changes_fields:
Architecture: all
Binary: dgit dgit-infrastructure git-debpush git-debrebase
Changed-By: Sean Whitton <spwhitton@spwhitton.name>
Changes: |2-
dgit (11.11) unstable; urgency=medium
.
[ Ian Jackson ]
* dgit-repos-server, tag2upload support:
- Introduce t2uv_* prefix to distinguish trusted parts of t2u flow.
- New parameter for mail addresses to Cc error messages to.
* dgit-repos-server, general:
- New always-accept AUTH-SPEC.
- Fix & update some debug printing.
- Some other refactorings.
* Dgit.pm:
- git_rev_parse: New \@prefix parameter.
.
* dgit: Fix documentation of the rpush protocol.
* TAG2UPLOAD-MANAGER-PROTOCOL.md: New protocol specification.
.
* Test suite:
- New .gitlab-ci.yml to enable salsa CI.
- Pass --no-same-owner to tar.
Fixes running the tests as root.
- Move some variables out from tests/drs-git-ext to tests/lib.
- tag2upload: Check for drs dgit success (t-tagupl-succeeded).
- tests/enumerate-tests: New facility for printing package names.
- Various renames to replace 'tagupl' abbreviation with 't2u'.
Not yet complete.
.
[ Sean Whitton ]
* dgit:
- Check that a source-only changes has "Architecture: source".
- New --expect-suite, --expect-version options for rpush.
The initiator now checks the values of these options, and that of
-p/--package, against the parsed changelog, .changes and .dsc sent
by the responder. This protects against a misbehaving or
compromised responder attempting to use the initiator to sign
.changes and .dsc files for some other package, version or target
suite. This is relevant for how the security of the tag2upload
design relies on the rpush protocol.
- New --tag2upload-builder-mode, --tag2upload-upstream and
--tag2upload-upstream-commit options.
These are used to invoke mini-git-tag-fsck in the right way, and
--tag2upload-builder-mode may enable other things in the future.
(As of this release, they are not yet passed by dgit-repos-servers.)
.
* git-debpush: Add source= & version= to the in-tag metadata (for real
this time) (Closes: #1069001).
.
* dgit-repos-server, tag2upload support:
- Obtain the source package and version from the [dgit ...] metadata.
(The target suite is still obtained from the first line of the tag
message; this will change.)
- Replace invoking 'dgit push-source' with 'dgit rpush-source'.
This is work towards the new tag2upload three node design.
- Pass the new --package, --expect-suite and --expect-version.
- Some other tidying up.
.
* TAG2UPLOAD-DESIGN.txt: Document SOURCE_VERSION.git.tar.xz.
* mini-git-tag-fsck: New script to handle SOURCE_VERSION.git.tar.xz.
Its functionality is only partially implemented as of this release.
.
* Test suite:
- Test the new rpush security by mocking up an MITM of the responder
(tests/ssh-rpush-mitm).
- Very basic test for --tag2upload-builder-mode.
- t2u-gbp: Drop an unnecessary, confusing include.
.
* Update copyright notices for Ian and me for core files.
* Add .dir-locals.el.
* Add some file mode indicators in various places.
.
[ Sean Whitton & Ian Jackson ]
* Add TAG2UPLOAD-FAQ.md.
With thanks to Russ Allbery for review.
Checksums-Sha1:
- name: dgit-infrastructure_11.11_all.deb
sha1: 3580a4124e3179d1ddb2f590048e152dbf03d176
size: '50724'
- name: dgit_11.11_all.deb
sha1: 2cf8ede402f6553b1c4986064c8cae1dd937784d
size: '195432'
- name: dgit_11.11_amd64.buildinfo
sha1: 71ed9414ea4058e040ff9033c220d64435e93906
size: '5756'
- name: git-debpush_11.11_all.deb
sha1: 9878a9ba2c2ceed8532b226e406902711046e66f
size: '27856'
- name: git-debrebase_11.11_all.deb
sha1: 70bfe0f4b73594ff6c8f63fcd85ba1b44fb748b9
size: '73448'
Checksums-Sha256:
- name: dgit-infrastructure_11.11_all.deb
sha256: f52f481626eee8050e7167f01b68ccc6060d06443892eb10c95651902b007165
size: '50724'
- name: dgit_11.11_all.deb
sha256: 673c53ef88ec26642c3ba365573fc6dfaa8a7a437a9b959487f0ff14e11032fd
size: '195432'
- name: dgit_11.11_amd64.buildinfo
sha256: d8b1ebbcc4552f0e7f2b1170aedb193adcf28cd8d51bc250ac552db15818e4ee
size: '5756'
- name: git-debpush_11.11_all.deb
sha256: 307e8253b2c783306373f869f1923262c5be06828935c48f621ac9738e244ebc
size: '27856'
- name: git-debrebase_11.11_all.deb
sha256: 4f38274325dfd19ba558c45d1f710e0cd6b6c03981a70a36e9ce2555bc498dbf
size: '73448'
Closes: '1069001'
Date: Tue, 03 Sep 2024 13:55:01 +0100
Description: |2-
dgit - git interoperability with the Debian archive
dgit-infrastructure - dgit server backend infrastructure
git-debpush - client script for git pushing to Debian-style archives
git-debrebase - rebasing git workflow tool for Debian packaging
Distribution: sid
Files:
- md5sum: c962af7f15ef73df9033fe84a4f2acb8
name: dgit-infrastructure_11.11_all.deb
priority: optional
section: devel
size: '50724'
- md5sum: e386d86ad7847b6df370c1fd52372c5e
name: dgit_11.11_all.deb
priority: optional
section: devel
size: '195432'
- md5sum: 7718458cef3b2ec55629ff56e9e3b83c
name: dgit_11.11_amd64.buildinfo
priority: optional
section: devel
size: '5756'
- md5sum: 182fc1b6e99a84ef3ce999e9f7c9de00
name: git-debpush_11.11_all.deb
priority: optional
section: devel
size: '27856'
- md5sum: d0b2fabf65485d19fd8b5c6fe5afb015
name: git-debrebase_11.11_all.deb
priority: optional
section: devel
size: '73448'
Format: '1.8'
Maintainer: Ian Jackson <ijackson@chiark.greenend.org.uk>
Source: dgit
Urgency: medium
Version: '11.11'
type: dpkg