-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sat, 26 Sep 2026 03:40:00 +0200
Source: golang-github-spdx-tools-golang
Architecture: source
Version: 0.6.0~rc4-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Go Packaging Team <team+pkg-go@tracker.debian.org>
Changed-By: Juan Manuel Méndez Rey <juan.mendezr@proton.me>
Changes:
golang-github-spdx-tools-golang (0.6.0~rc4-1) unstable; urgency=medium
.
* Team upload.
* New upstream version 0.6.0~rc4.
* Build-Depend and Depend on golang-github-anchore-go-struct-converter-dev
(>= 0.2.0~rc2), golang-github-google-uuid-dev and
golang-github-piprate-json-gold-dev; Build-Depend on
golang-any (>= 2:1.23~), as required by go.mod.
* Do not build upstream's SPDX 3 model code generator
(spdx/v3/internal/generate, spdx/v3/internal/ld/shaclgen); explain why
in debian/README.source.
* debian/copyright: review against the new upstream version:
- add the generated SPDX 3 model files and the SPDX 3 test fixtures;
- declare the SPDX example and test documents as CC0-1.0 (their
DataLicense), the documentation files as CC-BY-4.0, and the holders
of CONTRIBUTING.md and LICENSE.code;
- replace the CC0 text that stood in the CC-BY-4.0 paragraph and the
old FSF address in the GPL-2+ paragraph;
- credit upstream's own files to the contributors to spdx/tools-golang,
as README does, over the years of its history, since no file carries
a notice (was "2019 SPDX").
* Add debian/lrc.config for checked licenserecon false positives.
* Clear the executable bit that upstream sets on three source files.
* Bump debhelper compat to 14; drop the redundant Priority and
Rules-Requires-Root fields.
* Bump Standards-Version to 4.7.4 (no changes needed).
* debian/watch: convert to format version 5.
* Override repeated-path-segment: the path is the Go import path.
Checksums-Sha1:
b5a5ba6473d291bc89d211b1937a3835c0d4da8d 2585 golang-github-spdx-tools-golang_0.6.0~rc4-1.dsc
648935d55ce9dabb86dbc5b68c32b32f09799073 514450 golang-github-spdx-tools-golang_0.6.0~rc4.orig.tar.gz
a7604e5f90e90fbd8a17e20e67e2f739eb203a56 16920 golang-github-spdx-tools-golang_0.6.0~rc4-1.debian.tar.xz
8b7ff75513fd4dea9139d1e9422b536901076ad7 7126 golang-github-spdx-tools-golang_0.6.0~rc4-1_source.buildinfo
Checksums-Sha256:
f296254f993f1d98957ce1c421f80e0fec83c0adbe77b6079ee45742300fb87a 2585 golang-github-spdx-tools-golang_0.6.0~rc4-1.dsc
01a5d6b3fd7e6a9a2080ffc497bf57706ad1bcb7de522e24d972fe0900cac03a 514450 golang-github-spdx-tools-golang_0.6.0~rc4.orig.tar.gz
7a8a5fc5c82134e6f00b11fc835103b907207cf42b7ecaef401b33571749d8c4 16920 golang-github-spdx-tools-golang_0.6.0~rc4-1.debian.tar.xz
49fcaa5e8758867de050d465b99ed01c6c311ffe6b27dceb7514129965e0ea40 7126 golang-github-spdx-tools-golang_0.6.0~rc4-1_source.buildinfo
Files:
1b9b42d27c64c00718927a36e866fcf4 2585 golang optional golang-github-spdx-tools-golang_0.6.0~rc4-1.dsc
4618da19f93cff4129a7b926292a6ac5 514450 golang optional golang-github-spdx-tools-golang_0.6.0~rc4.orig.tar.gz
ccfabec4b470c43ebe2d34870a10b07e 16920 golang optional golang-github-spdx-tools-golang_0.6.0~rc4-1.debian.tar.xz
8b0db8f3783b786d53d07ab5155785ff 7126 golang optional golang-github-spdx-tools-golang_0.6.0~rc4-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----
iQIzBAEBCgAdFiEEXHq+og+GMEWcyMi14n8s+EWML6QFAmrhQcQACgkQ4n8s+EWM
L6S95hAAnBjDzj7h5aGF1jLeA1E+EHeK4weCbOsSMmp0Bv2MIguBlriwTI0qiN0l
Cd8P+Inv240pIcTBMJSRen8Pa2FaDbBYE4OkJLVAF2FGJGQ5OCzF1UWXwBeBWMzt
Y9T9OS+GpAkfiTEnBupC5dRut2CioJhKXMD6815LN5jPgGKF3flhzaV/2YSV9+h9
maxDyF+W4tYWGNn1VHJUZ3ruT0+v/pTAkEw82Eoibrt/mpkMdUfVP51rKdJVz5F6
8+MLe1NqHztYQXjB3AQeBGYawFnZt+X/lYUXMmHqA7gyrWvpsFGWRRXzwYat8YV8
GZMvsog5lTe+4lnqDiW6sJo23Hcth5oYmPIMIvcDtAI4h7qbXiuvqh2yohVjPBqV
AtPii4qBapkcZhVJYXRm57kayObrk9rkBZcjVc7tgpn/0lIiphJBohldpmnCase1
mvx1xvHTYMjX02xaK2MP3av9gZvAWO36ObaWTRuumI5Kqy0SkxKa2c2/Ev8KiRdJ
YuYQRzU4a+aJPl9DqBjBuAE8IRHV6pQ9yerKdcJVFvGgpbvYDt+hQIyeaj02Uy4j
LAHUWlkzoOwRQxWNaTvXIRLRXVB2WRiy6HG6aeTOZ7QDsEIFrn16fO4t2WMljq+9
SKF0Tvrm6RStSBFt2TApKyJk5hhJTRe2WwCXou9tX4pY5/p8f20=
=Of7L
-----END PGP SIGNATURE-----
