian-tests-control-and-control-autodep8 - debian-tests-control-autodep8-is-obsolete * checks/*.desc: + [CL] Consistently use a single space after a full-stop/period. * checks/changelog-file.{desc,pm}: + [CL] Check that 1.2-3~debXuY stanzas follow a 1.2-3 one. Thanks to Andreas Beckmann for the suggestion. (Closes: #916877) * checks/cruft.pm: + [CL] Allow some alternatives in the "invariant sections" regular expressions as some upstream's have modified the official wording. Thanks to Dmitry Bogatov for the patch. (Closes: #916095) * checks/files.pm: + [CL] The package-contains-documentation-outside-usr-share-doc tag should accept files under "/usr/share/help"; these are being installed by a number of GNOME packages. Thanks to Jeremy Bicha for the report. (Closes: #916497) + [CL] Avoid a number of false-positives in documentation files when processing the uses-dpkg-database-directly tag as these are invariably legitimate. + [CL] Prevent package-contains-no-arch-dependent-files false-positives regarding files under /usr/lib/. Thanks to Andreas Beckmann. (Closes: #916901, #917028) * checks/systemd.pm: + [CL] Don't emit systemd-service-file-missing-hardening-features for WantedBy=sleep.target "services" such as autosuspend. * checks/testsuite.{desc,pm}: + [CL] Apply a patch series from Paul Gevers to warn about obsolete debian/tests/control.autodep8 files. (MR: !95) * checks/version-substvars.pm: + [CL] Apply a patch from Matt Kraai (via MR !101) to make the version-substvar-for-external-package tag require versioned provides. (Closes: #833608) * CONTRIBUTING.md: + [CL] Update a number of references to Salsa, recommending merge requests, etc. * data/output/manual-references: + [CL] Refresh. * data/spelling/corrections: + [PW] Add a number of corrections. * data/standards-version/release-dates: + [CL] Add 4.3.0 as a known Standards-Version. * data/systemd/wantedby-whitelist: + [CL] Add default, network-online and sleep' to the list of valid WantedBy systemd targets. + [PW] Add a number of corrections. * debian/{docs,lintian.install}: + [CL] Order lines. to Salvo Tomaselli for the report. (Closes: #917120) * doc/lintianrc.example: + [CL] Clarify that spaces are valid in variable assignments. Thanks * private/refresh-manual-refs: + [CL] Update location of the Python policy; it is now shipped in the "python3" binary package. * t/*: + [CL] Apply a patch series from Felix Lechner to capture log output in tests using Capture::Tiny as it works better in a multi-threaded environment. (MR: !102) + [CL] Apply a patch from Felix Lechner to remove the "diff" directory and contents for two tests. (MR: !103) -- Chris Lamb Sun, 23 Dec 2018 16:42:08 +0000 lintian (2.5.117) unstable; urgency=medium * Summary of tag changes: + Added: - file-references-package-build-path * checks/files.pm: + [CL] Don't emit uses-dpkg-database-directly for d-i components; they likely know what they are doing with no alternatives. + [CL] Use the output from file(1) when determining whether to emit the package-contains-no-arch-dependent-files tag to catch packages that ship (for example) just a Python script under /usr/bin in an architecture-dependent package. This reverts 6f4bd2fee2 in order to distinguish between "data" and such scripts. Thanks to Dmitry Bogatov for investigating. (Closes: #916023) + [CL] Refactor, tidy and optimise various checks for the contents of files. + [CL] Check files for references to the build path if specified in a .buildinfo. (Closes: #916021) * checks/shared-libs.desc: + [CL] Clarify that symbols-file-missing-build-depends-package-field is emitted per-package in its long description, not based on a file. * checks/systemd.pm: + [CL] Don't emit systemd-service-file-missing-hardening-features for Type=oneshot "services" such as mdadm(8). * checks/watch-file.desc: + [CL] Correct grammar of the debian-watch-does-not-check-gpg-signature tag description. + [CL] Mark debian-watch-does-not-check-gpg-signature as "experimental" as it is not actionable in the vast majority of cases and is in danger of diluting the output of Lintian. (Closes: #916207) * data/spelling/corrections: + [PW] Add a number of corrections. * t/*: + [CL] Apply a patch series from Felix Lechner to use "skeletons" as test templates, fixing a "exec failed: Text file busy" regression when running tests by tag name. (Closes: #916087) + [CL] Apply a patch series from Felix Lechner to improve the "onlyrun=" test selection feature. One can now select all tests connected to particular Lintian check with "check:foo". (MR: !90) + [CL] Apply a patch set from Felix Lechner to sign test packages. when a upstream/private-key.asc is present. (MR: !93) -- Chris Lamb Fri, 14 Dec 2018 17:56:27 +0000 lintian (2.5.116) unstable; urgency=medium * checks/fields.pm: + [CL] Apply a patch from Felix Lechner to remove the incorrect line in the fields-bugs-field-does-not-refer-to-debian-infrastructure tag's output. (MR: !83) * data/fields/perl-provides: + [CL] Update for Perl 5.028001. * data/java/constants: + [CL] Apply a patch from Felix Lechner to fix the "maximum existing * debian/rules: + [CL] Apply a patch from Felix Lechner to remove the "runtests" build stamp mechanism as it blocks runs that should be allowed such as when only the test runner itself has changed. (MR: !80) * t/*: + [CL] Apply a patch series from Felix Lechner to make "pedantic" templates the default for all tests. (MR: !87) + [CL] Apply a patch from Felix Lechner to allow debian/rules to be generated from templates in tests. (MR: !81) + [CL] Apply a patch from Felix Lechner to remove pre-existing metadata in the upstream-metadata-is-not-a-file test. (MR: !84) + [CL] Apply a patch series from Felix Lechner to provide a generalised facility to make any test template set independent of the package format. (MR: !82) + [CL] Apply a patch series from Felix Lechner to support suite-independent test templates. (MR: !88) -- Chris Lamb Fri, 07 Dec 2018 08:59:39 +0000 lintian (2.5.115) unstable; urgency=medium * Summary of tag changes: + Removed: - debian-rules-makemaker-prefix-is-deprecated * checks/binaries.pm: + [CL] Allow packages to define an RPATH under /usr/lib/ghc/ as the Haskell team have their own scheme for this. (Closes: #914873) * checks/rules.