• Towards DEP-14 acceptance and recently proposed changes

    From Raphael Hertzog@21:1/5 to All on Tue Jan 7 08:40:01 2025
    Hello,

    DEP-14 is 10 years old and while it's far from being ubiquitous, it
    seems to have gained enough traction (in particular in git-buildpackage
    thanks to the work of Otto Kekäläinen, and in quite some packaging teams thanks to the respective team members) that it would be worth marking
    it as ACCEPTED.

    https://dep-team.pages.debian.net/deps/dep14

    But before this, there are a couple of outstanding improvements that
    have been suggested where I'd like peer review.

    1/ https://salsa.debian.org/dep-team/deps/-/merge_requests/9
    (see mr9.patch attached if you don't want to look up on the web)

    We had a couple of revisions already and it seems fine to me to merge
    this, if anyone has valid objections (i.e. with good rationale), now is
    the time to raise them. You might want to look the closed comments
    on the above merge request to see whether your concerns have been
    discussed already.

    This change basically adds the recommendation to use "upstreamvcs" as the
    name of the "git remote" to access the upstream repository and it also documents the possibility to merge the upstream commits in the "upstream/latest" branch (as proposed by gbp import-orig
    --upstream-vcs-tag) when your workflow is to import the upstream tarball.

    2/ https://salsa.debian.org/dep-team/deps/-/merge_requests/16
    (see mr16.patch attached if you don't want to look up on the web)

    This change is still under discussion (no consensus has been reached yet)
    but it would be nice to have some broader participation to help bring the discussion to some conclusion. Basically the topic is how to name the
    branches when the package maintainer wants to support multiple upstream releases for a given target Debian release.

    We solved this for the "upstream/*" branches but we never specified this for the "debian/*" branches partly because Debian doesn't have PPA so it's
    rather unusual to maintain multiple upstream releases for the same target Debian release... but the use case seems like worth supporting and having
    a good recommendation for it.

    Ideally join the discussion on salsa, but I'll take into account comments shared here as well. Please cc me preferrably as I don't read debian-devel daily.

    Cheers,
    --
    ⢀⣴⠾⠻⢶⣦⠀ Raphaël Hertzog <[email protected]>
    ⣾⠁⢠⠒⠀⣿⡁
    ⢿⡄⠘⠷⠚⠋ The Debian Handbook: https://debian-handbook.info/get/
    ⠈⠳⣄⠀⠀⠀⠀ Debian Long Term Support: https://deb.li/LTS

    diff --git a/web/deps/dep14.mdwn b/web/deps/dep14.mdwn
    index a00b019..bd129dd 100644
    --- a/web/deps/dep14.mdwn
    +++ b/web/deps/dep14.mdwn
    @@ -135,6 +135,11 @@ manage different versions of the packages in both repositories, then
    the branches `debian/wheezy-security` and `debian/wheezy-updates`
    can be used.

    +The codename can also be prefixed with the version so that branch names
    +are correctly sorted by age of the target release in the list of available +branches. Examples: `debian/12-bookworm`, `debian/11-bullseye`, +`ubuntu/24.04-noble`, `ubuntu/22.04-jammy`.
    +
    Tagging package releases
    ------------------------

    @@ -146,6 +151,28 @@ releasing a package with version 1.3-0ubuntu1 would use
    `ubuntu/1.3-0ubuntu1`. The tags should point to the exact commit that was
    used to build the corresponding upload.

    +Coexistence with the upstream Git repository +============================================
    +
    +As a package maintainer, it is often helpful to have access to the
    +upstream Git repository from one's personal checkout of the packaging Git +repository. When setting up acc
  • From =?UTF-8?Q?Julien_Plissonneau_Duqu=C@21:1/5 to All on Tue Jan 7 09:50:01 2025
    Le 2025-01-07 08:38, Raphael Hertzog a écrit :

    2/ https://salsa.debian.org/dep-team/deps/-/merge_requests/16

    To expand a bit on this, proposals so far for naming versioned branches
    are:
    1. <vendor>/<version>/<suite> e.g. debian/6.12/trixie which (I think)
    matches what the kernel team is already doing [1]
    2. <vendor>/<version.x>/<suite> e.g. debian/6.12.x/trixie
    3. <src:pkg>/<vendor>/<suite> when the version is embedded in source
    package name
    4. [<src:pkg>/][version/]<vendor>/<suite>

    The MR above has additional links and descriptions of current practices.
    I do not have a strong preference for a choice yet so feedback would be appreciated.

    Cheers,

    [1]: https://salsa.debian.org/kernel-team/linux/-/branches/active

    --
    Julien Plissonneau Duquène

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Marco d'Itri@21:1/5 to Raphael Hertzog on Tue Jan 7 11:40:01 2025
    On Jan 07, Raphael Hertzog <[email protected]> wrote:

    This change basically adds the recommendation to use "upstreamvcs" as the name of the "git remote" to access the upstream repository and it also
    Like many others, this looks like a gratuitous change for change's sake. Countless packages have been using "upstream" for years, but apparently
    it is not perfect enough and somebody had to invent a new name.

    I still believe that this is trying to codify a lot of pratices (e.g.
    the obsession with pristine-tar) which are not widely accepted.
    This DEP is the result of an echo chamber and is the consensus of the
    few people debating it on salsa.

