[Pkg-bazaar-maint] Bug#976001: when merging upstream tags, check GPG signatures

Jelmer Vernooij jelmer at debian.org
Sat Nov 28 02:05:41 GMT 2020


Package: brz-debian
Version: 2.8.48
Severity: wishlist

When merging upstream tags that are signed, breezy-debian should check
the GPG signature against debian/upstream/signing-keys.asc


-- System Information:
Debian Release: bullseye/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (500, 'testing')
Architecture: amd64 (x86_64)

Kernel: Linux 5.9.0-3-amd64 (SMP w/2 CPU threads)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages brz-debian depends on:
ii  brz                3.1.0-7
ii  devscripts         2.20.4
ii  dpkg-dev           1.20.5
ii  fakeroot           1.25.3-1.1
ii  patchutils         0.4.2-1
ii  pristine-tar       1.49
ii  python3            3.9.0-3
ii  python3-apt        2.1.6
ii  python3-breezy     3.1.0-7
ii  python3-debian     0.1.38
ii  python3-debmutate  0.15
ii  python3-yaml       5.3.1-3
ii  quilt              0.66-2.1

Versions of packages brz-debian recommends:
ii  libalgorithm-merge-perl  0.08-3
ii  python3-distro-info      0.24
ii  python3-dulwich          0.20.8-1
ii  python3-launchpadlib     1.10.13-1

Versions of packages brz-debian suggests:
pn  debcargo       <none>
ii  lintian-brush  0.87
pn  python3-lzma   <none>

-- no debconf information



More information about the Pkg-bazaar-maint mailing list