{desc,pm}: + [CL] Drop the debian-rules-makemaker-prefix-is-deprecated tag as the transition was completed in 2015. Thanks to Niko Tyni for the update. (Closes: #914885) * checks/patch-systems.desc: + [CL] Downgrade package-uses-vendor-specific-patch-series from "E:" to "W:" as they are not RC bugs until the release of buster. * data/spelling/corrections: + [PW] Add a number of corrections. * t/*: + [CL] Apply a patch series from Felix Lechner to implement a universal test runner with file-based default values. (MR: !76) * t/runtests: + [CL] Apply a patch from Felix Lechner to fail tests with outdated specifications (ie. ./debian/debian exists). (MR: !77) * t/tests/{binaries-missing-lfs,deb-format-udeb-compression}: + [CL] Apply a patch from Adam Conrad to fix two typos introduced when parameterising test architectures. (Closes: #914952) * t/tests/files-multiarch-foreign-files: + [CL] Apply a patch from James Clarke to fix this test on non-amd64 architectures. (MR: !78) -- Chris Lamb Mon, 03 Dec 2018 13:33:49 +0000 lintian (2.5.114) unstable; urgency=medium * checks/debhelper.pm: + [CL] Apply a patch from Stephen Kitt to avoid false-positives for the package-does-not-use-debhelper-or-cdbs tag if the call to dh(1) is prefixed with "@", "+" or "-". (Closes: #914538) * checks/*, t/*: + [CL] Consistently use (eg.) "DEP 5" over "DEP-5" to match the style used on dep.debian.net. (Closes: #914562) * data/files/documentation-file-regex: + [CL] Prevent false-positives for files called (eg.) readMesh_off.m for the package-contains-documentation-outside-usr-share-doc tag which was matching an overly-permissive regex. Thanks to Rafael Laboissière (rafael) for the report. (Closes: #914500) * data/spelling/corrections: + [PW] Add a number of corrections. * t/*: + [CL] Apply a patch series from Felix Lechner to make the templating more flexible in tests, re-using the Skeleton: statements in "desc" files for more complex templating logic. (MR: !75) -- Chris Lamb Mon, 26 Nov 2018 08:21:31 +0000 lintian (2.5.113) unstable; urgency=medium * Summary of tag changes: + Added: - package-contains-file-in-usr-share-hal - package-uses-vendor-specific-patch-series - systemd-service-file-missing-hardening-features + Merged: - maintainer-script-should-not-use-dpkg-{database,status}-directly -> uses-dpkg-database-directly + Renamed: - init.d-script-does-not-implement-optional-option -> init.d-script-does-not-implement-status-option * checks/control-file.{desc.pm}: + [CL] Ensure the "Architecture" field in a changes files contains only the string "source" rather than checking whether it is defined or not. This fixes source-only-upload-to-non-free-without-autobuild false positives. Thanks to Chuan-kai Lin. (Closes: #914163) * checks/files.{desc,pm}: + [CL] Unify all dpkg internal database checks into a single new uses-dpkg-database-directly check, extending it to check all files shipped in package, not just the maintainer scripts. Thanks to Guillem Jover for the suggestion. (Closes: #913974) * checks/files.desc, checks/java.desc: + [CL] Clarify distinction between the package-installs-java-bytecode and source-contains-prebuilt-java-object tags. Thanks to Markus Koschany for the suggestion. (Closes: #879851) * checks/init.d.{pm,desc}: + [CL] Rework the init.d-script-does-not-implement-optional-option tag by renaming it to init.d-script-does-not-implement-status-option and update the description to make the distinction between the LSB (where it is required) and Debian Policy (where currently it is not). Thanks to Andreas Henriksson for the suggestion. (Closes: #913466) * checks/patch-systems.{desc,pm}: + [CL] Warn about packages that use vendor-specific patch series files since the CTTE decision in #904302. * checks/shared-libs.pm: + [CL] Apply a patch from James McCoy to fix a regression that was causing Lintian to incorrectly report the invalid-template-id-in-symbols-file and syntax-error-in-symbols-file tags. Thanks! (Closes: #913290) * checks/systemd.{desc,pm}: + [CL] Emit an experimental-level warning for .service files that do not appear to use any security/hardening features. (Closes: #913605) * checks/watch-file.pm: + [CL] Avoid debian-watch-file-should-mangle-version false-positives when the file uses the @DEB_EXT@ or auto dversionmangle features. Thanks to Sebastian Ramacher and Mattia Rizzolo. (Closes: #913761) * collection/java-info: + [CL] Prevent an "uninitialized value" warning when processing empty or otherwise truncated .class files. Thanks to Branden Robinson for the report. (Closes: #913398) * data/description/planned-features: + [AB] Add "is planned" and "is also planned". * data/fields/name_section_mappings: + [CL] Tidy file. * data/files/fnames: + [CL] Check for packages that install files to /usr/share/hal as the hal package was removed from Debian in 2014. Thanks to Paul Wise for the idea. (Closes: #913280) * data/spelling/corrections: + [AB] Add "redundant" and a bunch of variants around "conditional". + [PW] Add a number of corrections. * t/*: + [CL] Apply a patch series from Felix Lechner to parameterise the debhelper compatibility level in tests. (MR: !73) + [CL] Apply a patch from Felix Lechner to implement a new file hierarchy for test specifications. (MR: !74) * t/scripts/spellintian.t: + [CL] Make the "No no-op correction present..." test failure messages include the offending correction to make it easier to correct. -- Chris Lamb Fri, 23 Nov 2018 22:13:47 +0000 lintian (2.5.112) unstable; urgency=medium * Summary of tag changes: + Added: - public-upstream-key-in-native-package - public-upstream-key-not-minimal - public-upstream-key-unusable - public-upstream-keys-in-multiple-locations - systemd-service-file-pidfile-refers-to-var-run * checks/cruft.desc: + [CL] Bump the severity of the source-contains-prebuilt-windows-binary tag from "P:" to "W:" and update the description to mention that this could potentially be a DFSG violation. * checks/systemd.