    +The codename can also be prefixed with the version so that branch names
    +are correctly sorted by age of the target release in the list of available +branches. Examples: `debian/12-bookworm`, `debian/11-bullseye`, +`ubuntu/24.04-noble`, `ubuntu/22.04-jammy`.
    So to gain optional sorting now you lose the benefit of being able to mechanically determine the branch name? This is beyond silly.

    +unlikely to clash with the packaging branches. Despite this, it is good +practice to not push any upstream branch to the packaging repository so as +to not confuse anyone about the purpose of the Git repository.
    WTF? I say instead that in the modern worlds it is a best practice to
    have the packaging repository as a branch of the upstream repository.
    Again, trying to promote personal preferences to a standard.

    --
    ciao,
    Marco

    -----BEGIN PGP SIGNATURE-----

    iHUEABYIAB0WIQQnKUXNg20437dCfobLPsM64d7XgQUCZ30CJwAKCRDLPsM64d7X gW+GAPwMln7Km/I9hKMW1HP+dhu9eYGAKkfWbTcIqtlX6dyxHwD/Wp0NPtkR8uRY lVwaQng82dNNlmcq07X/5S6rZmvrmg0=
    =I0ic
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Chris Hofstaedtler@21:1/5 to All on Tue Jan 7 12:00:02 2025
    * Raphael Hertzog <[email protected]> [250107 08:39]:
    1/ https://salsa.debian.org/dep-team/deps/-/merge_requests/9
    (see mr9.patch attached if you don't want to look up on the web)

    We had a couple of revisions already and it seems fine to me to merge
    this, if anyone has valid objections (i.e. with good rationale), now is
    the time to raise them. You might want to look the closed comments
    on the above merge request to see whether your concerns have been
    discussed already.

    This change basically adds the recommendation to use "upstreamvcs" as the name of the "git remote" to access the upstream repository and it also documents the possibility to merge the upstream commits in the "upstream/latest" branch (as proposed by gbp import-orig
    --upstream-vcs-tag) when your workflow is to import the upstream tarball.

    The name for the remote could easily have been "upstream" like
    various packages are already set up and documented today. But
    apparently gbp picked the IMO unwieldly name in the meantime?

    Meh. But what's done is done, I guess. We'll see who will adopt that
    name.

    Chris

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From =?UTF-8?Q?Julien_Plissonneau_Duqu=C@21:1/5 to All on Tue Jan 7 12:50:01 2025
    Le 2025-01-07 11:29, Marco d'Itri a écrit :
    On Jan 07, Raphael Hertzog <[email protected]> wrote:

    This change basically adds the recommendation to use "upstreamvcs" as
    the
    name of the "git remote" to access the upstream repository and it also
    Like many others, this looks like a gratuitous change for change's
    sake.
    Countless packages have been using "upstream" for years, but apparently
    it is not perfect enough and somebody had to invent a new name.

    Let's say upstream name their release tags like "1.2.3". That's valid
    and that happens.

    In your Debian packaging repository, after importing that release you
    now have a tag named "upstream/1.2.3" if you follow the proposed
    convention or use some existing tooling with its default configuration.

    Let's now assume that your upstream remote is named "upstream", as is
    common practice (I do that too).

    git checkout upstream/1.2.3

    the tag from upstream or the tag from your import? Nominally that
    should be the same content, excepted that there are many projects that
    repack sources, and the tooling will always generate a different commit
    anyway. The different name is to resolve this ambiguity.

    I still believe that this is trying to codify a lot of pratices (e.g.
    the obsession with pristine-tar) which are not widely accepted.

    This DEP only codifies the branch name (and btw forgets to mention pristine-lfs) if you choose to use it, and it's not even pushing you to
    use it in any way.

    This DEP is the result of an echo chamber and is the consensus of the
    few people debating it on salsa.

    You are free to join or discuss it here. That DEP has been online for
    some years now, it's not exactly happening in the hiding.

    +The codename can also be prefixed with the version so that branch
    names
    +are correctly sorted by age of the target release in the list of
    available
    +branches. Examples: `debian/12-bookworm`, `debian/11-bullseye`,
    +`ubuntu/24.04-noble`, `ubuntu/22.04-jammy`.
    So to gain optional sorting now you lose the benefit of being able to mechanically determine the branch name? This is beyond silly.

    This ability is not lost, it just needs a bit more logic or input data
    to match both naked codenames and versioned codenames. The tradeoff
    seems reasonable.

    WTF? I say instead that in the modern worlds it is a best practice to
    have the packaging repository as a branch of the upstream repository.

    Could you please give us a few examples of projects where that already
    works out-of-the-box, ie the package is built and uploaded to the
    archive exactly as provided by upstream, debian/changelog and all?

    Again, trying to promote personal preferences to a standard.

    That's just a set of recommendations, not policy. You are free not to
    follow them. In the meantime many packages already adopted some of the
    proposed conventions so maybe just expect to be asked questions more
    often about your own personal preferences, but if they are reasonable
    that should not be much of an issue, and if that happens often enough
    you may want to publicly document them somewhere to avoid repeating
    yourself.

    Cheers,

    --
    Julien Plissonneau Duquène

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Andrey Rakhmatullin@21:1/5 to All on Tue Jan 7 13:00:01 2025
    On Tue, Jan 07, 2025 at 12:46:46PM +0100, Julien Plissonneau Duquène wrote:
    This change basically adds the recommendation to use "upstreamvcs"
    as the
    name of the "git remote" to access the upstream repository and it also
    Like many others, this looks like a gratuitous change for change's sake. Countless packages have been using "upstream" for years, but apparently
    it is not perfect enough and somebody had to invent a new name.

