[pkg-gnupg-maint] Bug#1022702: Bug#1022702: Bug#1022702: gnupg: Migrating packaging from 2.2.x to "stable" 2.3.x

[Jonathan McDowell]

On Mon, Jul 17, 2023 at 05:16:47PM +0200, Simon Josefsson wrote:
> Jonathan McDowell <noodles at earth.li> writes:
> > On Wed, Jul 12, 2023 at 09:18:27AM +0200, Simon Josefsson wrote:
> >> Christian Kastner <ckk at debian.org> writes:
> >> > On 2023-06-12 17:01, Sune Stolborg Vuorela wrote:
> >> >> Any chance you can give Andreas a go ahead to push a newer Gnupg2
> >> >> to at least
> >> >> experimental, or preferably unstable ?
> >> >
> >> > I, too, would appreciate a newer version. It turns out that in versions
> >> > prior to 2.3, the 'kdf-setup' option with cards does not work [1]. At
> >> > least, that was the case with both Yubikeys and Nitrokeys here on my end.
> >> 
> >> How about uploading ametzler's branch to experimental, as a start?  It
> >> is good time after the bookworm release.  I offer to help maintain GnuPG
> >> in Debian.  Perhaps uploading it to mentors would be a first step, any
> >> objections?
> >> 
> >> There are some new features in GnuPG 2.4.x that I rely on, having to
> >> build it locally is a pain.
> >
> > +1 for an upload of 2.4 to experimental; I'm quite interested in playing
> > with the support for TPM backed keys.
> 
> I cloned
...
> Any feedback on this libgpg-error update?

I think if we're debating over whether the upload should happen or not
then we shouldn't be adding new uploaders to the package yet.

> GnuPG 2.4.x requires libgpg-error 1.47, so uploading a new version of
> libgpg-error would be a first step.

Given this, and the fact we've just been going round in circles with no
feedback from the listed maintainers, I've taken Andreas' work on
libgpg-error and uploaded it to experimental.

I haven't had a chance to look at the gnupg changes yet, which sounds
like they're a bit bigger, but I see no reason they shouldn't also be
uploaded to experimental after review.

The longer term question is whether any of us are stepping up to help
out with full package maintenance, which I believe should be a
prerequisite of an upload to unstable if we don't hear from Eric or dkg.

J.

-- 
Minorities are the foundation of society.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-gnupg-maint/attachments/20230725/de1a8aeb/attachment-0001.sig>