{desc,pm}: + [CL] Warn if a PIDFile entry in a .service unit references /var/run. (Closes: #913078) * checks/upstream-signing-key.{desc,pm}: + [CL] Apply a patch series from Felix Lechner to add multiple tests for upstream GPG keys. Thanks! (MR: !62) * data/java/constants: + [CL] Apply patches from Bas Couwenberg to update the bytecode checks for OpenJDK 11. (Closes: #912292) * data/rules/rules-should-not-use: + [CL] Ensure --dbgsym-migration='quoted with spaces' is correctly displayed when emitting debug-symbol-migration-possibly-complete. * data/spelling/corrections: + [PW] Add a number of corrections. * debian/control: + [CL] Apply a patch from Mathieu Parent to add a dependency on dpkg-dev to ensure dpkg-architecture is available. Thanks! (Closes: #912330) * t/*: + [CL] Apply a patch from Adam Conrad to fix two tests on non-amd64 architectures in Ubuntu. Thanks! (Closes: #913099) + [CL] Apply a patch series Felix Lechner to parameterise the source format in all applicable tests. (MR: !64) + [CL] Apply a patch series from Felix Lechner to parameterise the package architecture for all tests that build only single binary package. (MR: !68) * t/tests/basic-non-native-with-epoch/desc: + [CL] Apply a patch from Felix Lechner to correct a test "Type" field. (MR: !63) * t/tests/watch-file-pgpmode-next/*: + [CL] Apply a patch series from Felix Lechner to add missing "-I -E" options to the existing "--pedantic" one. (MR: !67) * vendors/ubuntu/main/data/changes-file/known-dists: + [CL] Add "disco" as a known Ubuntu distribution. -- Chris Lamb Thu, 08 Nov 2018 22:29:31 +0000 lintian (2.5.111) unstable; urgency=medium * Summary of tag changes: + Added: - maintainer-script-should-not-use-piuparts-variable - source-package-encodes-python-version * checks/binaries.pm: + [CL] Prevent a false-positive when checking statically-linked-binary when we do not have access to the source package to check for a Golang build-dependency by falling-back to checking the package name. Thanks to Jeffrey Cliff for the report. (Closes: #911864) * checks/changelog-file.desc: + [CL] Clarify the grammatical logic in the long description of the epoch-change-without-comment tag. * checks/cruft.pm: + [CL] Look for debian/missing-sources/foo for a missing "foo" to prevent source-is-missing false-positives. Thanks to Daniel Kahn Gillmor for the report. (Closes: #890468) * checks/menu-format.desc: + [CL] Apply a patch from Salvatore Bonaccorso to fix a typo in the description for the desktop-entry-lacks-icon-entry tag. (MR: !59) * checks/python.{desc,pm}: + [CL] Check for packages that encode a version number in their source package name. * checks/scripts.desc: + [CL] Warn about packages that use PIUPARTS_TEST (etc.) in their maintainer scripts. Thanks to Holger Levsen. (Closes: #912040) + [CL] Add a note that packages might have added the required dependency for missing-versioned-depends-on-init-system-helpers to Build-Depends instead of the binary package (eg. in src:lbcd). * data/spelling/corrections: + [PW] Add a number of corrections. + [CL] Add a "recognise" connection. (re. MR: !59). * data/testsuite/known-restrictions: + [CL] Apply a patch from intrigeri to add "superficial" to the list of known restrictions in testsuite definitions. This was added to autopkgtest in #904979. (MR: !60) * reporting/templates/tag.tmpl: + [CL] Also show the maintainer name on the tag-specific pages such as . -- Chris Lamb Mon, 29 Oct 2018 13:51:26 +0000 lintian (2.5.110) unstable; urgency=medium * Summary of tag changes: + Added: - symbols-file-missing-build-depends-package-field * checks/debhelper.desc: + [CL] Tidy a number of references regarding the debhelper-compat virtual package, in particular clarifying that this does not work for experimental/beta levels. + [CL] Update example experimental combination of using compatibility level 9 with debhelper >= 8.1.3 with using level 12 with debhelper >= 11.4~. * checks/fields.pm: + [CL] Apply a patch series from Felix Lechner to fix a false-negative in the multi-arch-same-package-has-arch-specific-overrides tag. (Closes: #911355) * checks/shared-libs.