    Let's say upstream name their release tags like "1.2.3". That's valid and that happens.

    In your Debian packaging repository, after importing that release you now have a tag named "upstream/1.2.3" if you follow the proposed convention or use some existing tooling with its default configuration.

    Let's now assume that your upstream remote is named "upstream", as is common practice (I do that too).

    git checkout upstream/1.2.3

    the tag from upstream or the tag from your import? Nominally that should
    be the same content, excepted that there are many projects that repack sources, and the tooling will always generate a different commit anyway. The different name is to resolve this ambiguity.

    Tags in git are not prefixed with the remote name or anything else. A tag
    named upstream/1.2.3 is never from the upstream. A tag named 1.2.3 should always be from the upstream.

    Branches, on the other hand, indeed clash between "upstream/foo branch
    from the maintainer" and "foo branch from the upstream".

    --
    WBR, wRAR

    -----BEGIN PGP SIGNATURE-----

    iQJhBAABCgBLFiEEolIP6gqGcKZh3YxVM2L3AxpJkuEFAmd9FyMtFIAAAAAAFQAP cGthLWFkZHJlc3NAZ251cGcub3Jnd3JhckBkZWJpYW4ub3JnAAoJEDNi9wMaSZLh UUwP/29AEvYrlQdlWilCPsbwjKjOGht0P6NrAtUI2LpTm4vrOG3sLPEWBpy3vm/w X3lXQ2nJJvcTasAQnZmDxktaf9RHRCkBoLmUCSXRh6z/2QzCRCTe2Z19KtxuPUPp 9W1lvdma1vR56uhNsVanVP2zeeVFMDgM88GO3zNo8oevIiibJp7WpCe7IhNKqwQJ Nbe11pQGcrLk9Tn1Xsf7ucJL7LlqEQjTfe3b02Y8PyJ4IhOgFwDO23oOxGkrHIjc um3oI1o7DhTwo2CFy9vBwxmMZt0cM0uy+98lV6QpMEZo02RQmvqoCLw3fa5zTmWi mCYMdmaugBfmKoNQDpngHV5sHMyeq0pY2ki1YX1AmaO+fLXFjc6Q9U79bw5UTwgB gOnAQISpkEGtWfJutebDwB8J+n+dW52I5LlnUEvQpAhJso97cYoGpb5CRam3VO6Z 2TYhcjJJfqYjrQjjMzfq8iVxGNQ+HGbu6oSLgPHLKPVnEF9jl9NzL5nnIivnaQlG dXtdNLS+CoyZNV1XNil9RC1GB/TLSA6K4Yt4UR40wn8o0VVTxZ6kthLr4zKGg/n6 X+HWiVbP3z37RPy3+zfPq0Q3QiuEE/DlQATdiq1VL1/EAObOY+kUJaRYOKYzUagL WTSR7/MZ6PEJN5pUICwo/rBm6AS2TQfWvwFg2jrfOMW3pBWw
    =p974
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Lucas Nussbaum@21:1/5 to Chris Hofstaedtler on Tue Jan 7 12:20:01 2025
    On 07/01/25 at 11:53 +0100, Chris Hofstaedtler wrote:
    * Raphael Hertzog <[email protected]> [250107 08:39]:
    1/ https://salsa.debian.org/dep-team/deps/-/merge_requests/9
    (see mr9.patch attached if you don't want to look up on the web)

    We had a couple of revisions already and it seems fine to me to merge
    this, if anyone has valid objections (i.e. with good rationale), now is
    the time to raise them. You might want to look the closed comments
    on the above merge request to see whether your concerns have been
    discussed already.

    This change basically adds the recommendation to use "upstreamvcs" as the name of the "git remote" to access the upstream repository and it also documents the possibility to merge the upstream commits in the "upstream/latest" branch (as proposed by gbp import-orig --upstream-vcs-tag) when your workflow is to import the upstream tarball.

    The name for the remote could easily have been "upstream" like
    various packages are already set up and documented today. But
    apparently gbp picked the IMO unwieldly name in the meantime?

    Meh. But what's done is done, I guess. We'll see who will adopt that
    name.

    Maybe before moving it to ACCEPTED, it would be useful to design a
    dashboard of some kind to track adoption, not just in tooling, but in
    actual packages?

    This could probably be built as an extension to vcswatch.

    Lucas

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From =?UTF-8?Q?Julien_Plissonneau_Duqu=C@21:1/5 to All on Tue Jan 7 13:40:01 2025
    Le 2025-01-07 12:59, Andrey Rakhmatullin a écrit :
    Tags in git are not prefixed with the remote name or anything else. A
    tag
    named upstream/1.2.3 is never from the upstream. A tag named 1.2.3
    should
    always be from the upstream.

    Branches, on the other hand, indeed clash between "upstream/foo branch
    from the maintainer" and "foo branch from the upstream".

    Exact for the release-tag-from-upstream-repo, sorry for the confusion.
    The tag-generated-from-import though is actually named "upstream/x.y.z".

    So the possible clash is between a local tag and a remote branch.
    Branches named after version numbers also happen quite often upstream.

