~ubuntu-branches/debian/sid/devscripts/sid : changes

~ubuntu-branches/debian/sid/devscripts/sid » Changes from revision 75

From Revision 73 to 54

Rev	Summary	Authors	Tags	Date
73	* licensecheck: * licensecheck: + Use Dpkg::IPC to run file to avoid shell injection. (Closes: #794260) + Change whitelist of mime types to greylist of encodings. Restores ability to check files with mime types like text/x-c++ and application/postscript. Thanks to Jonas Smedegaard for the patch. (Closes: #794282) + Fix an endless loop in parsing certain files. Thanks to Jonas Smedegaard for the patch. (Closes: #794263)	James McCoy	2.15.7	8 years ago
72	[ Paul Wise ] [ Paul Wise ] * Adjust wording of common suffixes passed to repacksuffix [ James McCoy ] * debcheckout: + Handle Launchpad Git URLs. Thanks to Colin Watson for the patch. (Closes: #788777) + Handle authenticated checkout when Vcs-Darcs is missing the root /darcs directory. * checkbashisms: + Fix unescaped, literal curly brace in regex, causing FTBFS with Perl 5.22. Thanks to Roderich Schupp for the patch. (Closes: #788707) + Improve detection of %q/%b to include when it is at the start of the string. Thanks to Eero Vuojolahti. (Closes: #793396) * wnpp-check: + Use getopt to handle argument parsing. + Add --exact switch to match the exact package name instead of a substring. Thanks to Balasankar C. (Closes: #791918) * Replace manual parsing of dpkg-buildpackage's output with the use of its -S switch or the Dpkg::Changelog::Parse Perl module. + Bump minimum required version of dpkg-dev to 1.17.0 * dget: Support arch-qualified package names. “dget foo:i386” will download the foo binary package for Arch: i386. “dget --all srcfoo:i386” will download all binary packages from the srcfoo source package that are either Arch: all or Arch: any/i386. (Closes: #792917) * uscan: Only check for presence of signing key when downloading a new upstream archive. (Closes: #790047) [ Dominique Dumont ] * licensecheck: * extract © owner when © and owners are specified on 2 or more lines. * fix digia © and license extraction (Closes: #789074) * fix BSD-2-clause detection * parse assembly files with suffix .S * warn if scanned file is not a text file (Closes: #791756) [ Mattia Rizzolo ] * uscan: Suggest the correct syntax in the manpage for the dversionmangle option, escaping a '+'. Thanks to Martin Erik Werner for reporting. (Closes: #789389)	James McCoy	2.15.6	8 years ago
71	[ Cyril Brulebois ] [ Cyril Brulebois ] * Update chdist bash-completion file with the architectures currently (as of 2015-04-28) listed on buildd.debian.org and buildd.debian-ports.org. (Closes: #783634) * Add support for RMADISON_SSL_CA_FILE and RMADISON_SSL_CA_PATH, so that one can point to system-specific locations for CA-related files, and pass them to curl/wget via the appropriate options. (Closes: #784812) [ James McCoy ] * wrap-and-sort: + Always remove empty elements from lists so “-t” doesn't add a new, empty element. (Closes: #783630) + Remove empty lines in debhelper-related files. (Closes: #780667) * Install Perl modules into $Config{vendorlib} and remove the hacks in various scripts to make them see devscript's modules. * Add bash completion scripts for uscan (thanks to Ben Finney) and mk-origtargz. (Closes: #784394) * Stop building and shipping libvfork.so since strace has handled vforks for at least a decade. * Move bash-completion scripts from /etc/bash_completion.d (compat directory) to /usr/share/bash-completion/completions. * debdiff: Inspect wdiff's return code rather than Dpkg::IPC::spawn's exception to determine if wdiff found differences. (Closes: #786518) * Store cached files in $XDG_CACHE_HOME instead of ~/.devscripts_cache. (Closes: #659330) * bts: + Use https to talk to bugs.debian.org + Use URI & URI::QueryParam to parse URIs rather than regexps. This fixes issues with not detecting BTS URLs as valid due to ordering of query parameters. (Closes: #786706) * debuild: Recognize -jauto as a valid option. Based on a patch by Reiner Herrmann. (Closes: #787276) * uscan: + Fix Github example in man page. (Closes: #757194) + Clear cached redirection URLs every time a watch line is processed. This ensures any relative URLs are built into absolute