{desc,pm}: + [CL] Emit a "I:" warning for packages that do not specify a Build-Depends-Package field in their symbol files. (Closes: #911451) * data/files/js-libraries: + [CL] Prevent a false-positive in embedded-javascript-library as jquery-ui.structure.css is not shipped by libjs-jquery-ui. (Closes: #911311) * data/scripts/interpreters: + [CL] Apply a patch from Luca Boccassi to add /lib/init/init-d-script to the list of known interpreters. (MR: !56) * data/spelling/*: + [CL] Move the "needs" entry to the corrections-case file, preventing false positives in the spelling-error-in-{binary,changelog} tags that reference Georg Nees, an early pioneer of computer art. + [PW] Add a number of corrections. * t/*: + [CL] Apply a patch series from Felix Lechner to adjust some build-dependencies that were discovered when backporting to stretch. (MR: !51) + [CL] Apply a patch series from Felix Lechner to move data for upstream tarballs to "orig" to facilitate the addition of tests related to upstream signatures. (MR: !52) + [CL] Apply a patch series from Felix Lechner to use relative paths in Lintian options; a tight integration between the test runner and harness is generally undesirable. (MR: !54) + [CL] Apply a patch series from Felix Lechner to move the templated changelogs away from template directory. (MR: !57) + [CL] Apply a patch series from Felix Lechner to remove the default.upstream placeholder in empty template directories. (MR: !58) -- Chris Lamb Mon, 22 Oct 2018 01:06:54 +0000 lintian (2.5.109) unstable; urgency=medium * Summary of tag changes: + Added: - maintainer-script-should-not-parse-etc-passwd-or-group - missing-versioned-depends-on-init-system-helpers - unknown-file-in-python-module-directory * checks/debhelper.pm: + [CL] Avoid false-positives when using the blends-dev package for the package-does-not-use-debhelper-or-cdbs tag. (Closes: #910453) * checks/files.{pm,desc}: + [CL] Check for packages that ship non-Python files in top-level Python module directories such as /usr/lib/python3/dist-packages. * checks/scripts.{desc,pm}: + [CL] Check for packages missing versioned dependencies on init-system-helpers. (Closes: #910594) + [CL] Check for packages that manually parse /etc/passwd or /etc/group using grep/egrep etc. in their maintainer scripts. Thanks to Rhonda D'Vine for the bug report. (Closes: #911157) * t/tests/*: + [CL] Apply a patch from Felix Lechner to fix some test descriptions not parsed correctly due to continuation lines. + [CL] Apply a set of patches from Felix Lechner to make various tests architecture independent. + [CL] Apply a patch from Felix Lechner to require build dependencies as prerequisites for tests. + [CL] Apply a patch from Felix Lechner to clarify the substitution variable name for the test package's Architecture field. * t/tests/debhelper-dh-nativejava: + [CL] Apply a patch from Felix Lechner to remove this now-obsolete test given that -gcj packages are no-longer built. -- Chris Lamb Wed, 17 Oct 2018 02:38:36 +0000 lintian (2.5.108) unstable; urgency=medium * Summary of tag changes: + Added: - maintainer-script-has-invalid-update-inetd-options * checks/scripts.{desc,pm}: + [CL] Check for calls to update-inetd(1) that use "--group" without "--add" and "--pattern" with "--add". (Closes: #909511) * checks/testsuite.pm: + [CL] Avoid testsuite-dependency-has-unparsable-elements false positives when the "Depends" field starts with a newline. Thanks to Mattia Rizzolo for the report. (Closes: #910210) * data/spelling/corrections: + [PW] Add a number of corrections. * debian/control: + [NT] Remove myself from the Uploaders field. * t/source/*: + [CL] Apply two patch series from Felix Lechner to rename a test target to match its name and also to adjust version numbers to match test targets produced. -- Chris Lamb Fri, 05 Oct 2018 11:07:25 +0000 lintian (2.5.107) unstable; urgency=medium * checks/changes-file.{desc,pm}: + [CL] Don't emit changelog-empty-entry if distribution is UNRELEASED. (Closes: #909674) * checks/debhelper.desc: + [CL] Apply patch from Josh Triplett to improve the long description of excessive-debhelper-overrides. * checks/scripts.{desc,pm}: + [CL] Don't emit udevadm-called-without-guard if the package has a dependency on udev itself. (Closes: #909801) * data/rules/rules-should-not-use: + [CL] Ensure --dbgsym-migration='quoted' is correctly displayed when emitting the debug-symbol-migration-possibly-complete tag. * data/spelling/corrections: + [CL] Add a suggestion from Sven Joachim to add "practical" and "practically" as spelling corrections for "pratical" and "pratically". (Closes: #909772) + [CL] Add "practically" as a correction for "practicaly". + [PW] Add a number of corrections. -- Chris Lamb Mon, 01 Oct 2018 13:46:42 +0000 lintian (2.5.106) unstable; urgency=medium * Summary of tag changes: + Added: - excessive-debhelper-overrides - package-installs-apt-keyring * checks/debhelper.{desc,pm}: + [CL] Warn about packages that use an excessive (currently >= 20) number of debhelper overrides. * checks/files.{desc,pm}: + [CL] Apply a patch from Josh Triplett to check for packages that install APT keyrings without being called "foo-archive-keyring" or "foo-apt-source". + [CL] Apply a patch from Josh Triplett to allow packages such as "foo-apt-source" to install APT sources. * data/binaries/spelling-exceptions: + [CL] Also add "wiH" (alongside "wIH") to the list of "spelling-error-in-binary" exceptions. * t/*: + [CL] Apply a patch series from Felix Lechner to support wildcards in test architecture fields. Thanks! + [CL] Apply a patch series from Felix Lechner to disable architecture overrides in the testsuite; see for more information. + [CL] Apply a patch series from Josh Triplett to add "Test-Depends" to a few tests. (Closes: #908915) -- Chris Lamb Wed, 26 Sep 2018 15:04:01 +0000 lintian (2.5.105) unstable; urgency=medium * Summary of tag changes: + Added: - debian-rules-should-not-use-custom-compression-settings - debian-source-options-has-custom-compression-settings + Removed: - xz-compression-level-too-high * checks/cruft.pm: + [CL] Do not emit package-does-not-install-examples for example directories under "vendor" or "third_party". * checks/debian-source-dir.{desc,pm}: + [CL] Warn about debian/source/options specifying custom compression settings. (Closes: #906614) * checks/rules.