    --
    Julien Plissonneau Duquène

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Marco d'Itri@21:1/5 to [email protected] on Tue Jan 7 14:20:01 2025
    On Jan 07, Julien Plissonneau Duquène <[email protected]> wrote:

    You are free to join or discuss it here. That DEP has been online for some years now, it's not exactly happening in the hiding.
    Nobody mentioned hiding anything, but it's still just a few people
    chatting in a gitlab issue.

    WTF? I say instead that in the modern worlds it is a best practice to
    have the packaging repository as a branch of the upstream repository.
    Could you please give us a few examples of projects where that already works out-of-the-box, ie the package is built and uploaded to the archive exactly as provided by upstream, debian/changelog and all?
    I mean having the packaging branch in the Debian repository, not in the upstream repository.

    Again, trying to promote personal preferences to a standard.
    That's just a set of recommendations, not policy. You are free not to follow
    With the obvious goal of becoming a standard.
    It's the whole point of DEPs.

    --
    ciao,
    Marco

    -----BEGIN PGP SIGNATURE-----

    iHUEABYIAB0WIQQnKUXNg20437dCfobLPsM64d7XgQUCZ30oTAAKCRDLPsM64d7X gTivAP9AAB43v35HbrVqxqmGWzIFI6NluCjJxyXYtVWWGjMNbAD/RdrzOx37wGSl LJMIitn4rQKL9jXXBrzFQs+0YfEsaAU=
    =EGTG
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From =?UTF-8?B?T3R0byBLZWvDpGzDpGluZW4=?@21:1/5 to All on Wed Jan 8 06:40:01 2025
    Hi,

    This change basically adds the recommendation to use "upstreamvcs" as the name of the "git remote" to access the upstream repository and it also documents the possibility to merge the upstream commits in the "upstream/latest" branch (as proposed by gbp import-orig --upstream-vcs-tag) when your workflow is to import the upstream tarball.

    The name for the remote could easily have been "upstream" like
    various packages are already set up and documented today. But
    apparently gbp picked the IMO unwieldly name in the meantime?

    Meh. But what's done is done, I guess. We'll see who will adopt that
    name.

    This is what git-buildpackage already has. Nothing stops people from
    suggesting other names. I remember Guido mentioning at one point he is
    open to change it or to make it configurable.

    Personally I feel that just picking a reasonably good name and
    sticking to it for now is the best return on investment for Debian.
    The 'upstreamvcs' is reasonably good and unambiguous on what it means,
    and it won't get mixed up with `upstream/*` tag names.

    Maybe before moving it to ACCEPTED, it would be useful to design a
    dashboard of some kind to track adoption, not just in tooling, but in
    actual packages?

    This could probably be built as an extension to vcswatch.

    I am a huge fan of trends.debian.net - thanks Lucas for maintaining
    it! I filed https://salsa.debian.org/lucas/debian-trends/-/issues/5 in
    case somebody contributing to trends.debian.net could some day take up
    this task..

    I also posted stats of the current situation there, but it is based on
    gbp.conf files and not representative of all git projects.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Gioele Barabucci@21:1/5 to All on Wed Jan 8 12:40:01 2025
    On 08/01/25 06:31, Otto Kekäläinen wrote:
    This change basically adds the recommendation to use "upstreamvcs" as the >>>> name of the "git remote" to access the upstream repository and it also >>>> documents the possibility to merge the upstream commits in the
    "upstream/latest" branch (as proposed by gbp import-orig
    --upstream-vcs-tag) when your workflow is to import the upstream tarball. >>>
    The name for the remote could easily have been "upstream" like
    various packages are already set up and documented today. But
    apparently gbp picked the IMO unwieldly name in the meantime?

    Meh. But what's done is done, I guess. We'll see who will adopt that
    name.

    This is what git-buildpackage already has. Nothing stops people from suggesting other names. I remember Guido mentioning at one point he is
    open to change it or to make it configurable.

    Personally I feel that just picking a reasonably good name and
    sticking to it for now is the best return on investment for Debian.
    The 'upstreamvcs' is reasonably good and unambiguous on what it means,
    and it won't get mixed up with `upstream/*` tag names.

    Maybe I'm missing something, but why is the name of the upstream remote
    such a big deal?

    The names of the remotes are limited to the local repository and git
    allows for multiple remotes pointing to the same URL. Everybody can keep
    their favorite remote names and add one extra `upstreamvcs` remote.

    One can simply state: "some scripts need to know the name of the remote.
    Make sure that the upstreamvcs remote exists or configure another name
    in gbp.conf [when this option will exist]".

    Personally, I use the following scheme for remotes. For repos on salsa,
    I name the remote after the user/team name. For repos on GitHub I name
    them "{user}-gh", for those on freedesktop "{user}-fd" and so on.

    A few examples:

    * https://salsa.debian.org/utopia-team/avahi.git ⇒ utopia-team
    * [email protected]:gioele/avahi.git ⇒ gioele
    * https://github.com/avahi/avahi.git ⇒ avahi-gh

    Becoming DEP-14 compatible would be a matter of typing once `git remote
    add upstreamvcs https://github.com/avahi/avahi.git`. Or (once the gbp
    option will exist) adding "upstream-remote = avahi-gh" to gbp.conf.