URLs using relevant sites. (Closes: #736063) * Devscripts::Debbugs: Retrieve bug status in chunks to avoid building large responses on bugs.d.o. * mk-build-deps: + Verify build-dep package was installed since the install tool may exit successfully even if the package couldn't be installed. Based on a patch by Dima Kogan. (Closes: #755371) * mergechanges: + Add -d option to delete input files on success. Thanks to Mark Hymers for the patch. (Closes: #640068) * dd-list: + Strip arch-qualifiers from given package names. (Closes: #788367) [ Dominique Dumont ] * licensecheck: * check file encoding and decode properly when reading file (Closes: #784821) * improve GPL LGPL extraction * optimize regex used to extract © info * check Groovy, Scala and Clojure files (Closes: #771119) * fixed regexp used to detect discussion about © (Closes: #723723) * fix BSL parser (Closes: #690375) * support academic free license (Closes: #534987) * allow © owner to mention "and others" * support eclipse public license (Closes: #587892) * handle LGPL as written by IBM (Closes: #587970) * handle REM style comments (Closes: #748611) * uscan: use defined-or (//) instead of "\|\|" to avoid loosing '0' version field (Closes: #787767) [ Piotr Ożarowski ] * uscan: Use pypi.debian.net redirector instead of pypi.debian.org/packages/source URLs. (Closes: #785746) [ Hideki Yamane ] * Add bash completion for dcut. (Closes: #787321) [ Craig Small ] * debdiff: Honor DEBRELEASE_DEBS_DIR or --debs-dir. (Closes: #785421)	James McCoy	2.15.5	8 years ago
70	[ Dominique Dumont ] [ Dominique Dumont ] * licensecheck: + Handle license like GPL version 2 or 3 (which is not GPL-2+) + Ignore .pc directories + print copyrights in a non random-order [ Daniel Kahn Gillmor ] * uscan: explicitly dearmor, rather than --import upstream signing key (Closes: #768345) [ James McCoy ] * debsnap: When specified version or architectures aren't available, warn and exit with error code 2. (Closes: #774276) * rmadison: + Display the usage to the specified fd instead of ignoring it. + Display the known URL aliases in the usage. + Display all the URLs in --help when $default_url is a comma-separated list. + Remove 404ing myon and debug URLs + Use https://api.ftp-master.debian.org/madison for debian and new URLs. This also fixes support for the -b option. (Closes: #775084) + Strip arch-qualifiers from package names. (Closes: #780167) * mk-origtargz: Avoid adding the same file to the "to be deleted" list multiple times. This may also cause patterns to be declared as unused if a file is matched by multiple patterns. (Closes: #776318) * who-uploads: + Fix extraction of uploader's key id. * Create a temporary GNUPGHOME to avoid “gpg --list-key” erroring when no ~/.gnupg exists. (Closes: #776209) * bts: Cancel the mail if the spawned editor exits with a non-zero exit code. This is an alternative way to cancel a command, rather than saving an empty message. (Closes: #778648) * who-permits-upload: Update URL to use https. * Replace use of Parse::DebControl with Dpkg::Control to work around #780138 and remove a dependency. * uscan: + Always remove the Referer header for Sourceforge, not just when going via the redirector. (Closes: #778860) + Let the OS assign a port to the test's HTTP server so tests don't fail when something is already using port 8000. * Ensure all LWP-using scripts honor a proxy set in the environment. (Closes: #781611) [ Johannes Schauer ] * chdist: Also set Apt::Architectures to prevent foreign architectures from the host leaking into the apt tree (Closes: #774685) [ Iain Lane ] * rmadison: The short option for --regex is -r, not -s. [ Fabian Greffrath ] * wrap-and-sort: Add dirs, docs, examples, info, links, maintscript and manpages (all can also be prefixed by the binary package name) to the files in the debian/ directory that get sorted alphabetically. (Closes: #765338) [ Ian Jackson ] * grep-excuses: + Minor manpage corrections. (Closes: #777344) + Add --debug option. (Closes: #777345) + Search for autoremovals too, by default. (Closes: #777346) [ Hideki Yamane ] * Add bash completion for dch, debsign, and uupdate. (Closes: #774544, #778963, #779279) [ Peter Eisenstraut ] * Consistently use Makefile variables to control the installation layout. (Closes: #728607) [ Antonio Terceiro ] * chdist: also create /etc/apt/sources.list.d [ Simon McVittie ] * mergechanges: Add --indep option to skip architecture-specific packages. (Closes: #782354)	James McCoy	2.15.4	9 years ago
