From grillz at andys.md  Mon Jul  1 12:01:45 2024
From: grillz at andys.md (Steve Morgan Foundation)
Date: 1 Jul 2024 12:01:45 +0100
Subject: [pkg-go] Gewinn!
Message-ID: <20240701120145.6B0FCC9D76328E6E@andys.md>

Hallo,
 
Sie wurden per Zufallsprinzip durch ein Online-Gl?cksrad ausgew?hlt, da Sie ein aktiver E-Mail-Benutzer sind, und erhalten eine Spende in H?he von 1.200.000?$. Dies ist eine Spende der Steve Morgan Foundation, die ?ber 300?Millionen?? gespendet und mehr als 650
Wohlt?tigkeitsorganisationen und Einzelpersonen unterst?tzt hat. F?r weitere Informationen antworten Sie bitte sofort, um Ihre E-Mail zu best?tigen.

Danke.
Steve Morgan Foundation.


From ftpmaster at ftp-master.debian.org  Mon Jul  1 20:10:03 2024
From: ftpmaster at ftp-master.debian.org (Debian FTP Masters)
Date: Mon, 01 Jul 2024 19:10:03 +0000
Subject: [pkg-go] Processing of gitaly_16.11.3+ds15-1_source.changes
Message-ID: <E1sOMPb-002TXK-Lr@usper.debian.org>

gitaly_16.11.3+ds15-1_source.changes uploaded successfully to localhost
along with the files:
  gitaly_16.11.3+ds15-1.dsc
  gitaly_16.11.3+ds15.orig-vendor.tar.bz2
  gitaly_16.11.3+ds15.orig.tar.bz2
  gitaly_16.11.3+ds15-1.debian.tar.xz
  gitaly_16.11.3+ds15-1_source.buildinfo

Greetings,

	Your Debian queue daemon (running on host usper.debian.org)


From ftpmaster at ftp-master.debian.org  Mon Jul  1 20:34:15 2024
From: ftpmaster at ftp-master.debian.org (Debian FTP Masters)
Date: Mon, 01 Jul 2024 19:34:15 +0000
Subject: [pkg-go] gitaly_16.11.3+ds15-1_source.changes ACCEPTED into
 experimental
Message-ID: <E1sOMn1-005V8w-46@fasolo.debian.org>

Thank you for your contribution to Debian.



