[From nobody Tue Sep 1 02:41:05 2026 Received: (at 1146129-done) by bugs.debian.org; 1 Sep 2026 01:38:31 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-115.2 required=4.0 tests=ALL_TRUSTED,BAYES_00, DKIMWL_WL_HIGH,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF, FROMDEVELOPER,HAS_BUG_NUMBER,PGPSIGNATURE,SPF_HELO_NONE,SPF_PASS, USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 10; hammy, 150; neutral, 82; spammy, 0. spammytokens: hammytokens:0.000-+--Hx-spam-relays-external:sk:stravin, 0.000-+--H*RT:sk:stravin, 0.000-+--Hx-spam-relays-external:311, 0.000-+--H*RT:311, 0.000-+--H*RT:108 Return-path: <soren@debian.org> Received: from stravinsky.debian.org ([2001:41b8:202:deb::311:108]:45536) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <soren@debian.org>) id 1x1DSJ-0097Sp-2C for 1146129-done@bugs.debian.org; Tue, 01 Sep 2026 01:38:31 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=debian.org; s=smtpauto.stravinsky; h=X-Debian-User:Content-Type:MIME-Version:References: In-Reply-To:Message-ID:Date:Subject:To:From:Reply-To:Cc: Content-Transfer-Encoding:Content-ID:Content-Description; bh=9XtPJaJES+jW7asyTGOUii/hI0PrsrDWwCftGLj8dz4=; b=LnZC6pLfJdssaWDScExzJYxIM5 TpCjDgG8Lcjj2QexcISyRjkPgkg7bQl3qX/pPjhm0dabSXDx4H72qbjGuOHwRRWhKRLmSWvKZckjy 2Hx04NkNzb90d+2VUk3vSHKhelGpzU/ehD+cDo5mZP1WAO22R5rpuYFJNkMsu0DybZW5wonFX6G3s ZyGUtDDWL62jtr/eHUnW0uCSyHbEpXgM2A2jCYgGz9rsXRyCFD3lN7N6HCy91SXROxdWYliiYnFpl OVUwBvdUIi94UoS6RTp6WqlDhmIjCXg+N+SX9WLdFU2ZMg9GPuwKyLaBDRhDh947Kw2DCxgsVJl2E ugiaSKnw==; Received: from authenticated-user by stravinsky.debian.org with esmtpsa (TLS1.3:ECDHE_X25519__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <soren@debian.org>) id 1x1DSF-001x46-0N; Tue, 01 Sep 2026 01:38:28 +0000 From: Soren Stoutner <soren@debian.org> To: =?UTF-8?B?SsO2cmctVm9sa2Vy?= Peetz <jvpeetz@web.de>, Jakob Haufe <sur5r@debian.org>, 1146129-done@bugs.debian.org Subject: Re: Bug#1146129: redmine: Why the new dependency on node-turndown? Date: Mon, 31 Aug 2026 18:38:20 -0700 Message-ID: <0R0w5yqkR96-XKkJ6k7mag@debian.org> Organization: Debian Face: iVBORw0KGgoAAAANSUhEUgAAADAAAAAwBAMAAAClLOS0AAAAFVBMVEWIg4F7bGiws7ReTkyy kYoXFRrd6/4yMA0PAAACaklEQVQ4y22TwXabMBBFJaPuNZGSNZZp1uhM6BpkJeu4VFk3bsL/f0Lf CHC6qHyOgbl68zTDoIwaVfh3tUopTUGpbFToDiFnY9IY2oMAZYMiS4R9SfbSXepSS5EcFAa/muIU aRj8mkoUqrEraFzhYegBmqig0LyCIyM8DAwPlpBqmJVYaD2UeWZ3abVjsqKIojg+hY4omsyIcNSi qIBM6jJWOveS6kvBeVvHJ+VYzJUW88RmA12UiBx3HEcUMRuzIZI6tBQovTrPclNB3AuUXoXvs0XY C3B2baJpW4Dn2ZpVMInCirkxoyhM1qpK5nFrO65QvCrCqql2DyPgvm94iMQz5/PmISuEotxQGMD5 M5G1N9CjXJ5HQH96BZG2xx6AzejYZccxT4Re3Zr4bPKkCcGcz5Or3dVEABkAUY/znnVcQVVkrXVU vomoEJFe7x4nQuaZmZELL6qnXZGIB5YV/Q2IogtSmyNybEcBX2+QCLOAQYm+gmoORUrYzV7dc6R2 T1WPm45oVEQqsjtoIovHyTmcyxMhVVxTqapomZyLlAmTKC9AmjgamXXGZo+epNrXO3wGGiPRHbKL FnMy2RRgRb1gzFXXGjhICp8wqaTtdtyQH6nWTfkatJvJJoUCbOjSC7wR9/naEVognxrOFdLh7Ugx