69	debchange: Use bpo8 instead of bpo80 for jessie-backports, p... debchange: Use bpo8 instead of bpo80 for jessie-backports, per https://lists.debian.org/debian-backports/2014/11/msg00031.html.	James McCoy	2.15.3	9 years ago
68	debchange: Make jessie default backports release. debchange: Make jessie default backports release.	James McCoy	2.15.2	9 years ago
67	[ Julien Cristau ] [ Julien Cristau ] * grep-excuses: update URLs to use https://release.debian.org/ [ David Prévot ] * French translation update	James McCoy	2.15.1	9 years ago
66	[ Paul Wise ] [ Paul Wise ] * Suggest debbindiff for deep .deb comparisons * Use mirror.ftp-master instead of specific hostnames [ James McCoy ] * debcommit: Correctly show --strip-message is the default in --help. (Closes: #766885) * mk-origtargz: Warn about unmatched Files-Excluded patterns. (Closes: #766641) * annotate-output: Fix handling of a date format that contains whitespace. (Closes: #766180) * Fix regression in dpkg-architecture using scripts when only -a or -t is specified, rather than both or neither. (Closes: #768587) [ Jakub Wilk ] * sadt: + Fix handling of rw-build-tree restriction + Improve handling of non-executable test files. When rw-build-tree is in effect, simply chmod the file. Otherwise, attempt to chmod the file (skipping the test on failure) and restore the original permissions on completion. (Closes: #749729) [ Adam D. Barratt ] * debchange: + Fix handling of changelogs where the most recent trailer line does not include a maintainer name. (Closes: #766516) + Add jessie-backports to the version mapping for --bpo. * bts: Support the "stretch", "buster", "stretch-ignore" and "buster-ignore" tags. [ Stefano Zacchiroli ] * bts: + Support for the "newcomer" tag + Backward compatibility for the old "gift" usertag: drop documentation for it, but do both gift and newcomer (user)tagging for the time being	James McCoy	2.14.11	9 years ago
65	Fix all the other calls to dpkg-architecture in devscripts. Fix all the other calls to dpkg-architecture in devscripts. (Closes: #764963 ... again)	James McCoy	2.14.10	9 years ago
64	debuild: Only pass -a/-t to dpkg-architecture when the user ... debuild: Only pass -a/-t to dpkg-architecture when the user has specified values for them. (Closes: #764963)	James McCoy	2.14.9	9 years ago
63	[ James McCoy ] [ James McCoy ] * uscan: + Ensure $keyring is defined before trying to use it when checking whether the upstream keyring exists. + Strip the Referer header when using qa.debian.org's Sourceforge redirector. When there's a foreign Referer header, Sourceforge responds with a web page containing a <meta refresh=...> redirect to the actual file, causing uscan to save the web page rather than the file. (Closes: #764367) * uupdate: When updating a 1.0 source format package, remove any symlinks in the new upstream source before applying the Debian diff, restoring the symlinks after. This prevents patch from following the symlinks, which may point to targets outside of the source tree, when applying the diff. Thanks to Jakub Wilk for the discovery and suggested fix. (Closes: #737160, CVE-2014-1833) [ Ron Lee ] * cowpoke: Add --sign and --upload command line overrides.	James McCoy	2.14.8	9 years ago
62	[ Cyril Brulebois ] [ Cyril Brulebois ] * deb-reversion: update change_version(), fixing the missing call_hook statement in the udeb case. That was overlooked when the changelog massaging was made conditional, and causes hooks to be ignored for udebs. (Closes: #757425) [ James McCoy ] * debsign/debi/debc: Delay checking for the existence of the --debs-dir/DEBRELEASE_DEBS_DIR directory until we get to code that actually uses said directory. (Closes: #544366) * mk-build-deps: Pass the file, not package, names to unlink when --remove is given. (Closes: #757481) * debcheckout: Always define $origtgz_name when a URL is specified on the command line. (Closes: #757614) * dcmd: Add --debtar option and restrict --tar/--orig