-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Fri, 22 Mar 2024 06:08:43 -0600 Source: dh-make-golang Architecture: source Version: 0.7.0-1 Distribution: unstable Urgency: medium Maintainer: Debian Go Packaging Team <team+pkg-go@tracker.debian.org> Changed-By: Anthony Fok <foka@debian.org> Closes: 993703 1035321 1043070 1050523 1064567 Changes: dh-make-golang (0.7.0-1) unstable; urgency=medium . * New upstream version 0.7.0 . [ Guillem Jover ] * Use new dh-sequence-golang instead of dh-golang and --with=golang . * Add mongodb to known hosts. This is required by the go.mongodb.org/mongo-driver modules. . * Generate a debian/.gitignore file. This helps ignoring artifacts that git should not track, and which it can safely clean. . * Reorder generated fields. . While stylistic, the rationale for these changes is as follows: . = debian/control . - Group Section and Priority together as these categorize the package, and place them after Source or Package fields, as this determines where in the archive these might end up. - Place Maintainer/Uploader after these, as the responsible party for the package. - Move Rules-Requires-Root before Build-Depends, as this determines how to drive the building process, and might impose additional dependencies, such as fakeroot or sudo. - Move the Testsuite after the Build-Depends, as this is part of the runnable metadata. . = debian/copyright . - Move the Source field after Format, as both line up, refer to an URL, and it's the first reference to the upstream project. . * Set a Section: TODO field for program packages. The golang section is for Go development packages, the fact that a program is written in Go is generally of no major relevance for the user, and instead a more suitable section relative to its actual functionality should be used, to help a proper categorization in the archive. . [ dependabot ] * Bump github.com/mattn/go-isatty from 0.0.13 to 0.0.14 . [ Taavi Väänänen ] * make: download tarballs from sr.ht and add a test for the tarball URL generation. . [ Anthony Fok ] * Bump glamour requirement to get bluemonday v1.0.16 * Fix empty tarball in case of "unsupported hoster". This fixes the error that I introduced on 2021-08-26 in commit 64dccd7 "Refactor the logic on whether to download upstream tarball" Thanks to @mdosch for the report and @creekorful for tips on error handling. Fixes #180, fixes #190 (Closes: #993703, #1064567) * Handle salsa.debian.org too in tarballFromHoster() to fetch pristine tarball (.gz) instead of compressing our own (.xz) * Set u.remote as "salsa" instead of "debian" for salsa.debian.org to avoid git remote and git branch containing the same "debian" name * Add modernc.org as "modernc" to knownHosts * Use https for Apache license link * Create dependabot.yml * Update .github/workflows/ci-test.yml to test with go1.18 * Replace deprecated ioutil functions with their io or os equilvalents * Add --no-show-signature to "git log --pretty=format:%ct -n1" call so the timestamp can be read correctly even if the user has set log.showSignature to true in git config. (Closes: #1035321) * Bump dependencies: - Bump go from 1.16 to 1.21 - Bump golang.org/x/net from v0.0.0-20210614182718-04defd469f4e