{desc,pm}: + [CL] Expand and rename xz-compression-level-too-high to warn about all manual adjustments to such settings. (Closes: #906611) * commands/lintian.pm: + [CL] Show the number of unused overrides in the "N: 1 tag overridden ..." summary line. (Closes: #909319) * t/*: + [CL] Apply a patch series from Felix Lechner to support dynamic test rebuilding. -- Chris Lamb Mon, 24 Sep 2018 10:04:39 +0000 lintian (2.5.104) unstable; urgency=medium * checks/description.pm: + [CL] Check for overly-indented paragraph separators in package long descriptions. (Closes: #909272) * checks/fields.pm: + [CL] Apply patches from Josh Triplett to re-use the metapackage detection logic from Lintian::Collect::Binary and to allow metapackages to depend on toolchain packages. * checks/source-copyright.pm: + [CL] Fix a number of false-positives when checking for incomplete Creative Commons licenses. Thanks to Jonathan Dowland (jmtd) for collecting a corpus of test data. (Closes: #906284) + [CL] Also check the "Source" field when looking for repack explanations as per section 6.4 of the machine-readable debian/copyright file specification. (Closes: #909270) + [CL] Include the line number in the output of the incomplete-creative-commons-license tag. * private/refresh-ftp-master-tags: + [CL] Remove any duplicates from FTPmaster's list of supplied tags when automatically generating the ftp-master-{fatal,nonfatal} data files. This should be fixed upstream via . * profiles/debian/ftp-master-auto-reject.profile: + [CL] Refresh tags via private/refresh-ftp-master-tags, specifically allowing dir-or-file-in-etc-opt to be overridable. (Closes: #908911) -- Chris Lamb Fri, 21 Sep 2018 08:13:34 +0000 lintian (2.5.103) unstable; urgency=medium * private/refresh-manual-refs: + [CL] Apply a patch series from Joseph Herlant to update some locations of manual references. * t/helpers/bin/create-deb: + [CL] Apply a patch from Felix Lechner to removed a likely-accidental slash in a find(1) call. -- Chris Lamb Fri, 14 Sep 2018 17:33:43 +0000 lintian (2.5.102) unstable; urgency=medium * checks/files.pm: + [CL] Ensure package-contains-documentation-outside-usr-share-doc also excludes files in directories called (eg.) "autotools_templates" or "my-templates.d". (Closes: #907734) * data/fields/name_section_mappings: + [CL] Reclassify xfonts-foo packages as part of the "fonts" section as nobody was doing this in practice. This reverts the change requested in #878609 which was released inLintian 2.5.72. Thanks to Russ Allbery. (Closes: #907725) -- Chris Lamb Tue, 11 Sep 2018 19:33:54 +0000 lintian (2.5.101) unstable; urgency=medium * Summary of tag changes: + Added: - changelog-distribution-does-not-match-changes-file - package-builds-dbg-and-dbgsym-variants * checks/changes-file.{desc,pm}: + [CL] Check for packages that build both foo-dbg and foo-dbgsym debug symbol variants. (Closes: #907423) * checks/changelog-file.{desc,pm}: + [CL] Check that .changes and debian/changelog distribution are identical. (Closes: #906610) * checks/control-files.desc: + [CL] Clarify that checks/control-files.* relates to the "control" tarball, not debian/control in the source tarball. * checks/fields.desc: + [CL] Clarify that the target of the dbg-package-missing-depends check cannot be "Architecture: all". * checks/files.pm: + [CL] Don't emit package-contains-documentation-outside-usr-share-doc for files in "templates" directories. (Closes: #907734) + [CL] Apply a patch from Josh Triplett and Ximin Luo to ignore false-positive "ancient" files generated by Rust. * checks/init.d.pm: + [CL] Avoid false positives in init.d-script-possible-missing-stop when checking initscripts in "early boot" packages such as udev, etc. (Closes: #908185) * checks/scripts.desc: + [CL] Apply a patch from Adrian Bunk to improve the long description of the multi-arch-same-package-calls-pycompile tag. + [CL] Update the long description of wrong-path-for-interpreter to reflect the weakening of the /usr/bin/perl "should" requirement and to use "particular" over "special exception". Thanks to David Bremner. (Closes: #908350) * data/changelog-file/invalid-dates: + [CL] Merge patch from Josh Triplett to display the correct "short" three-letter dates for June and July. * lib/Lintian/Data.pm: + [CL] Apply a patch series from Josh Triplett to add a "matches_any" utility function to Lintian::Data instances and ports a number of applicable instances to use it. Thanks! -- Chris Lamb Sun, 09 Sep 2018 09:34:50 +0000 lintian (2.5.100) unstable; urgency=medium * Summary of tag changes: + Added: - obsolete-runtime-tests-restriction - package-contains-python-dot-directory - skip-systemd-native-flag-missing-pre-depends + Renamed: - vcs-obsolete-in-debian-infrastructure -> vcs-deprecated-in-debian-infrastructure * checks/control-file.{desc.pm}: + [CL] Don't check the .dsc for "XS-Autobuild"; check the control file itself. This fixes source-only-upload-to-non-free-without-autobuild. (Closes: #907681) * checks/debhelper.pm: + [CL] Also check override_dh_systemd_-arch and -indep for debian-rules-uses-deprecated-systemd-override. (Closes: #907845) * checks/fields.{desc.pm}: + [CL] Rename vcs-deprecated-in-debian-infrastructure and update the documentation to match. (Closes: #907578) * checks/scripts.{desc.pm}: + [CL] Check for "invoke-rc.d --skip-systemd-native" without a suitable Pre-Depends. (Closes: #907836) * checks/testsuite.