Accepted:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 01 Jul 2024 21:03:54 +0530
Source: gitaly
Architecture: source
Version: 16.11.3+ds15-1
Distribution: experimental
Urgency: medium
Maintainer: Debian Go Packaging Team <pkg-go-maintainers at lists.alioth.debian.org>
Changed-By: Pirate Praveen <praveen at debian.org>
Changes:
 gitaly (16.11.3+ds15-1) experimental; urgency=medium
 .
   * Update watch file pattern for gitlab.com
   * New upstream version 16.11.3+ds1
   * Refresh patches
   * Remove tools/govulncheck (build failing)
   * New upstream version 16.11.3+ds2 (update gocloud.dev in vendor to 0.37)
   * New upstream version 16.11.3+ds3 (update cloud.google.com/go to 0.112.2)
   * New upstream version 16.11.3+ds4 (update github.com/googleapis/gax-go to
     2.212.2)
   * New upstream version 16.11.3+ds5 (update aws-sdk-v2 to 2024-05-24)
   * New upstream version 16.11.3+ds6 (update google.golang.org/grpc to 1.62.2)
   * New upstream version 16.11.3+ds7 (update google.golang.org/api to 0.169.0)
   * New upstream version 16.11.3+ds8
   * New upstream version 16.11.3+ds9 (add github.com/google/s2a-go)
   * New upstream version 16.11.3+ds10 (drop testdata from s2a-go)
   * New upstream version 16.11.3+ds10 (reimport with upstream orig.tar)
   * New upstream version 16.11.3+ds11 (add golang.com/x/oauth2)
   * New upstream version 16.11.3+ds12 (update azblob to 1.3.1)
   * New upstream version 16.11.3+ds13 (update azcore to 1.10 azidentity 1.5.1)
   * New upstream version 16.11.3+ds14 (update azure sdk/internal to 1.5.2)
   * New upstream version 16.11.3+ds15 (update MSAL Go to 1.2.2)
Checksums-Sha1:
 01935e3ba1f80db15da64cfc4e1e39c2c5f16740 4872 gitaly_16.11.3+ds15-1.dsc
 e3a0ed56542568b2ca5ec2d17fb99c6bbcc00a0a 125606149 gitaly_16.11.3+ds15.orig-vendor.tar.bz2
 6e9646ac89a2d4861feda0da9a121e26cc6601f5 2612549 gitaly_16.11.3+ds15.orig.tar.bz2
 a1b05a567a215d7a68c3ff1af91675a2eb17e276 23156 gitaly_16.11.3+ds15-1.debian.tar.xz
 b2c00b01acaeda5fd10954d7fbe79e921030c4bc 22029 gitaly_16.11.3+ds15-1_source.buildinfo
Checksums-Sha256:
 dfa279b9aa908486efc3e8e2f063a54944b85dd7e9607173a404d8cee5bd4fcc 4872 gitaly_16.11.3+ds15-1.dsc
 84a3e32632eb90bd8a6faf665f20c6776bbeff56e486dc2f9d7a31e539e29f86 125606149 gitaly_16.11.3+ds15.orig-vendor.tar.bz2
 6a9946c92121847cc33e28ead403b206cc928429beb0be2d2c9c0a6a758bf022 2612549 gitaly_16.11.3+ds15.orig.tar.bz2
 8483569146328607af321dedc359858bb14de34098e6ee2cef294ac1f21ca368 23156 gitaly_16.11.3+ds15-1.debian.tar.xz
 22e1f5bef56776a6c57eb37e5b61a32475d3b8472fd03b2658ed4e78bcb57fcc 22029 gitaly_16.11.3+ds15-1_source.buildinfo
Files:
 334ef6e651b52b9d8f47514ba5bbada5 4872 net optional gitaly_16.11.3+ds15-1.dsc
 0b04d4bbd9bc6acf070341722c680cba 125606149 net optional gitaly_16.11.3+ds15.orig-vendor.tar.bz2
 849798c8287397d7ccbaafe4e7c2c106 2612549 net optional gitaly_16.11.3+ds15.orig.tar.bz2
 03f83af0156e916a65d8b33728c9e42c 23156 net optional gitaly_16.11.3+ds15-1.debian.tar.xz
 95ff2d3c05afb9810ccf2960a210740f 22029 net optional gitaly_16.11.3+ds15-1_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=1+gD
-----END PGP SIGNATURE-----

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 228 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-go-maintainers/attachments/20240701/923be743/attachment.sig>

From siretart at tauware.de  Thu Jul  4 22:09:56 2024
From: siretart at tauware.de (Reinhard Tartler)
Date: Thu, 04 Jul 2024 17:09:56 -0400
Subject: [pkg-go] Bug#1066139: podman: Cannot create a network with
 dns_enabled
In-Reply-To: <ZfDieHiSvz76iMkZ@beast.mila.ovh> (message from Antoine
 Sirinelli on Wed, 13 Mar 2024 00:17:12 +0100)
References: <ZfDieHiSvz76iMkZ@beast.mila.ovh>
Message-ID: <87sewoeue3.fsf@tauware.de>

Antoine Sirinelli <antoine at monte-stello.com> writes:

> When I create a new custom network, the dns is not enabled:
>
> $ podman network create test
> test
> $ podman network inspect test
> [
>      {
>           "name": "test",
>           "id": "9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08",
>           "driver": "bridge",
>           "network_interface": "cni-podman1",
>           "created": "2024-03-13T00:11:16.769046605+01:00",
>           "subnets": [
>                {
>                     "subnet": "10.89.0.0/24",
>                     "gateway": "10.89.0.1"
>                }
>           ],
>           "ipv6_enabled": false,
>           "internal": false,
>           "dns_enabled": false,
>           "ipam_options": {
>                "driver": "host-local"
>           }
>      }
> ]
>
> The outcome should have "dns_enabled" to true.
>
> [...]
>
> podman system reset fixed it.
>
> Thank you for your help,
>

No, thank you for reporting back!