to orig.tar.. Thanks to Osamu Aoki for the patch. (Closes: #622561) grep-excuses: Remove useless call to “hostname --fqdn”. (Closes: #758668) * build-rdeps: Recognize arch-qualified package names. Thanks to Stuart Prescott for the patch. (Closes: #757807) * uscan: + Consistently pass the path to the downloaded (and possibly renamed/symlinked/…) file as an argument to the watch file's action command. + Add support for a repacksuffix option to the watch file. This is passed through to mk-origtargz. (Closes: #753772) + Specify Referer header when traversing http(s) sites. Thanks to David Prévot for the patch. (Closes: #739137) * mk-origtargz: Add a --repack-suffix option to adjust the upstream version when the upstream sources are modified (e.g., due to Files-Excluded). * bts: Don't send the email when the user saves an empty body for the email. (Closes: #762888) [ Benjamin Drung ] * Remove unused build-dependencies libjson-perl and libterm-size-perl [ Joachim Breitner ] * mk-origtargz: Treat jars like zip files (Closes: #754203) [ Dominique Dumont ] * licensecheck: Check javascript files. (Closes: #762070)	James McCoy	2.14.7	9 years ago
61	[ Benjamin Drung ] [ Benjamin Drung ] * suspicious-source: Add image/tiff, application/pgp-keys, and image/x-icon to whitelisted mime-types. Add .gmo to whitelisted file extensions. * wrap-and-sort: Add --max-line-length option with a default of 79 characters (it was previously hard-coded to 80 characters). (Closes: #756067) [ Guillem Jover ] * nmudiff: Send control messages inline. (Closes: #752152) [ Paul Wise ] * rmadison: bpo madison is dead, remove it * rmadison: add new to the defaults for Debian * rmadison: document the defaults in the manual page [ James McCoy ] * namecheck: Remove berlios, since it no longer hosts code. (Closes: #752382) * mk-build-deps: + Provide the package name, not file name, to “dpkg --remove” when package install fails. + Read all of the output from “apt-cache showsrc” to ensure mk-build-deps doesn't get stuck waiting for apt-cache to exit. + Pass the name of the .deb file out of build_equiv to ensure the correct .deb is installed. (Closes: #753657) [ Christoph Berg ] * Update all qa.debian.org URLs to https://. [ Ron Lee ] * cowpoke: + Allow more flexibility for specialised build chroots. It's now possible to specify arbitrary 'dist' names, with arbitrary special configurations on top of the real BASE_DIST suite. This means it's easy to have things like a chroot for wheezy-backports which will be able to pull other deps from the backports repo, while still having a pristine wheezy build chroot on the same build host. Or to have a staging chroot for unstable, with extra build deps pulled in from a local repository, or installed manually, while still having a pristine sid chroot for building other packages to upload. And it all works the same as normal, you just pass --dist=wheezy_bpo to select the chroot. + Allow SIGN_KEYID and UPLOAD_QUEUE to be overridden per arch/dist. This makes a lot more sense now that the above is easily possible. People can use that for private or work (in progress) builds too, and this can reduce the chance of accidentally uploading to the wrong place, or signing some package not intended for upload with a key that would would let it be accepted by dak. + Better handling of --debbuildopts. There were some corner cases for this where the required quoting of options could be rather weird in the intersection of all the layers it might get passed through. This should make it more forgiving and better able to always DTRT. [ David Prévot ] * uscan.1: Use +dfsg suffix in examples	James McCoy	2.14.6	9 years ago
60	* debchange: * debchange: + Verify $opt_vendor is defined before trying to use it to avoid a warning about an unitialized variable. + utf-8 decode the maintainer name when reading it from the changelog. (Closes: #750855) * uscan: Use HEAD instead of GET to check for possible GPG signature URLs. (Closes: #750929) * debcheckout: Handle more variations of Alioth URLs when attempting to perform an authenticated checkout. (Closes: #750542)	James McCoy	2.14.5	9 years ago
