Bug#1093113: RFS: gnucash/1:5.10-0.1 [NMU] [RC] -- personal and small-business financial-accounting software

[Loren M. Lang]

Package: sponsorship-requests
Severity: important

Dear mentors,

I am looking for a sponsor for my package "gnucash". This is to fix an FTBFS bug
and prevent the autoremoval that is scheduled for 5 days from now.

* Package name : gnucash
Version : 1:5.10-0.1
Upstream contact : ***@member.fsf.org
* URL : https://www.gnucash.org/
* License : BSD-2-Clause, BSD-3-Clause, LGPL-2+, LGPL-3+, GPL-2+, LGPL-2.1+, Expat, GPL-2 or GPL-3 and exception-OpenSSL, public-domain, GPL-2 or GPL-3, BSD-3-Clause~author, GFDL-NIV-1.1
* Vcs : https://salsa.debian.org/debian/gnucash
Section : gnome

The source builds the following binary packages:

gnucash - personal and small-business financial-accounting software
gnucash-common - common files for the financial-accounting software Gnucash
python3-gnucash - Gnucash interface for Python

To access further information about this package, please visit the following URL:

https://mentors.debian.net/package/gnucash/

Alternatively, you can download the package with 'dget' using this command:

dget -x https://mentors.debian.net/debian/pool/main/g/gnucash/gnucash_5.10-0.1.dsc

Changes since the last upload:

gnucash (1:5.10-0.1) unstable; urgency=medium
.
* Non-maintainer upload.
* New upstream release.
+ fixed FTBFS in "gnucash-5.8.orig/bindings/python/time64.i"
(Closes: #1091123, #1091409).

Regards,

[Loren M. Lang]

I also meant to add that I did try to contact the maintainer about a
week ago with this MR:

https://salsa.debian.org/debian/gnucash/-/merge_requests/6

But have not heard back. I would normally wait a little longer before
requesting a sponsorship, however, this package is now marked for auto
removal in less than 5 days so thought I should try here. The package
can be put on the DELAYED queue for a couple more days if desired.

Thanks,
Loren

Post by Loren M. Lang
Package: sponsorship-requests
Severity: important
Dear mentors,
I am looking for a sponsor for my package "gnucash". This is to fix an FTBFS bug
and prevent the autoremoval that is scheduled for 5 days from now.
* Package name : gnucash
Version : 1:5.10-0.1
* URL : https://www.gnucash.org/
* License : BSD-2-Clause, BSD-3-Clause, LGPL-2+, LGPL-3+, GPL-2+, LGPL-2.1+, Expat, GPL-2 or GPL-3 and exception-OpenSSL, public-domain, GPL-2 or GPL-3, BSD-3-Clause~author, GFDL-NIV-1.1
* Vcs : https://salsa.debian.org/debian/gnucash
Section : gnome
gnucash - personal and small-business financial-accounting software
gnucash-common - common files for the financial-accounting software Gnucash
python3-gnucash - Gnucash interface for Python
https://mentors.debian.net/package/gnucash/
dget -x https://mentors.debian.net/debian/pool/main/g/gnucash/gnucash_5.10-0.1.dsc
gnucash (1:5.10-0.1) unstable; urgency=medium
.
* Non-maintainer upload.
* New upstream release.
+ fixed FTBFS in "gnucash-5.8.orig/bindings/python/time64.i"
(Closes: #1091123, #1091409).
Regards,
--
Loren M. Lang

[Salvo Tomaselli]

Hello,

I'm sponsoring it, however gnucash-docs is now out of sync!

Could you also update that one as well?

Thanks

[Loren M. Lang]

It seems that the @debian.org forwarder is triggering an SPF rejection
of your email. Sending direct.

Post by Salvo Tomaselli
Hello,
I'm sponsoring it, however gnucash-docs is now out of sync!
Could you also update that one as well?