I've added a paragraph to README.Debian pointing to this bug.

Best,
-rt


From owner at bugs.debian.org  Thu Jul  4 22:21:09 2024
From: owner at bugs.debian.org (Debian Bug Tracking System)
Date: Thu, 04 Jul 2024 21:21:09 +0000
Subject: [pkg-go] Bug#1062598: marked as done (libpod: Add support for
 LoongArch)
References: <87plrseu34.fsf@tauware.de>
 <170684880869.121772.17505434993512772237.reportbug@43b08b652f0a>
Message-ID: <handler.1062598.D1062598.17201277974059990.ackdone@bugs.debian.org>

Your message dated Thu, 04 Jul 2024 17:16:31 -0400
with message-id <87plrseu34.fsf at tauware.de>
and subject line Re: Bug#1062598: libpod: Add support for LoongArch
has caused the Debian Bug report #1062598,
regarding libpod: Add support for LoongArch
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner at bugs.debian.org
immediately.)


-- 
1062598: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1062598
Debian Bug Tracking System
Contact owner at bugs.debian.org with problems
-------------- next part --------------
An embedded message was scrubbed...
From: JiaLing Zhang <zhangjialing at loongson.cn>
Subject: libpod: Add support for LoongArch
Date: Fri, 02 Feb 2024 04:40:08 +0000
Size: 2987
URL: <http://alioth-lists.debian.net/pipermail/pkg-go-maintainers/attachments/20240704/3a85b47b/attachment.eml>
-------------- next part --------------
An embedded message was scrubbed...
From: Reinhard Tartler <siretart at tauware.de>
Subject: Re: Bug#1062598: libpod: Add support for LoongArch
Date: Thu, 04 Jul 2024 17:16:31 -0400
Size: 2268
URL: <http://alioth-lists.debian.net/pipermail/pkg-go-maintainers/attachments/20240704/3a85b47b/attachment-0001.eml>

From owner at bugs.debian.org  Thu Jul  4 22:21:14 2024
From: owner at bugs.debian.org (Debian Bug Tracking System)
Date: Thu, 04 Jul 2024 21:21:14 +0000
Subject: [pkg-go] Processed: Bug#1066139 marked as pending in libpod
References: <6687115ea1d6c_bcb70fdc1928f@godard.mail>
 <ZfDieHiSvz76iMkZ@beast.mila.ovh>
Message-ID: <handler.s.U1066139.17201278404060140.transcript@bugs.debian.org>

Processing control commands:

> tag -1 pending
Bug #1066139 [podman] podman: Cannot create a network with dns_enabled
Added tag(s) pending.

-- 
1066139: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1066139
Debian Bug Tracking System
Contact owner at bugs.debian.org with problems


From owner at bugs.debian.org  Thu Jul  4 22:21:16 2024
From: owner at bugs.debian.org (Debian Bug Tracking System)
Date: Thu, 04 Jul 2024 21:21:16 +0000
Subject: [pkg-go] Processed: Bug#1073740 marked as pending in libpod
References: <6687115e8810e_bcb70fa0191b9@godard.mail>
 <171870379755.3560576.17158747564648314990@subdivi.de>
Message-ID: <handler.s.U1073740.17201278434060155.transcript@bugs.debian.org>

Processing control commands:

> tag -1 pending
Bug #1073740 [podman] podman: move aliased files from / to /usr (DEP17)
Added tag(s) pending.