{desc,pm}: + [CL] Don't emit unknown-runtime-tests-feature for autopkgtest "Features:" entries that use the "test-name=foo" nomenclature. (Closes: #907620) + [CL] Apply patch from Paul Gevers to emit warnings for deprecated test features. * data/files/fnames: + [CL] Check for "dot" directories in Python packaging such as ".cache", etc; they are usually an error. (Closes: #907870) * data/spelling/corrections: + [PW] Add a number of corrections. * data/testsuite/known-restrictions: + [CL] Apply patch from Paul Gevers to add hint-testsuite-triggers and skip-not-installable to the list of known autopkgtest restrictions. * lib/Lintian/Output.pm: + [CL] Escape output if --color=html is used. This prevents browsers loading images/stylesheets from foreign websites that are part of warning messages. (Closes: #907667) * Miscellaneous: + [CL] Apply patch Daniele Forsi fixing a large number of typos in the codebase, documentation, etc. + [CL] Update tests to support dash 0.5.10.2. -- Chris Lamb Thu, 06 Sep 2018 12:09:56 +0000 lintian (2.5.99) unstable; urgency=medium * checks/crufts.desc: + [FL] Improve tag description for 'package-does-not-install-examples'. * checks/source-copyright.desc: + [CL] Correct "may be" typo in the long description for the 'incomplete-creative-commons-license' tag. * data/cruft/warn-file-type: + [CL] Match (for example) foo_o.golden with foo.cc to avoid source-is-missing false-positives. (Closes: #907475) * t/tests/changes: + [FL] Place all tests for the 'changes' suite into their own directories. -- Chris Lamb Wed, 29 Aug 2018 14:18:31 +0000 lintian (2.5.98) unstable; urgency=medium * Summary of tag changes: + Added: - debian-rules-passes-version-info-to-dh_shlibdeps - multi-arch-same-package-calls-pycompile * checks/rules.pm: + [CL] Apply patch from Peter Pentchev to fix false-positives for missing Build-Depends on debhelper when using debhelper-compat commands. (Closes: #907261) * checks/scripts.{desc,pm}: + [CL] Warn about Multi-Arch: same packages that use pycompile or py3compile in their maintainer scripts. (Closes: #907276) + [CL] Expand the description to explain why we emit wrong-path-for-interpreter for #!/usr/bin/env perl. * checks/source-changelog.pm: + [FL] Fix false positives in version parsing, especially when some components are "0". (Closes: #906957) * data/rules/rules-should-not-use: + [CL] Check for packages that pass -V to dh_shlibdeps instead of dh_makeshlibs. (Closes: #906722) * data/standards-version/release-dates: + [CL] Add 4.2.1 as a known Standards-Version. -- Chris Lamb Sun, 26 Aug 2018 09:00:19 +0000 lintian (2.5.97) unstable; urgency=medium * Summary of tag changes: + Added: - debian-changelog-version-requires-debian-revision - maintainer-script-needs-depends-on-xfonts-utils - malformed-debian-changelog-version - missing-call-to-update-fonts - upload-has-backports-version-number + Renamed: - native-package-with-dash-version -> hyphen-in-native-debian-changelog-version - non-native-package-with-native-version -> hyphen-in-upstream-part-of-debian-changelog-version * checks/changes-file.{desc,pm}: + [CL] Apply patch from Julien Cristau (with test) to warn about uploads that have a version containing "~bpo" but their target distribution is not *-backports. (Closes: #906155) * checks/scripts.{desc,pm}: + [CL] Check for packages that contain X11 fonts but do not run update-fonts-* in their postinst or depend on xfonts-utils. (Closes: #905881) * checks/source-changelog.{desc.pm}: + [FL] Rework, centralise and improve version parsing. (Closes: #886036) * data/common/dh_addons: + [NT] Refresh data. * data/debhelper/dh_{commands,packages}: + [NT] Refresh data. * data/spelling/corrections: + [PW] Add a number of corrections. * data/testsuite/known-restrictions: + [CL] Re-add "allow-stderr" accidentally dropped in 0cb688fb. (Closes: #905843) * private/refresh-debhelper-data: + [NT] Add debhelper-compat an alternative to debhelper in the data files. * t/scripts/01-critic/runner.pl: + [CL] Bump perltidy test dependencies to prevent a failing build in backports, etc. -- Chris Lamb Sat, 18 Aug 2018 08:47:03 +0000 lintian (2.5.96) unstable; urgency=medium * Summary of tag changes: + Added: - incomplete-creative-commons-license - maintainer-script-should-not-use-dpkg-database-directly + Removed: - no-upstream-changelog + Renamed: - package-contains-upstream-install-documentation -> package-contains-upstream-installation-documentation * checks/changelog-file.{desc,pm}: + [CL] Drop no-upstream-changelog; it is rarely actionable and simply introduces unnecessary noise and/or requiring an override. It had additionally been disabled in the Ubuntu profile since 2011. (Closes: #513544, #646192) * checks/cruft.desc: + [CL] Tidy the description of the license-problem-cc-by-nc-sa and license-problem-non-free-img-lenna tags. * checks/files.{desc,pm}: + [BR] Improve package-contains-documentation-outside-usr-share-doc by checking if README includes 'this directory' (Closes: #904852) + [CL] Rename package-contains-upstream-install-documentation tag to package-contains-upstream-installation-documentation. * checks/source-copyright.{desc,pm}: + [CL] Check for Creative Commons license texts that use the incomplete "human-readable" summary. (Closes: #903470) * data/scripts/maintainer-script-bad-command: + [CL] Warn about packages that directly query the dpkg database in their maintainer scripts. Thanks, Guillem Jover! (Closes: #905469) * data/spelling/corrections: + [PW] Add a number of corrections. -- Chris Lamb Thu, 09 Aug 2018 13:44:29 +0000 lintian (2.5.95) unstable; urgency=medium * Summary of tag changes: + Added: - debhelper-compat-virtual-relation - depends-on-python2-and-python3 - no-op-testsuite - r-package-not-arch-all - source-only-upload-to-non-free-without-autobuild * checks/debhelper.{desc,pm}: + [CL] Support "debhelper-compat (= X)" build-dependency as a replacement for "debhelper (>= X~)". (Closes: #904886) * checks/changes-file.