Yes, I've just finished making the matching release and I've uploaded it
https://mentors.debian.net/package/gnucash-docs/
dget -x https://mentors.debian.net/debian/pool/main/g/gnucash-docs/gnucash-docs_5.10-0.1.dsc
https://salsa.debian.org/debian/gnucash-docs/-/merge_requests/2
It should be lintian clean and installs without error.
Thanks,
Loren

Post by Salvo Tomaselli
Thanks
--
Salvo Tomaselli
"Io non mi sento obbligato a credere che lo stesso Dio che ci ha dotato di
senso, ragione ed intelletto intendesse che noi ne facessimo a meno."
-- Galileo Galilei
https://ltworf.codeberg.page/

--
Loren M. Lang
http://www.north-winds.org/
IRC: penguin359
Public Key: http://www.north-winds.org/lorenl_pubkey.asc
Fingerprint: 7896 E099 9FC7 9F6C E0ED E103 222D F356 A57A 98FA

[Salvo Tomaselli]

Hello,

I had a look but I noticed that you based on an older version and there's an
nmu missing in your changelog.

Could you fix that?

[Loren M. Lang]

Post by Salvo Tomaselli
Hello,
I had a look but I noticed that you based on an older version and there's an
nmu missing in your changelog.

Are you referring to gnucash or gnuchash-docs? I do see that there an an
nmu for gnucash-docs that was uploaded and migrated to tested but is
missing from the Git source tree:

gnucash-docs (5.8-1.1) unstable; urgency=medium
.
* Non-maintainer upload.
* No change source-only upload to allow testing migration.
* (Closes: #1078534)

I've added that entry verbatim and rebased my changes on top of it. It
is now pushed to Debian Mentors:

https://mentors.debian.net/package/gnucash-docs/

And the corresponding Git branch is ready for merge here:

https://salsa.debian.org/debian/gnucash-docs/-/merge_requests/2/commits

Thanks!

Post by Salvo Tomaselli
Could you fix that?
--
Salvo Tomaselli
"Io non mi sento obbligato a credere che lo stesso Dio che ci ha dotato di
senso, ragione ed intelletto intendesse che noi ne facessimo a meno."
-- Galileo Galilei
https://ltworf.codeberg.page/

[Salvo Tomaselli]

Did you repack the .tar file? The hash no longer matches.

[Loren M. Lang]

Post by Salvo Tomaselli
Did you repack the .tar file? The hash no longer matches.

Yes, I should have mentioned that in my last email. While fixing the
changelog, I noticed that the maintainer of this package has been
repacking the gnucash-docs tarball with .tar.xz which is not one of the
formats provided by upstream. They only provide it in .tar.gz so I
decided to just repack it with xz -9 to maximize compression if it's
going to be repacked from the original upstream tarball. The tar file
itself should be identical if you do this:

diff <(xz -dc gnucash-docs_5.10.orig.xz) <(gzip -dc gnucash-docs_5.10.orig.tar.gz)

I only did this as this hasn't been uploaded to ftp-master and thought I
might as well save space if it is to be repacked.

Post by Salvo Tomaselli
--
Salvo Tomaselli
"Io non mi sento obbligato a credere che lo stesso Dio che ci ha dotato di
senso, ragione ed intelletto intendesse che noi ne facessimo a meno."
-- Galileo Galilei
https://ltworf.codeberg.page/

[Salvo Tomaselli]

Please don't do that.

If you repack I have no idea if you have put a malware in there, and I need to
diff the tarfiles' content just to see what you have done. Which I don't want to
do.

I'd accept sponsoring a repacked file only to remove some non-free files from
the archive, so that it can be uploadable in Debian, but no other reason.

Can you reupload without repacking?

[Salvo Tomaselli]

I did find it odd that the primary maintainer appears to have been
repackinging the last few releases only to change the compression
format, but I was trying to keep with their established workflow.

Eh but then it makes it hard for me.

https://www.debian.org/doc/manuals/developers-reference/best-pkging-practices.en.html#repackaged-upstream-source

"significant space savings" are one of the reasons. Of course that could be the
topic for a new 500000 emails thread on debian-devel :D

I am sponsoring it.

For the next time, could you find the upstream public key, add it in the
debian/upstream directory and fix the watch file? Then it would check that the
file is authentic automatically.

Thanks