-- 
1073740: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1073740
Debian Bug Tracking System
Contact owner at bugs.debian.org with problems


From ftpmaster at ftp-master.debian.org  Thu Jul  4 22:27:29 2024
From: ftpmaster at ftp-master.debian.org (Debian FTP Masters)
Date: Thu, 04 Jul 2024 21:27:29 +0000
Subject: [pkg-go] Processing of libpod_4.9.5+ds1-1_source.changes
Message-ID: <E1sPTzF-005zDc-OE@usper.debian.org>

libpod_4.9.5+ds1-1_source.changes uploaded successfully to localhost
along with the files:
  libpod_4.9.5+ds1-1.dsc
  libpod_4.9.5+ds1.orig.tar.xz
  libpod_4.9.5+ds1-1.debian.tar.xz

Greetings,

	Your Debian queue daemon (running on host usper.debian.org)


From ftpmaster at ftp-master.debian.org  Thu Jul  4 22:34:42 2024
From: ftpmaster at ftp-master.debian.org (Debian FTP Masters)
Date: Thu, 04 Jul 2024 21:34:42 +0000
Subject: [pkg-go] libpod_4.9.5+ds1-1_source.changes ACCEPTED into unstable
Message-ID: <E1sPU6E-003rqK-DG@fasolo.debian.org>

Thank you for your contribution to Debian.



Accepted:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Thu, 04 Jul 2024 17:11:36 -0400
Source: libpod
Architecture: source
Version: 4.9.5+ds1-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Go Packaging Team <pkg-go-maintainers at lists.alioth.debian.org>
Changed-By: Reinhard Tartler <siretart at tauware.de>
Closes: 1066139 1073740
Changes:
 libpod (4.9.5+ds1-1) unstable; urgency=medium
 .
   * New upstream version
     - compiled against newer containers/image to address CVE-2024-3727,
       and also enables image signing and verification with sigstore
   * Move systemd files from /lib to /usr/lib, closes: #1073740
   * Add tipp to reset configuration to help with networking issues,
     Closes: #1066139
Checksums-Sha1:
 afd90073e94980c13f1441eba0f7f65635e68c30 5506 libpod_4.9.5+ds1-1.dsc
 177d6abe9213e22e43c24ce2e9a3ffacdf5a1323 2817500 libpod_4.9.5+ds1.orig.tar.xz
 78cab53072e15b530a023d0ac4d0adacf746b2c6 22416 libpod_4.9.5+ds1-1.debian.tar.xz
Checksums-Sha256:
 2e2159cf3f4f710a39708ad6b6d1164a3165dc52689c8e4d8e74f3ca6a23623c 5506 libpod_4.9.5+ds1-1.dsc
 e2051b5bfbe437a39c50917aaf444c5740b00303561eae26a92fab402772ba56 2817500 libpod_4.9.5+ds1.orig.tar.xz
 b263c6ec99945ef86b149a404c0fa6a455c40dda4732044e2cb2c56d42956195 22416 libpod_4.9.5+ds1-1.debian.tar.xz
Files:
 048268feb63900525285820d351d0489 5506 admin optional libpod_4.9.5+ds1-1.dsc
 45d20556f3fa47fa998a4bcb148d26e7 2817500 admin optional libpod_4.9.5+ds1.orig.tar.xz
 1063dec1eceea6e0ecaca2ff85949f10 22416 admin optional libpod_4.9.5+ds1-1.debian.tar.xz

