Format: 1.8
Date: Tue, 03 Sep 2024 13:55:01 +0100
Source: dgit
Binary: dgit dgit-infrastructure git-debpush git-debrebase
Architecture: all
Version: 11.11
Distribution: sid
Urgency: medium
Maintainer: Ian Jackson <ijackson@chiark.greenend.org.uk>
Changed-By: Sean Whitton <spwhitton@spwhitton.name>
Description:
 dgit       - git interoperability with the Debian archive
 dgit-infrastructure - dgit server backend infrastructure
 git-debpush - client script for git pushing to Debian-style archives
 git-debrebase - rebasing git workflow tool for Debian packaging
Closes: 1069001
Changes:
 dgit (11.11) unstable; urgency=medium
 .
   [ Ian Jackson ]
   * dgit-repos-server, tag2upload support:
     - Introduce t2uv_* prefix to distinguish trusted parts of t2u flow.
     - New parameter for mail addresses to Cc error messages to.
   * dgit-repos-server, general:
     - New always-accept AUTH-SPEC.
     - Fix & update some debug printing.
     - Some other refactorings.
   * Dgit.pm:
     - git_rev_parse: New \@prefix parameter.
 .
   * dgit: Fix documentation of the rpush protocol.
   * TAG2UPLOAD-MANAGER-PROTOCOL.md: New protocol specification.
 .
   * Test suite:
     - New .gitlab-ci.yml to enable salsa CI.
     - Pass --no-same-owner to tar.
       Fixes running the tests as root.
     - Move some variables out from tests/drs-git-ext to tests/lib.
     - tag2upload: Check for drs dgit success (t-tagupl-succeeded).
     - tests/enumerate-tests: New facility for printing package names.
     - Various renames to replace 'tagupl' abbreviation with 't2u'.
       Not yet complete.
 .
   [ Sean Whitton ]
   * dgit:
     - Check that a source-only changes has "Architecture: source".
     - New --expect-suite, --expect-version options for rpush.
       The initiator now checks the values of these options, and that of
       -p/--package, against the parsed changelog, .changes and .dsc sent
       by the responder.  This protects against a misbehaving or
       compromised responder attempting to use the initiator to sign
       .changes and .dsc files for some other package, version or target
       suite.  This is relevant for how the security of the tag2upload
       design relies on the rpush protocol.
     - New --tag2upload-builder-mode, --tag2upload-upstream and
       --tag2upload-upstream-commit options.
       These are used to invoke mini-git-tag-fsck in the right way, and
       --tag2upload-builder-mode may enable other things in the future.
       (As of this release, they are not yet passed by dgit-repos-servers.)
 .
   * git-debpush: Add source= & version= to the in-tag metadata (for real
     this time) (Closes: #1069001).
 .
   * dgit-repos-server, tag2upload support:
     - Obtain the source package and version from the [dgit ...] metadata.
       (The target suite is still obtained from the first line of the tag
       message; this will change.)
     - Replace invoking 'dgit push-source' with 'dgit rpush-source'.
       This is work towards the new tag2upload three node design.
     - Pass the new --package, --expect-suite and --expect-version.
     - Some other tidying up.
 .
   * TAG2UPLOAD-DESIGN.txt: Document SOURCE_VERSION.git.tar.xz.
   * mini-git-tag-fsck: New script to handle SOURCE_VERSION.git.tar.xz.
     Its functionality is only partially implemented as of this release.
 .
   * Test suite:
     - Test the new rpush security by mocking up an MITM of the responder
       (tests/ssh-rpush-mitm).
     - Very basic test for --tag2upload-builder-mode.
     - t2u-gbp: Drop an unnecessary, confusing include.
 .
   * Update copyright notices for Ian and me for core files.
   * Add .dir-locals.el.
   * Add some file mode indicators in various places.
 .
   [ Sean Whitton & Ian Jackson ]
   * Add TAG2UPLOAD-FAQ.md.
     With thanks to Russ Allbery for review.
Checksums-Sha1:
 3580a4124e3179d1ddb2f590048e152dbf03d176 50724 dgit-infrastructure_11.11_all.deb
 2cf8ede402f6553b1c4986064c8cae1dd937784d 195432 dgit_11.11_all.deb
 71ed9414ea4058e040ff9033c220d64435e93906 5756 dgit_11.11_amd64.buildinfo
 9878a9ba2c2ceed8532b226e406902711046e66f 27856 git-debpush_11.11_all.deb
 70bfe0f4b73594ff6c8f63fcd85ba1b44fb748b9 73448 git-debrebase_11.11_all.deb
Checksums-Sha256:
 f52f481626eee8050e7167f01b68ccc6060d06443892eb10c95651902b007165 50724 dgit-infrastructure_11.11_all.deb
 673c53ef88ec26642c3ba365573fc6dfaa8a7a437a9b959487f0ff14e11032fd 195432 dgit_11.11_all.deb
 d8b1ebbcc4552f0e7f2b1170aedb193adcf28cd8d51bc250ac552db15818e4ee 5756 dgit_11.11_amd64.buildinfo
 307e8253b2c783306373f869f1923262c5be06828935c48f621ac9738e244ebc 27856 git-debpush_11.11_all.deb
 4f38274325dfd19ba558c45d1f710e0cd6b6c03981a70a36e9ce2555bc498dbf 73448 git-debrebase_11.11_all.deb
Files:
 c962af7f15ef73df9033fe84a4f2acb8 50724 devel optional dgit-infrastructure_11.11_all.deb
 e386d86ad7847b6df370c1fd52372c5e 195432 devel optional dgit_11.11_all.deb
 7718458cef3b2ec55629ff56e9e3b83c 5756 devel optional dgit_11.11_amd64.buildinfo
 182fc1b6e99a84ef3ce999e9f7c9de00 27856 devel optional git-debpush_11.11_all.deb
 d0b2fabf65485d19fd8b5c6fe5afb015 73448 devel optional git-debrebase_11.11_all.deb