to v0.21.0 - Bump golang.org/x/mod from v0.5.1 to v0.15.0 - Bump github.com/google/go-github/v38 to github.com/google/go-github/v60 - Add golang.org/x/tools/go/vcs v0.1.0-deprecated - etc. Fixes #200, fixes #203 * ci-test: Bump go version to 1.21 and 1.22 for testing * make: Unset GO111MODULE=off so that "go list" works with Go 1.21+. This fixes dh-make-golang’s failure to determine dependencies since 2023-08-21 when Go 1.21 became the default in Debian. (Closes: #1050523) . [ Maytham Alsudany ] * Bump template Standards-Version to 4.6.2 in template.go . [ Reinhard Tartler ] * Tolerate "errornous" packages in go list Fixes: #204 . * Reorder fields in debian/control * Change Section from devel to golang * Use dh-sequence-golang instead of dh-golang and --with=golang * Update versioned dependencies as per go.mod * Bump Standards-Version to 4.6.2 (no change) * Include our own copy of golang.org/x/tools/go/vcs@v0.1.0-deprecated (Closes: #1043070) * Replace Built-Using field with Static-Built-Using * Remove 01-Update-the-import-path-of-golang-github-google-go-github.patch and use debian/rules to strip off major version (e.g. v60) from github.com/google/go-github/v60/github instead. Checksums-Sha1: f1e3a116692fcf6020e12946cb6adcfe0004abf9 2559 dh-make-golang_0.7.0-1.dsc af79099fd5a15f36f8c731bfda5064b207bcefd2 34999 dh-make-golang_0.7.0.orig.tar.gz f2b88a490785177caad5aa086fbfeae46bcf3152 20568 dh-make-golang_0.7.0-1.debian.tar.xz 8b12b3fc623f9881caa399fa177b9d2f91c0f4a3 10840 dh-make-golang_0.7.0-1_amd64.buildinfo Checksums-Sha256: 312c2e12a9323be5ceef7821071152a2ca31a9d7822d150831a1f5e73381c16a 2559 dh-make-golang_0.7.0-1.dsc 8ce99d7357fb3ca9cc86998babfe480d9e0ade996a532611856d5d500fc6c568 34999 dh-make-golang_0.7.0.orig.tar.gz 1432cd978dbe1f0dd1cc822fa79181de796e8023bae687d801989732c0d538b6 20568 dh-make-golang_0.7.0-1.debian.tar.xz 2edc8c4c81c1f0ad2776a866238636644dfe468001b29cc0dbe426bc7e721b62 10840 dh-make-golang_0.7.0-1_amd64.buildinfo Files: 5f713627f4286c36917176066f7a6456 2559 golang optional dh-make-golang_0.7.0-1.dsc 1df7d3528967b94117ec2c97d85c815d 34999 golang optional dh-make-golang_0.7.0.orig.tar.gz b82528b6b84592c3a3b2e6500ec5027b 20568 golang optional dh-make-golang_0.7.0-1.debian.tar.xz 2e84e0acb4d2b373d9739239056c67dd 10840 golang optional dh-make-golang_0.7.0-1_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQJEBAEBCAAuFiEEFCQhsZrUqVmW+VBy6iUAtBLFms8FAmX9docQHGZva2FAZGVi aWFuLm9yZwAKCRDqJQC0EsWaz0liEACc9UvEujLpcpDX4CDClNyCd6/EoWEG1jcH evK9x69M+7dHnQgIouB0qgx6ZlJcRZeDObrdJIhVgpJYK+FpHDPjbex3IAHKkhQO 06BdsRdjQMFBzmJBcpfr7w2uiDZd98w8+3e65Lw7wIxmI9jJTCBuWPNtRnBDiDgn Wfun18wgB3fkouqfwyeIpN30bMiwMqqaLy68f5co5p8VJhY53WvPU4wCpqKCnp0J dlAY1tPMKtIk35EQfmmtPFfdn3Up3IZbcwLz9iHNrAxEkfoPtGqQfcZiH3CLZ6SZ DaQsThvH09k+Z9hckP+L3PILw7P3R3w97aN9sknmFtiosc9xC8tPUqIwFoKkp7+T RSSMVWQ8leZURihQwxUOVDql8F8iyQfeoagF0XoutDtTVT4LPm+JrEpO4gUgqaGZ Qh8i2t9NBdB5UpdcVhw5Oxww2sjVRMJz7ccGB7dlTP1o9K08puUquw/CAFHjxmgE Qb2j+pDFf188GOwiJhI2MsEcm46sepEU5HlGkIOyz+Wus/lxsVJO6qeEJX9tOgA3 MsVIBkzh/0fEBmQjXJ6U0KXsetaoxpcap1YvTTlPE3bjSsGklAJ3nsFhgxy4EmeW o9/2IXqWq//dFPfDAl1rJozitkE4W60tEKdXBTwAavgDDTB5X6K2t8ITLAYHz2z9 CPvKBC9uTg== =lrMh -----END PGP SIGNATURE-----