-----BEGIN PGP SIGNATURE-----

iQJIBAEBCgAyFiEEMN59F2OrlFLH4IJQSadpd5QoJssFAmaHEZsUHHNpcmV0YXJ0
QHRhdXdhcmUuZGUACgkQSadpd5QoJsucfhAAknruVmwBN2dA1uSE8OVd4i6Q56lM
vDu/4TnkyNh6P3v8iBVLZRdUbC2Zm13LSh7KcY6uAAdjM/D0WiNlAHqJM0PdOQet
T2VRGrESHofl7mH5tDmU6xadAvzjMrd9btiV7PFDXOUdiFOPNt8qXxG9lrD/iMbw
ydn36xdf9TKJR78IiWhIqhKViTeGL2JixzeVQLuBADUZYkHO1vG9wXsFBs1CS1jV
isd5kSKBdQNBkIDcuvXKxO74p3hlvQ70WVUedoYBX+hbWEKB3299I7I9VhG5u/rL
ZVbNBoEbshfoQMJpRzkED95JEW6kGeJAbjERMVfj5BO+4xP6NbDRvjZYECzMSLN3
Sjow2YBPnQm7bQhRM9fDCAFonjMWPKNPGB5W/K2fF7Fl/MvIDpHbFDLdaOvBGKcL
Ui2fE8RWbKLCTFrWCO4iPd0BZv1RiUqlgwVQ43AS7dpM40IhDQPDnmD/yUH8xnOi
DZZUjdS4YoHbpRLALelgqmBKFBcFu9OcIIeKIl3NKj3Jx2fAul5PU8WSgPz5pmX8
E1QewEBa18TWo57JpATy2Bvu270IHZ+lCnadLmHiMjL3uWbVHLA3CxCo3Vld8hvP
MmLTLomiduVY+rJn+xcWlj4sXfVLqiLwDR0QgZki9RdLdKpLWHIvO2DewwHO/jIl
WsyxyLhWPGnz5f8=
=EtVq
-----END PGP SIGNATURE-----

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 228 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-go-maintainers/attachments/20240704/cc881de4/attachment.sig>

From owner at bugs.debian.org  Thu Jul  4 22:36:05 2024
From: owner at bugs.debian.org (Debian Bug Tracking System)
Date: Thu, 04 Jul 2024 21:36:05 +0000
Subject: [pkg-go] Bug#1066139: marked as done (podman: Cannot create a
 network with dns_enabled)
References: <E1sPU6E-003rqU-HU@fasolo.debian.org>
 <ZfDieHiSvz76iMkZ@beast.mila.ovh>
Message-ID: <handler.1066139.D1066139.17201288864072321.ackdone@bugs.debian.org>

Your message dated Thu, 04 Jul 2024 21:34:42 +0000
with message-id <E1sPU6E-003rqU-HU at fasolo.debian.org>
and subject line Bug#1066139: fixed in libpod 4.9.5+ds1-1
has caused the Debian Bug report #1066139,
regarding podman: Cannot create a network with dns_enabled
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner at bugs.debian.org
immediately.)


-- 
1066139: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1066139
Debian Bug Tracking System
Contact owner at bugs.debian.org with problems
-------------- next part --------------
An embedded message was scrubbed...
From: Antoine Sirinelli <antoine at monte-stello.com>
Subject: podman: Cannot create a network with dns_enabled
Date: Wed, 13 Mar 2024 00:17:12 +0100
Size: 4835
URL: <http://alioth-lists.debian.net/pipermail/pkg-go-maintainers/attachments/20240704/cb4a38c3/attachment-0002.eml>
-------------- next part --------------
An embedded message was scrubbed...
From: Debian FTP Masters <ftpmaster at ftp-master.debian.org>
Subject: Bug#1066139: fixed in libpod 4.9.5+ds1-1
Date: Thu, 04 Jul 2024 21:34:42 +0000
Size: 7097
URL: <http://alioth-lists.debian.net/pipermail/pkg-go-maintainers/attachments/20240704/cb4a38c3/attachment-0003.eml>

From owner at bugs.debian.org  Thu Jul  4 22:36:09 2024
From: owner at bugs.debian.org (Debian Bug Tracking System)
Date: Thu, 04 Jul 2024 21:36:09 +0000
Subject: [pkg-go] Bug#1073740: marked as done (podman: move aliased files
 from / to /usr (DEP17))
References: <E1sPU6E-003rqZ-Jg@fasolo.debian.org>
 <171870379755.3560576.17158747564648314990@subdivi.de>
Message-ID: <handler.1073740.D1073740.17201288844072306.ackdone@bugs.debian.org>

Your message dated Thu, 04 Jul 2024 21:34:42 +0000
with message-id <E1sPU6E-003rqZ-Jg at fasolo.debian.org>
and subject line Bug#1073740: fixed in libpod 4.9.5+ds1-1
has caused the Debian Bug report #1073740,
regarding podman: move aliased files from / to /usr (DEP17)
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner at bugs.debian.org
immediately.)