    Regards,

    --
    Gioele Barabucci

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From gregor herrmann@21:1/5 to Marco d'Itri on Wed Jan 8 19:20:02 2025
    On Tue, 07 Jan 2025 11:29:59 +0100, Marco d'Itri wrote:

    On Jan 07, Raphael Hertzog <[email protected]> wrote:
    This change basically adds the recommendation to use "upstreamvcs" as the name of the "git remote" to access the upstream repository and it also
    Like many others, this looks like a gratuitous change for change's sake. Countless packages have been using "upstream" for years, but apparently
    it is not perfect enough and somebody had to invent a new name.

    As a data point, the Debian Perl Group is using "upstream-repo" for
    this additional remote in its tools since December 2013.


    Cheers,
    gregor

    --
    .''`. https://info.comodo.priv.at -- Debian Developer https://www.debian.org
    : :' : OpenPGP fingerprint D1E1 316E 93A7 60A8 104D 85FA BB3A 6801 8649 AA06
    `. `' Member VIBE!AT & SPI Inc. -- Supporter Free Software Foundation Europe
    `-

    -----BEGIN PGP SIGNATURE-----

    iQKTBAEBCgB9FiEE0eExbpOnYKgQTYX6uzpoAYZJqgYFAmd+v2xfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEQx RTEzMTZFOTNBNzYwQTgxMDREODVGQUJCM0E2ODAxODY0OUFBMDYACgkQuzpoAYZJ qgY0zA/+MyBjSnM7sYbNfhtuI02FH484V+mcOVIYc1G7kbgcwUQiEu+5FJi/mNfD J7r6GvqeAiESIIJ8m8/uMEvc2Bjp/swWO9BML4xAC11yTKNtB5zyl6rldYeG8O7d Quy4ucR9Pqqu6OcgP5Qm4/feXnVtUnVzb3EuF3Lf5gM8ygE8V4Lg0o3daKq/JNIU t2YQcuCOI143tE8N9prYy1VHGYLnYKErqRFlDbbaEBky3E3+6MjIqW0CfwHum9BN Fx6eXL3Cfj4M0HEvUsqpSF+8eVCoXxPWGegeXFRTetS9hDQrIW9aP39n/+coYIcQ LJFEGmBwyzZE/hESPvF7dmALA3ezbNHwQvWJUsMPkl+0jTFAEBWwCufXqUuq9rv5 WTp8cqNQ9uEmFQQ8iazva/kqOTUuDnBS3NIZ3bQwjxYjgymXIZ07uE71PObjc3yy MjTFV6Xg/dycHdDH4faeXSEbwN3/vHnaBfCtfQx/a4ScRu88UtUTURjEPaxIg7XI rPbMbEEw5JK8TOWpn8qhCrbqKs0D/9Si9I/06b95+FTrcInvzg+wv6CYVOtsjd7u A9a5jpAVbeoqsw1twtTz42iDgNTT9B7P4D+bPHkInyr1uvzKjUsdKhjI3m+/WamN QFIodGsoPZrwbdlo7g2ETE57dVonAC5vWWIIdovaNOpxmqa7I/8=
    =/zoX
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Raphael Hertzog@21:1/5 to Marco d'Itri on Sat Jan 11 12:10:04 2025
    Hi,

    On Tue, 07 Jan 2025, Marco d'Itri wrote:
    Like many others, this looks like a gratuitous change for change's sake. Countless packages have been using "upstream" for years, but apparently
    it is not perfect enough and somebody had to invent a new name.

    It's difficult to have figures for this since the name of the remote
    is a local choice. There have been cases where I used "upstream" too
    but indeed it clashes with the namespace that the DEP recommeds for
    local branches and tags for the upstream import. So "upstream" is not a
    good choice.

    Given that the "upstream" branch name cames from the git-buildpackage and
    that it's git-buildpackage which introduced "upstreamvcs", it seems fair
    to me to standardize on this name.

    I still believe that this is trying to codify a lot of pratices (e.g.
    the obsession with pristine-tar) which are not widely accepted.
    This DEP is the result of an echo chamber and is the consensus of the
    few people debating it on salsa.

    I never pushed further earlier because I had that feeling in the early
    years but I believe this has changed lately. That said I don't have
    figures to back it up and I agree it would be nice to have some concrete figures of adoption (as Lucas suggested).

    +The codename can also be prefixed with the version so that branch names +are correctly sorted by age of the target release in the list of available +branches. Examples: `debian/12-bookworm`, `debian/11-bullseye`, +`ubuntu/24.04-noble`, `ubuntu/22.04-jammy`.
    So to gain optional sorting now you lose the benefit of being able to mechanically determine the branch name? This is beyond silly.

    This "mechanical determination" has never been true unfortunately,
    the DEP allows the use of "codename" as well as "suite" as well as
    "latest" depending on the different use cases.

    So the reason why I accepted this is that we're not going backwards
    in the fact that you need to list all the available branches to figure
    out which is the correct one that you are looking for.

    +unlikely to clash with the packaging branches. Despite this, it is good +practice to not push any upstream branch to the packaging repository so as +to not confuse anyone about the purpose of the Git repository.
    WTF? I say instead that in the modern worlds it is a best practice to
    have the packaging repository as a branch of the upstream repository.
    Again, trying to promote personal preferences to a standard.

    It can certainly be a branch of the upstream repository (and the DEP does document that workflow as one of the recommended ones), but that's not a
    reason to have more than the upstream tag in your packaging repository
    since that's what you merge in your packaging branch.