{desc,pm}: + [CL] Detect source-only uploads to non-free uploads that will not be autobuilt by default. (Closes: #905467) * checks/control-file.desc: + [AB] Fix duplicate word "the" in tag description. * checks/cruft.pm: + [CL] Don't emit mentions-deprecated-usr-lib-perl5-directory for debian/*.install files as they are used as source directories. (Closes: #905635) * checks/fields.{desc.pm}: + [CL] Warn about R packages incorrectly set to "Architecture: any". (Closes: #904985) * checks/files.{desc,pm}: + [CL] Whitelist files in /usr/share/doc and /usr/share/locale for the missing-depends-on-sensible-utils tag and update testsuite to match. (Closes: #904936) + [CL] Add Suggests and Pre-Depends as potential relations with the sensible-utils package. Thanks to Guillem Jover for the idea. * checks/python.{desc,pm}: + [CL] Check for Python packages that have a relation on both Python 2 and Python 3. (Closes: #904817) * checks/testsuite.{desc,pm}: + [CL] Warn about packages that have a single, no-op autopkgtest. (Closes: #905030) + [CL] Move list of known fields, "Restriction" fields and testsuites to files under data/testsuite/. + [CL] Improve the long description of the testsuite-autopkgtest-missing tag; in particular, reference that autopkgtest results now influence migration from unstable to testing. * data/debhelper/filename-config-files: + [NT] Add mime and sharedmimeinfo as known debhelper config files. * data/scripts/interpreters: + [CL] Prevent ruby-script-but-no-ruby-dep false positives by also accepting ruby:any as a dependency. Thanks to Marc Dequènes for the bug report. (Closes: #905258) * data/spelling/corrections: + [PW] Add a number of corrections. * data/standards-version/release-dates: + [CL] Add 4.2.0 as a known Standards-Version. * data/testsuite/known-restrictions: + [CL] Add "flaky" and "skippable" to the list of known Restrictions in testsuite definitions. Thanks to Rebecca N. Palmer. (Closes: #904623) * lib/Lintian/Collect/Package.pm: + [CL] Don't assume that "tar -tv" output always includes a time. (Closes: #905423) * debian/rules: + [CL] Apply a patch from Felix Lechner which fixes a typo which was preventing the 'runtests' target relying on test descriptions. -- Chris Lamb Tue, 07 Aug 2018 13:02:08 +0000 lintian (2.5.94) unstable; urgency=medium * Summary of tag changes: + Added: - spelling-error-in-rules-requires-root + Renamed: - missing-depends-on-sensible-utils => script-needs-depends-on-sensible-utils * checks/control-file.desc: + [CL] Raise the severity of the debian-control-has-empty-field tag from "P:" to "I:" and explicitly test the "whitespace" cases. (Closes: #904420) + [CL] Warn about mispellings of Rules-Requires-Root. Thanks to Axel Beckert for the idea. (Closes: #904522) * checks/cruft.{desc,pm}: + [CL] Correctly warn about packages using sensible-utils without a relationship by checking all files instead of just maintainer scripts. Thanks to Guillem Jover. (Closes: #872611) * checks/scripts.pm: + [CL] Policy 10.4 states that Perl scripts must use /usr/bin/perl directly and not via /usr/bin/env, etc. (Closes: #904414) * data/scripts/interpreters: + [CL] Add the Julia language as a known interpreter via #!/usr/bin/julia. (Closes: #904140) * data/spelling/corrections: + [PW] Add a number of corrections. -- Chris Lamb Wed, 25 Jul 2018 12:11:14 +0000 lintian (2.5.93) unstable; urgency=medium * Summary of tag changes: + Added: - vcs-field-mismatch * checks/cruft.pm: + [CL] Don't emit r-data-without-readme-source by checking that .rda (etc.) files aren't actually R data files. (Closes: #903435) * checks/fields.{desc,pm}: + [CL] Add support and update tests for the "Vcs-Git: uri [subdir]" syntax. (Closes: #903103) + [CL] Check for mismatched Vcs-* fields. (Closes: #903690) * checks/gir.pm: + [CL] Apply patch from Simon McVittie to don't warn about wrong section for "oldlibs". * data/python/versions: + [CL] Don't emit old-python-version-field for X-Python3-Version 3.5 just yet. (Closes: #903399) * data/spelling/corrections: + [PW] Add a number of corrections. * lib/Lintian/Collect/Package.pm: + [CL] Support parsing the filename component of tar -tvf output when delimited by multiple spaces (not just a single one) to prevent source-contains-empty-directory false positives. (Closes: #903307) -- Chris Lamb Mon, 16 Jul 2018 09:39:46 +0000 lintian (2.5.92) unstable; urgency=medium The "Policy 4.1.5" release. * Summary of tag changes: + Added: - font-outside-font-dir - package-contains-documentation-outside-usr-share-doc - package-contains-eslint-config-file - package-contains-npm-ignore-file * checks/files.{desc,pm}: + [BR] Detect ESLint config files installed in the tree. ESLint is pluggable linting utility for JavaScript. This kind of files belong to source not to installed package. + [BR] Detect .woff, .woff2 and .eot files as fonts. + [BR] Detect installed fonts outside /usr/share/fonts. + [BR] Detect .npmignore files installed in the tree. These files help npm the Node.js package manager to keep files out of npm package. + [BR] Detect documentation files outside /usr/share/doc. (Closes: #901274) + [CL] Apply patches from Jonathan Dowland (jmtd) to ignore rel="edituri" and rel="copyright" URIs when checking external URIs embedded in HTML files. (Closes: #902919) + [CL] Policy 4.1.5 adopts FHS 3.0 so permit files/dirs in /usr/libexec. (Closes: #834607) * data/files/{js-libraries,privacy-breaker-websites}: + [CL] Replace references to an unknown "libjs-normalize.css" package with node-normalize.css package. Thanks to Lumin for the report. (Closes: #902926) * data/spelling/corrections: + [CL] Drop non-hyphenated versions of "re-enable" and "re-enabled"; these are seemingly legitimate. See for the background and further discussion. + [PW] Add a number of corrections. * data/standards-version/release-dates: + [CL] Add 4.1.5 as a known Standards-Version. * debian/rules: + [CL] Don't install /usr/share/lintian/data/README; it's not very useful at runtime and avoids a package-contains-documentation-outside-usr-share-doc warning. * t/scripts/spellintian.t: + [PW] Differentiate between no-op corrections and case sensitive corrections. + [CL] Bump test count. -- Chris Lamb Wed, 04 Jul 2018 15:31:11 +0000 lintian (2.5.91) unstable; urgency=medium * checks/rules.desc: + [CL] Replace DH_BUILD_MAINT_OPTIONS with DEB_BUILD_MAINT_OPTIONS in tag description. Thanks to Drew Parsons for the report. (Closes: #901581) * checks/rules.