sqlfluff - Debian Package Tracker

general

source: sqlfluff (main)
version: 2.3.5-1
maintainer: Debian Python Team (DMD)
uploaders: Joseph Nahmias [DMD]
arch: all
std-ver: 4.6.2
VCS: Git (Browse, QA)

versions [more versions can be listed by madison] [old versions available from snapshot.debian.org]

[pool directory]

stable: 1.4.5-2
unstable: 2.3.5-1

versioned links

1.4.5-2: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]
2.3.5-1: [.dsc, use dget on this link to retrieve source package] [changelog] [copyright] [rules] [control]

binaries

sqlfluff (1 bugs: 1, 0, 0, 0)
sqlfluff-doc

action needed

A new upstream version is available: 3.2.5 high

A new upstream version 3.2.5 is available, you should consider packaging it.

Created: 2024-03-13 Last update: 2024-11-05 03:01

The package has not entered testing even though the delay is over normal

The package has not entered testing even though the 2-day delay is over. Check why.

Created: 2024-10-08 Last update: 2024-11-05 03:31

version in VCS is newer than in repository, is it time to upload? normal

vcswatch reports that this package seems to have a new changelog entry (version 3.2.0-1, distribution UNRELEASED) and new commits in its VCS. You should consider whether it's time to make an upload.

Here are the relevant commit messages:

commit ff7942334eef9fa41c6794c7dc9213f5eb3ff9d4
Author: Alexandre Detiste <tchet@debian.org>
Date:   Sun Sep 22 19:38:50 2024 +0200

    cannot doc to build, set back as UNRELEASED

commit 1e8e9531807d71ba6d66cf0e59a0587334b44415
Author: Alexandre Detiste <tchet@debian.org>
Date:   Sun Sep 22 19:34:24 2024 +0200

    add dep on pybuild-plugin-pyproject

commit e261217c017ed17bbe2e94a6c1b29712ad7b272a
Author: Alexandre Detiste <tchet@debian.org>
Date:   Sun Sep 22 19:31:06 2024 +0200

    release

commit ab101ba33535bfaffed2982edf09191ca51e51e3
Merge: 7e7fc37 65d24ba
Author: Alexandre Detiste <tchet@debian.org>
Date:   Sun Sep 22 19:27:17 2024 +0200

    Update upstream source from tag 'upstream/3.2.0'
    
    Update to upstream version '3.2.0'
    with Debian dir 4288270b229dc719faaaa5ed5bd1f1db858ce14c

commit 65d24bad13a0468ff5b7e6d7453fc9e06bc6247d
Author: Alexandre Detiste <tchet@debian.org>
Date:   Sun Sep 22 19:27:08 2024 +0200

    New upstream version 3.2.0

commit 7e7fc37599e7e96a94df26ac2663a5ec45860c33
Author: Alexandre Detiste <tchet@debian.org>
Date:   Sun Sep 22 19:27:02 2024 +0200

    add debian/gbp.conf

Created: 2024-09-27 Last update: 2024-11-03 08:36

1 low-priority security issue in bookworm low

There is 1 open security issue in bookworm.

1 issue left for the package maintainer to handle:

CVE-2023-36830: (needs triaging) SQLFluff is a SQL linter. Prior to version 2.1.2, in environments where untrusted users have access to the config files, there is a potential security vulnerability where those users could use the `library_path` config value to allow arbitrary python code to be executed via macros. For many users who use SQLFluff in the context of an environment where all users already have fairly escalated privileges, this may not be an issue - however in larger user bases, or where SQLFluff is bundled into another tool where developers still wish to give users access to supply their on rule configuration, this may be an issue. The 2.1.2 release offers the ability for the `library_path` argument to be overwritten on the command line by using the `--library-path` option. This overrides any values provided in the config files and effectively prevents this route of attack for users which have access to the config file, but not to the scripts which call the SQLFluff CLI directly. A similar option is provided for the Python API, where users also have a greater ability to further customise or override configuration as necessary. Unless `library_path` is explicitly required, SQLFluff maintainers recommend using the option `--library-path none` when invoking SQLFluff which will disable the `library-path` option entirely regardless of the options set in the configuration file or via inline config directives. As a workaround, limiting access to - or otherwise validating configuration files before they are ingested by SQLFluff will provides a similar effect and does not require upgrade.

You can find information about how to handle this issue in the security team's documentation.

Created: 2023-07-07 Last update: 2024-10-08 18:34

Standards version of the package is outdated. wishlist

The package should be updated to follow the last version of Debian Policy (Standards-Version 4.7.0 instead of 4.6.2).

Created: 2024-04-07 Last update: 2024-04-07 13:16

testing migrations

excuses:
- Migration status for sqlfluff (- to 2.3.5-1): BLOCKED: Rejected/violates migration policy/introduces a regression
- Issues preventing migration:
- ∙ ∙ Updating sqlfluff would introduce bugs in testing: #1068011
- Additional info:
- ∙ ∙ Piuparts tested OK - https://piuparts.debian.org/sid/source/s/sqlfluff.html
- ∙ ∙ autopkgtest for sqlfluff/2.3.5-1: amd64: Pass, arm64: Pass, armel: Pass, armhf: Pass, i386: Pass, ppc64el: Pass, riscv64: Pass, s390x: Pass
- ∙ ∙ Reproducible on amd64 - info ♻
- ∙ ∙ Reproducible on arm64 - info ♻
- ∙ ∙ Reproducible on armhf - info ♻
- ∙ ∙ Reproducible on i386 - info ♻
- ∙ ∙ Required age reduced by 3 days because of autopkgtest
- ∙ ∙ 257 days old (needed 2 days)
- Not considered

news

[rss feed]

[2024-10-09] sqlfluff REMOVED from testing (Debian testing watch)
[2024-02-24] sqlfluff 2.3.5-1 MIGRATED to testing (Debian testing watch)
[2024-02-24] sqlfluff 2.3.5-1 MIGRATED to testing (Debian testing watch)
[2024-02-22] Accepted sqlfluff 2.3.5-1 (source) into unstable (Andreas Tille)
[2024-01-03] sqlfluff REMOVED from testing (Debian testing watch)
[2023-02-05] sqlfluff 1.4.5-2 MIGRATED to testing (Debian testing watch)
[2023-02-03] Accepted sqlfluff 1.4.5-2 (source) into unstable (Joseph Nahmias) (signed by: Joe Nahmias)
[2023-02-03] Accepted sqlfluff 1.4.5-1 (source all) into experimental (Debian FTP Masters) (signed by: Joe Nahmias)

bugs [bug history graph]

all: 1
RC: 1
I&N: 0
M&W: 0
F&P: 0
patch: 0

links

homepage
lintian
buildd: logs
popcon
browse source code
edit tags
other distros
security tracker
screenshots
debian patches
debci

ubuntu

[Information about Ubuntu for Debian Developers]

version: 2.3.5-1