    Cheers,
    --
    ⢀⣴⠾⠻⢶⣦⠀ Raphaël Hertzog <[email protected]>
    ⣾⠁⢠⠒⠀⣿⡁
    ⢿⡄⠘⠷⠚⠋ The Debian Handbook: https://debian-handbook.info/get/
    ⠈⠳⣄⠀⠀⠀⠀ Debian Long Term Support: https://deb.li/LTS

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From gregor herrmann@21:1/5 to Raphael Hertzog on Sun Jan 12 01:10:02 2025
    On Sat, 11 Jan 2025 12:00:27 +0100, Raphael Hertzog wrote:

    Given that the "upstream" branch name cames from the git-buildpackage and that it's git-buildpackage which introduced "upstreamvcs", it seems fair
    to me to standardize on this name.

    In theory, yes. In pratice, quoting myself:

    | As a data point, the Debian Perl Group is using "upstream-repo" for
    | this additional remote in its tools since December 2013.

    Not that one is better than the other, and although I like to follow git-buildpackage in general, having to change the names on 4000+
    remotes on dozens of developers' machine is annoying.


    Cheers,
    gregor

    --
    .''`. https://info.comodo.priv.at -- Debian Developer https://www.debian.org
    : :' : OpenPGP fingerprint D1E1 316E 93A7 60A8 104D 85FA BB3A 6801 8649 AA06
    `. `' Member VIBE!AT & SPI Inc. -- Supporter Free Software Foundation Europe
    `-

    -----BEGIN PGP SIGNATURE-----

    iQKTBAEBCgB9FiEE0eExbpOnYKgQTYX6uzpoAYZJqgYFAmeDCA9fFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEQx RTEzMTZFOTNBNzYwQTgxMDREODVGQUJCM0E2ODAxODY0OUFBMDYACgkQuzpoAYZJ qgYbrQ/+OmBPhC8rcjuG534UESSuYGxePHDvwQRuCuzv5oTcwyO22Sh5O8xxqf6K hEiCxwK6CxRRT8RP9TUk0AEmjTTOCUq00Ia7PaR/emu2VtR1EEFBPUiKaekw8JI8 xr4NhAhtev/bB+qsUAhhkTDFmYpBNdZkmiJHn4NxT5rbJkO9YgkvyW21mo22Fx91 V8ygOXbGtYxmLpv6jAbrV8jBMIZghRe3mUPiv7g2ST8HJcM4ckOphgbqUtJt42kq UYRITbKkxrOVY07uAujlCzx+BdzzRWIU4jRn+5dWr0lHBRhkeHNA85e8zhtCA2Rx 2j2VpuqWB6whdeiDHk9c0zADVv6SWMyXi1ZKlxZBV6RKB9aguZMGm3yYeRA8e2D4 hR4LcSa8T9JRiTpp0H5amBLFo7g32LiyrCb/otetgmwQZiUe5qwtiukwyKLEdEjH VR0+5T/oWNCjtRBYK7/8O7Hmb+vTyxyFTG4oM53Ojv1Pow5NvhBWGaIJ6ioymd6p 580FPij8scbvE1+uv6PmrGNxOGWhTiDADaXBTCUI5xUxulx1w8At2ZNd8leiZ6O5 MTW2Xd+dOmxdC20FjrmgYNS0k5RgDt+3f8AxkqNj6uX2XemISBXNNiTQlM3jhqVo 3gVcKqui3O3Ikh+Z9EZRaofZGC4abg0BmyvFXSEF5bi4/IhIDNE=
    =6Nl2
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From =?UTF-8?Q?Julien_Plissonneau_Duqu=C@21:1/5 to All on Wed Feb 12 09:40:01 2025
    Good morning,

    Le 2025-01-07 09:41, Julien Plissonneau Duquène a écrit :

    The MR above has additional links and descriptions of current
    practices. I do not have a strong preference for a choice yet so
    feedback would be appreciated.

    I've updated the merge request at [1] to replace the initial `<vendor>/<version>/<suite>` proposal with a more flexible `[<srcpkg>/][<version>/]<vendor>/<suite>` scheme that was suggested in
    the discussion on Salsa, e.g. instead of `debian/2/unstable` as per the
    initial proposal we may now have `foo2/debian/unstable` or just `2/debian/unstable`.

    Pros: marginally less awkward (the package version is not sandwiched
    anymore between the vendor and suite), suitable for transition cases
    where a source package is cloned (renamed), suitable for the uncommon
    but real cases where source packages are merged (to import histories in
    the merged repository).

    Cons: current usage is not as common as the initial proposal.

    Your comments are welcome, either on this list or on the MR discussion
    on Salsa.

    Cheers,


    [1]: https://salsa.debian.org/dep-team/deps/-/merge_requests/16

    --
    Julien Plissonneau Duquène

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Raphael Hertzog@21:1/5 to Lucas Nussbaum on Thu Mar 20 18:00:01 2025
    Hi,

    sorry for replying to an old thread.

    On Tue, 07 Jan 2025, Lucas Nussbaum wrote:
    Maybe before moving it to ACCEPTED, it would be useful to design a
    dashboard of some kind to track adoption, not just in tooling, but in
    actual packages?

    I agree with that. Furthermore with multiple recent desires for
    extensions, it would seem weird to move from CANDIDATE to ACCEPTED
    without any time for those "extensions" to get vetted by real features
    in git packaging helper tools.

    So I'll postpone the move to ACCEPTED to some later date, it doesn't
    change anything in terms of acceptance or not of the DEP by the respective
    tool maintainers.

