Debian Bug report logs - #985633
warn about watch files that use github and include full refs

version graph

Package: lintian; Maintainer for lintian is Debian Lintian Maintainers <[email protected]>; Source for lintian is src:lintian (PTS, buildd, popcon).

Reported by: Jelmer Vernooij <[email protected]>

Date: Sun, 21 Mar 2021 02:27:02 UTC

Severity: normal

Found in version lintian/2.104.0

Full log

🔗 View this message in rfc822 format

X-Loop: [email protected]
Subject: Bug#985633: warn about watch files that use github and include full refs
Reply-To: Felix Lechner <[email protected]>, [email protected]
Resent-From: Felix Lechner <[email protected]>
Resent-To: [email protected]
Resent-CC: Debian Lintian Maintainers <[email protected]>
X-Loop: [email protected]
Resent-Date: Sun, 21 Mar 2021 04:48:01 +0000
Resent-Message-ID: <[email protected]>
Resent-Sender: [email protected]
X-Debian-PR-Message: followup 985633
X-Debian-PR-Package: lintian
X-Debian-PR-Keywords: 
References: <[email protected]> <[email protected]>
X-Debian-PR-Source: lintian
Received: via spool by [email protected] id=B985633.16163018928149
          (code B ref 985633); Sun, 21 Mar 2021 04:48:01 +0000
Received: (at 985633) by bugs.debian.org; 21 Mar 2021 04:44:52 +0000
X-Spam-Checker-Version: SpamAssassin 3.4.2-bugs.debian.org_2005_01_02
	(2018-09-13) on buxtehude.debian.org
X-Spam-Level: 
X-Spam-Status: No, score=-14.9 required=4.0 tests=BAYES_00,DKIM_SIGNED,
	DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FOURLA,HAS_BUG_NUMBER,
	SPF_HELO_NONE,SPF_PASS,TXREP autolearn=ham autolearn_force=no
	version=3.4.2-bugs.debian.org_2005_01_02
X-Spam-Bayes: score:0.0000 Tokens: new, 25; hammy, 150; neutral, 74; spammy,
	0. spammytokens: hammytokens:0.000-+--Lintian, 0.000-+--jelmer,
	0.000-+--Jelmer, 0.000-+--lintian, 0.000-+--Vernooij
Received: from letbox-vps.us-core.com ([144.172.68.95]:33940)
	by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256)
	(Exim 4.92)
	(envelope-from <[email protected]>)
	id 1lNpxL-000274-3q
	for [email protected]; Sun, 21 Mar 2021 04:44:52 +0000
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
	d=lease-up.com; s=2017; h=Content-Type:Cc:To:Subject:Message-ID:Date:From:
	In-Reply-To:References:MIME-Version:Sender:Reply-To:Content-Transfer-Encoding
	:Content-ID:Content-Description:Resent-Date:Resent-From:Resent-Sender:
	Resent-To:Resent-Cc:Resent-Message-ID:List-Id:List-Help:List-Unsubscribe:
	List-Subscribe:List-Post:List-Owner:List-Archive;
	bh=MlSa6wL/gPnA53rWabTcsZadf9ayrKaLX5tWOk4/BDc=; b=SszjXSopYIknutMgLUjxv7px8e
	yoVk5ZWNcYvMZx9QH623xM6NxQCQZwvVVIRloZoIfvQlGHawUy2791zq9dVkEXsD8otj0YdcT9FfA
	4ogkIWCxnnxNgMS8eK5b3whlLz4HhvHPnTqHautCBRBjyCjGQ/FCVHdHUtlODG6EkLEg=;
DKIM-Signature: v=1; a=ed25519-sha256; q=dns/txt; c=relaxed/relaxed;
	d=lease-up.com; s=2020; h=Content-Type:Cc:To:Subject:Message-ID:Date:From:
	In-Reply-To:References:MIME-Version:Sender:Reply-To:Content-Transfer-Encoding
	:Content-ID:Content-Description:Resent-Date:Resent-From:Resent-Sender:
	Resent-To:Resent-Cc:Resent-Message-ID:List-Id:List-Help:List-Unsubscribe:
	List-Subscribe:List-Post:List-Owner:List-Archive;
	bh=MlSa6wL/gPnA53rWabTcsZadf9ayrKaLX5tWOk4/BDc=; b=9Qw9Y89WsKqwB09GJRwX2dvy7e
	bLQF91Gl4UdPcpJrqgpeuGvxoUCC8V+9JBJgGDtIVoQ3/FPHkHQPne0FJGAA==;
Received: from mail-oi1-f173.google.com ([209.85.167.173])
	by letbox-vps.us-core.com with esmtpsa  (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
	(Exim 4.94)
	(envelope-from <[email protected]>)
	id 1lNpxE-006jTC-9k
	for [email protected]; Sat, 20 Mar 2021 21:44:44 -0700
Received: by mail-oi1-f173.google.com with SMTP id w70so9456324oie.0
        for <[email protected]>; Sat, 20 Mar 2021 21:44:44 -0700 (PDT)
X-Gm-Message-State: AOAM531YwL1irEfIca+S35Mcxb6QlguHdwM5TjNyF7xNliwAKtm3jmHj
	G4CzVfAun+pLIs5u7ZutOjzeCVcqOuPL0SN5Lno=
X-Google-Smtp-Source: ABdhPJzafB8Ss/kOpNtvs97zuKc3yxsnSbgxK0Vm2GnkERQh5osvHXUyjBr2TVnVA+pz9uFigHlnm3O5yx+Uj7pkXtY=
X-Received: by 2002:aca:4284:: with SMTP id p126mr5646736oia.178.1616301883787;
 Sat, 20 Mar 2021 21:44:43 -0700 (PDT)
MIME-Version: 1.0
In-Reply-To: <[email protected]>
From: Felix Lechner <[email protected]>
Date: Sat, 20 Mar 2021 21:44:07 -0700
X-Gmail-Original-Message-ID: <CAFHYt55tT_ED=LT8GOM+k52EcNxNyAES2N+pksjpMx0nwYEEVw@mail.gmail.com>
Message-ID: <CAFHYt55tT_ED=LT8GOM+k52EcNxNyAES2N+pksjpMx0nwYEEVw@mail.gmail.com>
To: Jelmer Vernooij <[email protected]>
Cc: [email protected], [email protected]
Content-Type: text/plain; charset="UTF-8"