59	* mk-origtargz: Fix DEP8 test failures due to differences in... * mk-origtargz: Fix DEP8 test failures due to differences in how the script is named when it's run. * debchange: Use Dpkg::Changelog::Parse to parse the changelog instead of performing manual parsing in debchange. (Closes: #749980)	James McCoy	2.14.4	9 years ago
58	[ Benjamin Drung ] [ Benjamin Drung ] * wrap-and-sort: Sanitize spaces between alternative package names. (Closes: #747818) [ Martin Pitt ] * Install recommends for the autopkgtest, otherwise a lot of necessary tools like wdiff are missing. * test_uscan: Add missing --compression in --installed mode, to fix the autopkgtest. * Add missing zip autopkgtest dependency (used by test_uscan). [ James McCoy ] * uscan: + Specify file name instead of path in --dehs mode's target node. (Closes: #747901) + Add target-path node to dehs output for those who care about the actual path to the file. + Restore display of final file name after file is downloaded. * mk-origtargz: Use file's mime detection to detect zip files. (Closes: #748462) * chdist: Finish reading output from child processes to avoid getting a SIGPIPE when closing their read handle. (Closes: #749504) [ Christoph Berg ] * uscan: Fix "upsteam" typo. (Closes: #749343) [ Paul Wise ] * uscan: Also accept https for copyright-format URLs (Closes: #749498)	James McCoy	2.14.3	9 years ago
57	[ Jakub Wilk ] [ Jakub Wilk ] * sadt: + Add support for @builddeps@ in tests' Depends. (Closes: #736798) [ Benjamin Drung ] * Bump Standard-Version to 3.9.5. * Wrap long line in extended description. [ Paul Wise ] * Use HTTPS for the buildd logs to avoid a redirect * Fix scraping of the wnpp web pages due to https links [ Daniel Kahn Gillmor ] * uscan: check for likely upstream signatures if none are known (Closes: #732449) [ Cyril Brulebois ] * deb-reversion: Add support for udebs. (Closes: #739437) [ Gunnar Wolf ] * debcommit: Add switch+conf.setting allowing to specify Git to sign every single commit (Closes: #741040) [ James McCoy ] * debcommit: Add hg and bzr support to DEBCOMMIT_SIGN_COMMITS. * mk-build-deps: Uninstall the build-dep packages if apt isn't able to complete their install. (Closes: #743462) * dpkg-depcheck: Convert relative paths to absolute before filtering, so filters properly match the path. Thanks to William King for the patch. (Closes: #744320) * debchange: + Document the default urgency is medium. Thanks to Anders Kaseorg for the patch. (Closes: #745565) + Add “binary-only=yes” to binNMU changelog stanzas. Thanks to Thorsten Glaser for the patch. (Closes: #746612) [ Andreas Tille ] * uscan: Allow a different compression scheme when repacking upstream tarballs. (Closes: #730768) [ Antonio Terceiro ] * debi/debc: always try ../build-area/ when the changes file is not found under ../ (even when not using svn) [ Joachim Breitner ] * mk-origtargz: New script to rename (or symlink or copy) a downloaded upstream tarball to the correct name, possibly changing the compression scheme and removing files listed in debian/copyright's Excluded-Files. This is now also used by uscan, where most of the code comes from.	James McCoy	2.14.2	9 years ago
56	Actually install sadt. (Closes: #736683) Actually install sadt. (Closes: #736683)	James McCoy	2.14.1	10 years ago
55	[ Martin Pitt ] [ Martin Pitt ] * autopkgtest: Add "allow-stderr" restriction to avoid failing tests because of the HTTP server log on stderr. [ James McCoy ] * uscan: + Repack the tarball and verify it is a compressed archive without allowing arbitrary code execution. Fixes CVE-2013-6888. + Use find's -exec to call rm directly instead of piping to xargs. (Closes: #732006, CVE-2013-7085) + Follow tar's recommended security practices - Use --keep-old-files --no-overwrite-dir - Ensure parent directory of directory used for repacking archive isn't accessible to other users. + Fix handling of 'dirname' exclusions, so 'dirname/' isn't required. [ Salvatore Bonaccorso ] uscan: Fix unitialized value warning when copyright is not in copyright-format 1.0. (Closes: #732807)	James McCoy	2.13.9	10 years ago
54	[ James McCoy ] [ James McCoy ] * uscan: Fix arbitrary command execution when using USCAN_EXCLUSION. (Closes: #731849) [ Adam D. Barratt ] * Honour USCAN_EXCLUSION. (Closes: #731885)	James McCoy	2.13.8	10 years ago

Older »