-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Sat, 03 Feb 2018 10:25:40 +0000 Source: lintian Binary: lintian Architecture: source all Version: 2.5.73 Distribution: unstable Urgency: medium Maintainer: Debian Lintian Maintainers <lintian-maint@debian.org> Changed-By: Chris Lamb <lamby@debian.org> Description: lintian - Debian package checker Closes: 539326 658542 664520 700953 702671 712394 745743 773562 778427 782990 787469 791552 832027 853274 879235 884497 884500 888559 888809 888972 889016 889066 889154 Changes: lintian (2.5.73) unstable; urgency=medium . * Summary of tag changes: + Added: - bad-jar-name - binary-package-depends-on-toolchain-package - checksum-count-mismatch-in-changes-file - co-maintained-package-with-no-vcs-headers - description-mentions-planned-features - files-excluded-without-copyright-format-1.0 - global-files-wildcard-not-first-paragraph-in-dep5-copyright - maintainer-script-should-not-use-recursive-chown-or-chmod - missing-explanation-for-contrib-or-non-free-package - multi-arch-same-package-has-arch-specific-overrides - override_dh_auto_test-does-not-check-DEB_BUILD_PROFILES - package-does-not-install-examples - package-uses-deprecated-dpatch-patch-system - package-uses-deprecated-source-override-location - unusual-documentation-package-name . * checks/cruft.{desc,pm}: + [CL] When looking for the source of "build/foo/bar.min.js", also check "src/foo/bar.js". (Closes: #832027) + [CL] Check for upstream tarballs that ship examples but none is installed in any binary package. (Closes: #539326) * checks/debian-source-dir.desc: + [CL] Upgrade severity of missing-debian-source-format from wishlist ("I") to normal ("W"). (Closes: #702671) * checks/description.{desc.pm}: + [CL] Check for packages that mention planned/upcoming features in their long description. (Closes: #782990) + [CL] Improve the description-synopsis-might-not-be-phrased-properly tag also detect multiple sentences and improve the tag description. (Closes: #778427) * checks/changes-file.{desc.pm}: + [CL] Fix an issue where the bad-section-in-changes-file, file-size-mismatch-in-changes-file and checksum-mismatch-in-changes-file tags were not being checked if a package contained an upstream signature. + [CL] Check for inconsistencies between "Files" and Checksums-* sections in .changes files. (Closes: #658542) * checks/cruft.{desc.pm}: + [CL] Add pedantic warning for packages using source.lintian-overrides instead of debian/source/lintian-overrides. * checks/fields.{desc,pm}: + [CL] Add a pedantic warning for co-maintained packages that are not managed in a revision control system. (Closes: #884497) + [CL] Warn about Multi-Arch: same packages that ship architecture-specific Lintian overrides. Thanks to Sebastian Ramacher for the report. (Closes: #787469) + [CL] Check for packages that specify binary dependencies on toolchain packages such as cdbs or debhelper. (Closes: #700953) + [CL] Emit a warning about documentation packages that end with -docs. (Closes: #664520) + [CL] Ensure salsa.debian.org Vcs-Git and Vcs-Browser URIs are canonical and do not redirect. (Closes: #888809) * checks/files.pm: + [CL] Support scanning contents of (eg.) data/files/js-libraries. * checks/java.{desc,pm}: + [CL] Check for .jar files that do not match the Debian Java policy. (Closes: #791552) * checks/patch-systems.{desc,pm}: + [CL] Emit a pedantic warning for packages that are using the dpatch patch system. (Closes: #884500) * checks/rules.pm: + [CL] Check for override_dh_auto_test targets that do not check DEB_BUILD_OPTIONS for "nocheck". (Closes: #712394) * checks/scripts.desc: + [CL] Update the maintainer-script-should-not-use-service tag to include advice and Debian Policy reference. (Closes: #889154) * checks/source-copyright.