Hi Jelmer,

On Sat, Mar 20, 2021 at 7:27 PM Jelmer Vernooij <[email protected]> wrote:
>
> https://qa.debian.org/cgi-bin/watch?pkg=jupyter-core

I saw the traffic on IRC where someone suggested we replace

    .*archive/v?([0-9.]*).tar.gz

with

    .*archive/.*/v?([0-9.]*).tar.gz

to fix at least 1,500 affected packages. Unfortunately, that may not
work for jupyter-core, which does not prefix tags with a "v" and for
which "(.*)" catches the slash (or maybe even slashes).

As a tool without network access, Lintian is not well positioned to
figure out, in general, whether a URL/regex combination works. Would
it be okay if Lintian instead issues two now classification tags?

The first would occur once per source. It shows the watch file URL and
the regular expression for HTML parsing, possibly followed by "debian
update" (or similar). The second tag would occur once for each of the
options selected, i.e. multiple times. Armed with that information,
the Janitor could probe the URL and figure out which parts need
fixing.

The watch file version is already available in UDD, as you know, so
you could reconstruct the watch file and perhaps even enlist 'uscan'
to help you.

The parsing for these components is in place. If it is time sensitive,
I could provide the new tags via UDD within 48 hours. What do you
think? Thank you!

Kind regards
Felix Lechner

Send a report that this bug log contains spam.

Debian bug tracking system administrator <[email protected]>. Last modified: Tue May 13 11:22:31 2025; Machine Name: buxtehude

Debian Bug tracking system

Debbugs is free software and licensed under the terms of the GNU General Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.