{pm,desc}, data/*: + [CL] Also permit "python2" and suffixed variants as substitutes for "python" (etc.) to avoid false-positives in the missing-dep-for-interpreter, missing-build-dependency-for-dh-addon and missing-python-build-dependency tags. (Closes: #901075) * data/spelling/corrections: + [PW] Add a number of corrections. -- Chris Lamb Sat, 16 Jun 2018 17:59:35 +0000 lintian (2.5.90) unstable; urgency=medium * checks/binaries.pm: + [CL] Ignore .debuginfo files under /usr/lib/jvm to prevent false- positives in shared-lib-without-dependency-information. (Closes: #900268) * checks/cruft.pm: + [BR] Ignore HTML bold tags (eg. ) during license checking. * checks/fields.{desc,pm}: + [CL] Move invalid-version-number-for-derivative to a "source" type check so we have access to $info->native to prevent false-positives when checking derivative versions. * checks/systemd.pm: + [CL] Don't use potentially-undefined value in invalid .service files. * checks/version-substvars.pm: + [CL] Fix a false-positives in version-substvar-for-external-package when the "external" package is actually a "Provides" in the current source package. (Closes: #833608) * data/*: + [CL] Update and expand the documentation of derivative-{changed-by,versions} to match the implementation. * data/fields/obsolete-packages: + [BR] Detect obsolete Adobe Flash packages. * data/files/js-libraries: + [BR] Detect libjs-jquery-ui, a set of user interface interactions, effects, widgets, and themes built on top of the jQuery Javascript library. * data/scripts/interpreters: + [CL] Avoid #!/usr/bin/r false-positives when checking the missing-dep-for-interpreter tag as r-cran-littler also "Provides" this package. (Closes: #901228) * data/spelling/corrections: + [PW] Add a number of corrections. * data/spelling/corrections-multiword: + [CL] Drop "some system" from the list of multiword spelling corrections. (Closes: #900670) * helpers/coll/objdump-info-helper: + [CL] Ignore low ASCII characters in ELF headers such as RPATH and SONAME to avoid false-positives in, for example, Go libraries. (Closes: #898809) * vendors/pureos/main/data/fields/derivative-fields: + [CL] Update the Vcs-* checks for PureOS now that repo structure has introduced sub-groups. -- Chris Lamb Wed, 13 Jun 2018 18:58:43 +0000 lintian (2.5.89) unstable; urgency=medium * Summary of tag changes: + Added: - embedded-script-includes-copyright-statement - source-contains-browserified-javascript * checks/cruft.pm: + [BR] Detect minified Javascript in HTML files. + [BR] Detect browserified Javascript. + [BR] Detect scripts in HTML files that include copyright statements. * checks/debhelper.pm: + [CL] Specifically check for missing "auto" in (for example) "override_dh_build". Thanks to Mattia Rizzolo for the idea. (Closes: #900213) * checks/files.pm: + [BR] Detect privacy breaches in HTML5 files. * checks/group-checks.pm: + [CL] Prevent false-positives when checking debug-package-for-multi- arch-same-pkg-not-coinstallable by ignoring Python "debug" packages. (Closes: #900122) * checks/source-copyright.pm: + [CL] Update references from to . * data/obsolete-sites/obsolete-sites: + [PW] Add search.cpan.org to the list of obsolete sites; it has been replaced by metacpan.org. * data/spelling/corrections: + [PW] Add a number of corrections. * vendors/pureos/main/data/fields/derivative-fields: + [CL] Update the Vcs-* checks for PureOS now that code has moved to a GitLab instance. -- Chris Lamb Fri, 01 Jun 2018 10:22:09 +0000 lintian (2.5.88) unstable; urgency=medium * checks/application-not-library.desc: + [CL] Update references to pkg-perl's homepages since the Salsa migration. * checks/control-file.desc: + [CL] Update references to Go team's homepages for the Salsa move. * checks/elpa.desc: + [CL] Apply patch from Sean Whitton to update references to emacsen-team's website since the move from Alioth to Salsa. Thank! (Closes: #899214) * checks/fields.pm: + [CL] Really don't warn about binary packages "depending" on toolchain packages via Conflicts/Breaks relations. Thanks to Guillem Jover. (Closes: #896133) * checks/files.pm: + [CL] Only warn about (eg.) "/usr/include/util.h" and "/usr/include//util.h" when checking for overly generic header names. (Closes: #899192) * data/spelling/corrections: + [PW] Add a number of corrections. + [EB] Add some more corrections. -- Chris Lamb Tue, 22 May 2018 08:57:28 +0000 lintian (2.5.87) unstable; urgency=medium * Summary of tag changes: + Added: - debian-pyversions-is-obsolete - debug-symbol-migration-possibly-complete - header-has-overly-generic-name * checks/cruft.{desc,pm}: + [CL] Apply patch from Joseph Herlant to warn about use of obsolete debian/pyversion files. Thanks! (Closes: #898592) * checks/debhelper.pm: + [CL] Prevent false-positives with comments and newlines when checking debhelper-compat-file-contains-multiple-levels. (Closes: #898799) * checks/fields.{desc,pm}: + [BR] Detect privacy breaches in Internet Explorer "