{desc,pm}: + [CL] Warn about packages that specify a Files-Excluded header without a valid Format header as the former will be ignored by uscan(1). Thanks to Gunnar Wolf for the initial patch. (Closes: #745743) + [CL] Warn when a "Files: *" DEP-5 paragraph exists but it is not the first paragraph. Thank to Christoph Biedl for the report and idea. (Closes: #879235) + [CL] Ask maintainers to add a comment header to debian/copyright if their package is in contrib or non-free. (Closes: #773562) . * commands/reporting-html-reports.pm: + [NT] Add a limit to how many instances of a tag is deplayed on a tag page as 151 000 instances of unstripped-static-library is hardly human readable. . * data/spelling/corrections: + [PW] Add a number of corrections. * data/common/dh_addons: + [CL] Move/create from data/debhelper/dh_addons as we plan to use it elsewhere. * data/debhelper/dh_commands: + [CL] Update requirement for dh_scour (again!) from python3-scour to scour. (Closes: #889016) * data/debhelper/dh_commands-manual: + [NT] Remove dh_systemd* entries. Debian stable have a recent enough version of debhelper that this entry no longer matters. * data/files/fnames: + [CL] Ensure package-contains-python-doctree-file also warns about compressed .doctree files. * data/files/js-libraries: + [CL] Avoid false-positives when detecting Twitter's bootstrap library. (Closes: #888972) * data/files/python-generic-modules: + [CL] Detect "backports" (and "backport") as overly generic Python module names. (Closes: #888559) * data/scripts/maintainer-script-bad-command: + [CL] Warn if the maintainer scripts include "chown -R" or "chmod -R" to prevent hardlink attacks on kernels that do not have fs.protected_hardlinks=1. (Closes: #889066) . * doc/lintian.xml: + [CL] Use the debian/source/lintian-overrides location in override example. . * lib/Lintian/*: + [CL] Add support for passing .buildinfo files to Lintian. (Closes: #853274) . * reporting/templates/tag.tmpl: + [NT] Update template to mention tag limit when not all instances are shown. Checksums-Sha1: 65666e1934dfba92682b615736d4e85df8c1bf92 3505 lintian_2.5.73.dsc c9f57cc956244b018d51075497aab2daf04cbc0a 1474544 lintian_2.5.73.tar.xz 78503acfe448ea7e485b9a790a85f46e9c3b25e6 1097868 lintian_2.5.73_all.deb 4746ec3882bf49ca450467a88dc83b1e68deeaf6 15987 lintian_2.5.73_amd64.buildinfo Checksums-Sha256: be5e60ce4815913777c1a1d6ac54927d353d83bef69c36b2525fb4ef72cda660 3505 lintian_2.5.73.dsc d4f9d5fb0e69f6cedfaa5131c1732607e4f2c679641dfa457792878bcfb951db 1474544 lintian_2.5.73.tar.xz f1d299392a3d282cc1c271b13b0569dc13a835522fba41e684210839da93169f 1097868 lintian_2.5.73_all.deb a13889e25c9d6110d9e99c79c1fc0e838b6fcd17e0c71df7256a00ae41ebd5eb 15987 lintian_2.5.73_amd64.buildinfo Files: f85db20be8ad13d6d5a08c55852e9668 3505 devel optional lintian_2.5.73.dsc 55b891fc3a0f2085ce0c4b9ca3ddd3da 1474544 devel optional lintian_2.5.73.tar.xz 3c2eea0f41e8438fce4bbaab0bf37996 1097868 devel optional lintian_2.5.73_all.deb 51cd04955afa77e5165115d803a1d85b 15987 devel optional lintian_2.5.73_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEwv5L0nHBObhsUz5GHpU+J9QxHlgFAlp1k/cACgkQHpU+J9Qx HlhiLg//R0Zef8T4RAJyz3H2+i75Z0XFem4VM3jetcYrPiho3/9uEu4U7c9uLr4Z GekBssBntid+C10nA4/9b829vGgjrr3ajmEH5CEC2zJ4o/EeNG5vIGRnFwacIUub Pv42YQy0aCkIF/HMYj32w8eF94LkSyBtMFzcF7yMnGFqA0yjvAfkN2BlSssQUAUK Wg3GKLnodI3nm++DYr8UANbZjbnFO4duzvxnk+BEcg2+7JLDX6Kdt+XErA9jImKv BSX7+kg1trOP11tEeDmeaLC2ERYX+sTDZhcevWcPjs/ABPj6UPiIwyG+VEBobwEE ns2pkHjgpr3JQeZeAlDZGeZeQa/QBOzknKvSbOU7RZoNGOQfOUQ0jXUeTbgc7JYv jWn29KbQ1I511EExg9jEVfLOx8GHNF8OSvLAs4KlTgft7Jmer+PF1GFbjU7WZ4IV yAQhmu01brkrYs86IKwyB9KQBFPNyQae9EQOUJkSdFtx+KoKkIp8zuQXmdEZSr0P M6LCHuYXvXjIncFWo/WuZFjxzqa52v2CNbZgF74gCHlhVjTjc2OfBO5eWWo7EvEb cVDDqrkrpsGN2Sg8OPv9rekDfnTynebgf2d5ybZr/k2xFJnDrM8byhBOsQa7Hvqr 1dUeqbu10gROVSQbLVHK5b9vL3mgfRS8VkhsmxThUJMkx5cd7yc= =IJA/ -----END PGP SIGNATURE-----