-- 
1073740: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1073740
Debian Bug Tracking System
Contact owner at bugs.debian.org with problems
-------------- next part --------------
An embedded message was scrubbed...
From: Helmut Grohne <helmut at subdivi.de>
Subject: podman: move aliased files from / to /usr (DEP17)
Date: Tue, 18 Jun 2024 11:39:13 +0200
Size: 5130
URL: <http://alioth-lists.debian.net/pipermail/pkg-go-maintainers/attachments/20240704/09a0fed7/attachment.eml>
-------------- next part --------------
An embedded message was scrubbed...
From: Debian FTP Masters <ftpmaster at ftp-master.debian.org>
Subject: Bug#1073740: fixed in libpod 4.9.5+ds1-1
Date: Thu, 04 Jul 2024 21:34:42 +0000
Size: 7056
URL: <http://alioth-lists.debian.net/pipermail/pkg-go-maintainers/attachments/20240704/09a0fed7/attachment-0001.eml>

From matthias at vorlons.info  Fri Jul  5 21:30:04 2024
From: matthias at vorlons.info (Matthias Geerdsen)
Date: Fri, 5 Jul 2024 22:30:04 +0200
Subject: [pkg-go] Bug#1075823: golang-github-hashicorp-go-getter:
 CVE-2024-6257
Message-ID: <454323e9-fbe1-4ef3-a462-62b53999ee8b@vorlons.info>

Package: golang-github-hashicorp-go-getter
X-Debbugs-CC: team at security.debian.org
Severity: important
Tags: security

Hi,

The following vulnerability was published for 
golang-github-hashicorp-go-getter.

CVE-2024-6257[0]:
| HashiCorp?s go-getter library can be coerced into executing Git
| update on an existing maliciously modified Git Configuration,
| potentially leading to arbitrary code execution.


If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2024-6257
     https://www.cve.org/CVERecord?id=CVE-2024-6257

Please adjust the affected versions in the BTS as needed.


From owner at bugs.debian.org  Fri Jul  5 21:42:03 2024
From: owner at bugs.debian.org (Debian Bug Tracking System)
Date: Fri, 05 Jul 2024 20:42:03 +0000
Subject: [pkg-go] Processed: tagging 1075823
References: <1720211935-157-bts-carnil@debian.org>
Message-ID: <handler.s.C.1720211941509667.transcript@bugs.debian.org>

Processing commands for control at bugs.debian.org:

> tags 1075823 + upstream
Bug #1075823 [golang-github-hashicorp-go-getter] golang-github-hashicorp-go-getter: CVE-2024-6257
Added tag(s) upstream.
> thanks
Stopping processing here.

Please contact me if you need assistance.
-- 
1075823: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1075823
Debian Bug Tracking System
Contact owner at bugs.debian.org with problems


From ftpmaster at ftp-master.debian.org  Sun Jul  7 13:42:28 2024
From: ftpmaster at ftp-master.debian.org (Debian FTP Masters)
Date: Sun, 07 Jul 2024 12:42:28 +0000
Subject: [pkg-go] Processing of
 golang-github-vbatts-tar-split_0.11.5-1_source.changes
Message-ID: <E1sQRDo-008xLC-Sd@usper.debian.org>

golang-github-vbatts-tar-split_0.11.5-1_source.changes uploaded successfully to localhost
along with the files:
  golang-github-vbatts-tar-split_0.11.5-1.dsc
  golang-github-vbatts-tar-split_0.11.5.orig.tar.gz
  golang-github-vbatts-tar-split_0.11.5-1.debian.tar.xz

Greetings,

	Your Debian queue daemon (running on host usper.debian.org)


From ftpmaster at ftp-master.debian.org  Sun Jul  7 13:50:18 2024
From: ftpmaster at ftp-master.debian.org (Debian FTP Masters)
Date: Sun, 07 Jul 2024 12:50:18 +0000
Subject: [pkg-go] golang-github-vbatts-tar-split_0.11.5-1_source.changes
 ACCEPTED into unstable
Message-ID: <E1sQRLO-00H3nq-VD@fasolo.debian.org>

Thank you for your contribution to Debian.