QpA/0QT4pRV0+u2dqsXD5y9EBDjVAJS3ZZLxmZblgmsU8x7mBeCKg48Py7WU2IiH1epbEbC8K9Ms y0cpcySVUcdQVrBY+rEsv+XpYgFKXT8B3v2yATxv8fKK2EfC358tsIMLYqfD401xA0j1EY4P/wWf IbhlOWyBv4OQsywBM8MAAAAAAElFTkSuQmCC In-Reply-To: <20260830170933.544fc0e3@tizio.sur5r.net> References: <1556c993-387f-42ec-8cc1-7edce85c9b91@web.de> <20260830170933.544fc0e3@tizio.sur5r.net> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="nextParti9KGVfn5QgC8cSWDdkY4qw"; micalg="pgp-sha512"; protocol="application/pgp-signature" X-Debian-User: soren --nextParti9KGVfn5QgC8cSWDdkY4qw Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset="utf-8"; protected-headers="v1" From: Soren Stoutner <soren@debian.org> Subject: Re: Bug#1146129: redmine: Why the new dependency on node-turndown? Date: Mon, 31 Aug 2026 18:38:20 -0700 Message-ID: <0R0w5yqkR96-XKkJ6k7mag@debian.org> Organization: Debian In-Reply-To: <20260830170933.544fc0e3@tizio.sur5r.net> MIME-Version: 1.0 On Sunday, August 30, 2026 8:09:33=E2=80=AFAM Mountain Standard Time Jakob = Haufe=20 wrote: > On Sun, 30 Aug 2026 10:33:11 +0200 >=20 > J=C3=B6rg-Volker Peetz <jvpeetz@web.de> wrote: > A quick check of the git history leads to > https://www.redmine.org/issues/42515. >=20 > Redmine ships it as an embedded code copy which is not how Debian works. That is correct. This is where upstream places the file, which is minified= =20 without an associated source file (meaning it doesn=E2=80=99t qualify as th= e original=20 source code in Debian=E2=80=99s eyes). https://github.com/redmine/redmine/blob/master/vendor/javascript/turndown.js That file is not shipped in the Debian package. Instead, Redmine depends o= n=20 the node-turndown package and a link is added to use the file from there. =2D-=20 Soren Stoutner soren@debian.org --nextParti9KGVfn5QgC8cSWDdkY4qw Content-Type: application/pgp-signature; name="signature.asc" Content-Description: This is a digitally signed message part. Content-Transfer-Encoding: 7Bit -----BEGIN PGP SIGNATURE----- iQIzBAABCgAdFiEEJKVN2yNUZnlcqOI+wufLJ66wtgMFAmqWLIwACgkQwufLJ66w tgMEnA//SbtmSwOw4qesRo89J7IHc51VD5UoeEIcTA9SFs6O/K3MHXLm5mND9IYk SeVxQN4oMPUgjQtZ+qUy5aoTo3ztGiuYmZMZU50718sqOAh26EEl9aWffFUxQxo2 9BrZpJL+X4mrG357TIG9FCfHNSN1DU+vLi/w3YMPcJksm0sKCXOKhr/ny56jI/Z7 mc/IC3IF+avcWAMNap5x3P43PCHNvaRnKyLTnM5aeURJLFEbIbXrBRVrNmxkhAmK /z2M5PiQYzBRmlRv3XvEhwMbcluYhgmcJjNA89AqfUV3DwWI/PINwxE0tArs5mm9 SwN05r5xJKo1G/O+x1OApiJcR8BcOjtksfQ1qhRM9EEQaQMsclgUCamOTR82r7u6 KPE5OGJZB9osqoGeI8FT5aIT8vrgFu5RZS0xOPUd9EGB8NZti8p7AhQ91Rr2pdEH GB5P7kG1XdbS4QIb1R1ygzGPR6QFSinc8JXp136MajwJR4cT3IiANzvMrzopA4Lo omNLGuhH8AK066Vym75+L/am+CVglvjr9adVZuLf03Cqg61z5Ag5cJZugqN5BlpM E7kpBQJL24Oj3gSkrQ6OORMgGbbYuTJuuynVEs1/BeNoLeixpadd9KgnVGvyPPMk oYZDu+o048/PU0dp/wrxhK7CQTYvNQ2hVuG+QP30MEYdlguAiBE= =51Iq -----END PGP SIGNATURE----- --nextParti9KGVfn5QgC8cSWDdkY4qw-- ]