    Cheers,
    --
    ⢀⣴⠾⠻⢶⣦⠀ Raphaël Hertzog <[email protected]>
    ⣾⠁⢠⠒⠀⣿⡁
    ⢿⡄⠘⠷⠚⠋ The Debian Handbook: https://debian-handbook.info/get/
    ⠈⠳⣄⠀⠀⠀⠀ Debian Long Term Support: https://deb.li/LTS

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Raphael Hertzog@21:1/5 to gregor herrmann on Thu Mar 20 18:20:02 2025
    [ Adding Guido in copy, replying to an old mail ]

    Hello Gregor,

    On Sun, 12 Jan 2025, gregor herrmann wrote:
    On Sat, 11 Jan 2025 12:00:27 +0100, Raphael Hertzog wrote:

    Given that the "upstream" branch name cames from the git-buildpackage and that it's git-buildpackage which introduced "upstreamvcs", it seems fair
    to me to standardize on this name.

    In theory, yes. In pratice, quoting myself:

    | As a data point, the Debian Perl Group is using "upstream-repo" for
    | this additional remote in its tools since December 2013.

    Not that one is better than the other, and although I like to follow git-buildpackage in general, having to change the names on 4000+
    remotes on dozens of developers' machine is annoying.

    I can certainly sympathize with that. I don't have any strong personal preference in the name but since the goal is to standardize across tools,
    we need to pick one.

    Can you point out which tools in the Perl group use that remote name?
    How easy is it to tweak those tools to perform the rename of the remote
    in some dynamic fashion?

    I mean "git remote rename upstream-repo upstreamvcs" could be called automatically by a newer version of your tools. Or a more complex set
    of commands that would duplicate the remote instead of renaming it.

    On the other side, we could check whether Guido would be willing to update git-buildpackage to use "upstream-repo" as default? I don't know since
    when "uptsreamvcs" is a thing and whether changing the default again would
    have serious drawbacks.

    But if I have to pick one or the other name, I'm more inclined to follow
    the lead of git-buildpackage since it's more widely used than the above
    helper tools of the Perl team.

    Have a nice day!
    --
    ⢀⣴⠾⠻⢶⣦⠀ Raphaël Hertzog <[email protected]>
    ⣾⠁⢠⠒⠀⣿⡁
    ⢿⡄⠘⠷⠚⠋ The Debian Handbook: https://debian-handbook.info/get/
    ⠈⠳⣄⠀⠀⠀⠀ Debian Long Term Support: https://deb.li/LTS

    -----BEGIN PGP SIGNATURE-----
    Comment: Signed by Raphael Hertzog

    iQEzBAABCgAdFiEE1823g1EQnhJ1LsbSA4gdq+vCmrkFAmfcTAoACgkQA4gdq+vC mrlEagf8Cqwa7tFwuRD8/zpkKYXeCz6kM3rNp6Z1ztSm0Hg72APDLRXKF4xDVhac NbXaLogHDZEOuJ5SqW7zwPY57U1EQtq3dguv8ZRNj+pKBf6ZGmy9TA0ePIlk14tW fXGVDsKseUHfExdOviLc+pePjnrXf8efiAX1G6hO1zra46wUswgQMvSvPFfS0wdk YGtU8c//dBGT74GfntGXetBKCco+kOExb847CZmLnBedMoVyzXxPdrjRyvL7GOCl UqOD3b0Tmpi3NvMsen/zFBT06kG838OLw/92ITlsEXE+oIgkP3b50E0HXn1mKeL4 M97qUMM6NpCr0MHIRSroWaxwR9wC1Q==
    =nv+t
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Guido =?iso-8859-1?Q?G=FCnther?=@21:1/5 to Raphael Hertzog on Wed Mar 26 23:30:01 2025
    Hi,
    On Thu, Mar 20, 2025 at 06:10:35PM +0100, Raphael Hertzog wrote:
    [ Adding Guido in copy, replying to an old mail ]

    Hello Gregor,

    On Sun, 12 Jan 2025, gregor herrmann wrote:
    On Sat, 11 Jan 2025 12:00:27 +0100, Raphael Hertzog wrote:

    Given that the "upstream" branch name cames from the git-buildpackage and that it's git-buildpackage which introduced "upstreamvcs", it seems fair to me to standardize on this name.

    In theory, yes. In pratice, quoting myself:

    | As a data point, the Debian Perl Group is using "upstream-repo" for
    | this additional remote in its tools since December 2013.

    Not that one is better than the other, and although I like to follow git-buildpackage in general, having to change the names on 4000+
    remotes on dozens of developers' machine is annoying.

    I can certainly sympathize with that. I don't have any strong personal preference in the name but since the goal is to standardize across tools,
    we need to pick one.

    Can you point out which tools in the Perl group use that remote name?
    How easy is it to tweak those tools to perform the rename of the remote
    in some dynamic fashion?

    I mean "git remote rename upstream-repo upstreamvcs" could be called automatically by a newer version of your tools. Or a more complex set
    of commands that would duplicate the remote instead of renaming it.

    On the other side, we could check whether Guido would be willing to update git-buildpackage to use "upstream-repo" as default? I don't know since
    when "uptsreamvcs" is a thing and whether changing the default again would have serious drawbacks.

    The work within gbp is almost zero. I'm aware of some scripts that rely
    on the naming though and we don't know what else exists outside of gbp
    (and there's also users outside Debian) so if we don't *have* to change
    the name that would be better.