Accepted:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sun, 07 Jul 2024 14:38:11 +0200
Source: golang-github-vbatts-tar-split
Architecture: source
Version: 0.11.5-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Go Packaging Team <pkg-go-maintainers at lists.alioth.debian.org>
Changed-By: Felix Geyer <fgeyer at debian.org>
Changes:
 golang-github-vbatts-tar-split (0.11.5-1) unstable; urgency=medium
 .
   * Team upload.
 .
   [ Felix Geyer ]
   * New upstream release.
   * Stop repacking the upstream tarball since dependencies are no longer
     vendored.
Checksums-Sha1:
 c40d584aca6ef9fe72da608cf1830b0bb3c1060f 2457 golang-github-vbatts-tar-split_0.11.5-1.dsc
 4f9fcf7e1085365c705ed4c47a4186143981311c 86209 golang-github-vbatts-tar-split_0.11.5.orig.tar.gz
 d707dc428067d0af2301c2ebee8a4a40b910dbd3 4204 golang-github-vbatts-tar-split_0.11.5-1.debian.tar.xz
Checksums-Sha256:
 e2739baa9dc8486e28a3ace14bc2544d2148b9294fe463eaa92a15198a468389 2457 golang-github-vbatts-tar-split_0.11.5-1.dsc
 112bd9ada09080e4e69451d1ad0238dcecc9fb61114211b302d91dcb2e337f13 86209 golang-github-vbatts-tar-split_0.11.5.orig.tar.gz
 48c160e160b54a39f1337ed2eb254d28e58768155258611a73283dcf6ea6775b 4204 golang-github-vbatts-tar-split_0.11.5-1.debian.tar.xz
Files:
 7af78a831c0b5cd4ad876a5635e67c2b 2457 devel optional golang-github-vbatts-tar-split_0.11.5-1.dsc
 58e302c3c1319ad07cc0df9e2f667194 86209 devel optional golang-github-vbatts-tar-split_0.11.5.orig.tar.gz
 a0e6fe014384338fd9cdf77d8aeec591 4204 devel optional golang-github-vbatts-tar-split_0.11.5-1.debian.tar.xz

-----BEGIN PGP SIGNATURE-----
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=niHj
-----END PGP SIGNATURE-----

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 228 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-go-maintainers/attachments/20240707/f96e2247/attachment.sig>

From ftpmaster at ftp-master.debian.org  Sun Jul  7 14:13:16 2024
From: ftpmaster at ftp-master.debian.org (Debian FTP Masters)
Date: Sun, 07 Jul 2024 13:13:16 +0000
Subject: [pkg-go] Processing of easygen_5.3.0-1_source.changes
Message-ID: <E1sQRhc-008z20-GW@usper.debian.org>

easygen_5.3.0-1_source.changes uploaded successfully to localhost
along with the files:
  easygen_5.3.0-1.dsc
  easygen_5.3.0.orig.tar.gz
  easygen_5.3.0-1.debian.tar.xz
  easygen_5.3.0-1_amd64.buildinfo

Greetings,

	Your Debian queue daemon (running on host usper.debian.org)


From owner at bugs.debian.org  Sun Jul  7 14:15:04 2024
From: owner at bugs.debian.org (Debian Bug Tracking System)
Date: Sun, 07 Jul 2024 13:15:04 +0000
Subject: [pkg-go] Processed: Bug#960546 marked as pending in easygen
References: <668a94198d503_16cffafb4438e5@godard.mail>
 <20200513191049.GA11861@alf.mars>
Message-ID: <handler.s.U960546.17203579151653797.transcript@bugs.debian.org>

Processing control commands:

> tag -1 pending
Bug #960546 [src:easygen] mark easygen Multi-Arch: foreign
Added tag(s) pending.