    Cheers,
    -- Guido


    But if I have to pick one or the other name, I'm more inclined to follow
    the lead of git-buildpackage since it's more widely used than the above helper tools of the Perl team.

    Have a nice day!
    --
    ⢀⣴⠾⠻⢶⣦⠀ Raphaël Hertzog <[email protected]>
    ⣾⠁⢠⠒⠀⣿⡁
    ⢿⡄⠘⠷⠚⠋ The Debian Handbook: https://debian-handbook.info/get/
    ⠈⠳⣄⠀⠀⠀⠀ Debian Long Term Support: https://deb.li/LTS

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From gregor herrmann@21:1/5 to All on Sun May 18 16:10:01 2025
    On Wed, 26 Mar 2025 23:17:20 +0100, Guido G�nther wrote:

    On Thu, Mar 20, 2025 at 06:10:35PM +0100, Raphael Hertzog wrote:
    Hello Gregor,

    Bonjour !

    On Sun, 12 Jan 2025, gregor herrmann wrote:
    On Sat, 11 Jan 2025 12:00:27 +0100, Raphael Hertzog wrote:
    Given that the "upstream" branch name cames from the git-buildpackage and
    that it's git-buildpackage which introduced "upstreamvcs", it seems fair >> > > to me to standardize on this name.
    In theory, yes. In pratice, quoting myself:
    | As a data point, the Debian Perl Group is using "upstream-repo" for
    | this additional remote in its tools since December 2013.
    Not that one is better than the other, and although I like to follow
    git-buildpackage in general, having to change the names on 4000+
    remotes on dozens of developers' machine is annoying.
    I can certainly sympathize with that. I don't have any strong personal
    preference in the name but since the goal is to standardize across tools,
    we need to pick one.

    Ack.

    Can you point out which tools in the Perl group use that remote name?
    How easy is it to tweak those tools to perform the rename of the remote
    in some dynamic fashion?

    I (finally) hada quick look, and it should be fairly easy to add the
    rename to dpt-upstream-repo, which is also called by our .mrconfig
    setup. Looks like a quick DebCamp project.

    On the other side, we could check whether Guido would be willing to update >> git-buildpackage to use "upstream-repo" as default? I don't know since
    when "uptsreamvcs" is a thing and whether changing the default again would >> have serious drawbacks.
    The work within gbp is almost zero. I'm aware of some scripts that rely
    on the naming though and we don't know what else exists outside of gbp
    (and there's also users outside Debian) so if we don't *have* to change
    the name that would be better.

    Agreed.


    Cheers,
    gregor

    --
    .''`. https://info.comodo.priv.at -- Debian Developer https://www.debian.org
    : :' : OpenPGP fingerprint D1E1 316E 93A7 60A8 104D 85FA BB3A 6801 8649 AA06
    `. `' Member VIBE!AT & SPI Inc. -- Supporter Free Software Foundation Europe
    `-

    -----BEGIN PGP SIGNATURE-----

    iQKTBAEBCgB9FiEE0eExbpOnYKgQTYX6uzpoAYZJqgYFAmgp6Z5fFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEQx RTEzMTZFOTNBNzYwQTgxMDREODVGQUJCM0E2ODAxODY0OUFBMDYACgkQuzpoAYZJ qgbslg//SLan0HTzNBiAv2pqwycE61HuSZZgqvCAAi+LsEev5SCUO3+LVW5ZCKU3 8p4z7PZvUl3oaIZeA7Nnv6TjWQ5kTBncY4YgYJhXJLCgcJRzrlDGaKtSQBtQRg2h FZniOzCxWGqXLXIVvNQVoOVrpSl2QB4gTFKvEIRAW6OoWQGJDZQjgJ/fg7wQOsg8 ykypVgrsS6xdWBX9YkaGi0ecx4i2Ph0tzNJPDF0SB3L3m3w6cULkkSx5Gg2Etqix oBWxNik+qvdobV3EuI4p0jb6QKIJKy5HZk2mVz/BFP3YqE2GKAGDU1mhXTtncl24 ErU1GfRtAVNv+OUb8nHFzTdXmocQQiqXnoIAKIrgB2/CQEFM1gKczyzm41i1t6ht eUp40rmGVR6Cw0uZOvuapGPD6MQ5GVKFyMSAjgM15jhD7Llw6y/Lin1Ey3hoMOl6 2YQwarPvs/sr7/1+wgxL7g1+cINKZKRSwVUexiIuHtkqxh64agKKxx7YsNpTgjNL
    Qml0
  • From =?UTF-8?Q?Julien_Plissonneau_Duqu=C@21:1/5 to All on Sun May 18 21:30:01 2025
    Le 2025-05-18 16:07, gregor herrmann a écrit :

    I (finally) hada quick look, and it should be fairly easy to add the
    rename to dpt-upstream-repo, which is also called by our .mrconfig
    setup. Looks like a quick DebCamp project.

    I wonder though, is there a significant benefit in recommending a
    specific remote name for upstream repositories in DEP-14? Tools could
    still scan the configured remotes to find one that matches the URI
    declared in `debian/upstream/metadata`, so (if not dropping the
    recommendation) maybe just recommending that the remote name begins with "upstream" while avoiding the exact name "upstream" could be enough?

    Cheers,

    --
    Julien Plissonneau Duquène

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)