-- 
960546: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=960546
Debian Bug Tracking System
Contact owner at bugs.debian.org with problems


From ftpmaster at ftp-master.debian.org  Sun Jul  7 14:19:14 2024
From: ftpmaster at ftp-master.debian.org (Debian FTP Masters)
Date: Sun, 07 Jul 2024 13:19:14 +0000
Subject: [pkg-go] easygen_5.3.0-1_source.changes ACCEPTED into unstable
Message-ID: <E1sQRnO-00H9AU-Ev@fasolo.debian.org>

Thank you for your contribution to Debian.



Accepted:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Sun, 07 Jul 2024 18:36:55 +0530
Source: easygen
Architecture: source
Version: 5.3.0-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Go Packaging Team <pkg-go-maintainers at lists.alioth.debian.org>
Changed-By: Nilesh Patra <nilesh at iki.fi>
Closes: 960546
Changes:
 easygen (5.3.0-1) unstable; urgency=medium
 .
   * Team Upload.
   [ Debian Janitor ]
   * [8b62da3] Apply multi-arch hints.
     + golang-github-go-easygen-easygen-dev: Add Multi-Arch: foreign.
   * [a022818] Update lintian override info format in
     d/easygen.lintian-overrides on line 2.
   * [c37795c] Update renamed lintian tag names in lintian overrides.
 .
   [ Nilesh Patra ]
   * [fa8a9e4] New upstream version 5.3.0
   * [cbf7be2] Mark easygen M-A foreign
     (Thanks to Helmut Grohne) (Closes: #960546)
   * [a1a7260] Bump Standards-Version to 4.7.0 (no changes needed)
Checksums-Sha1:
 682f38e81ebd838d796ceab4ed013a9160a0c145 1613 easygen_5.3.0-1.dsc
 0f503a8892414f0b59e9e7ab122abf86c1cf4ed7 81363 easygen_5.3.0.orig.tar.gz
 7eeedeccb91f4153d44b10b21562c22f8805fc04 3900 easygen_5.3.0-1.debian.tar.xz
 968ea0437a47abf8ba76cc83e72d3a1d0d3b147a 6814 easygen_5.3.0-1_amd64.buildinfo
Checksums-Sha256:
 c0066570fb09bc6da4bba77cbb4e97c5ab2b292e52debf594a8a4488ae026f20 1613 easygen_5.3.0-1.dsc
 f361049fd9f79932f709dd979d7532e6718a97dc58725940e79b15ba0b2ddd91 81363 easygen_5.3.0.orig.tar.gz
 03f72eb42c10a1fb2c3672566540c5cf2a48e723d8c4ad0893a6ad2e65249a97 3900 easygen_5.3.0-1.debian.tar.xz
 0e37a667904e0159b476ecd21efab68938f553ba1d76bac8b4b5409a0c72588c 6814 easygen_5.3.0-1_amd64.buildinfo
Files:
 4a1f4417853024d01790b75c783a6b26 1613 devel optional easygen_5.3.0-1.dsc
 fb1c0adaaf1bcfa251aa4305715d673e 81363 devel optional easygen_5.3.0.orig.tar.gz
 add3abd84b117512982f8155137d588b 3900 devel optional easygen_5.3.0-1.debian.tar.xz
 5187ed3feb1ebd7ec49be51e96c61180 6814 devel optional easygen_5.3.0-1_amd64.buildinfo

-----BEGIN PGP SIGNATURE-----

iHUEARYIAB0WIQSglbZu4JAkvuai8HIqJ5BL1yQ+2gUCZoqT3gAKCRAqJ5BL1yQ+
2gIxAQCSEboDU2gR+KXw5LauzlJWe5pLlauO00ED9SlUhbWptQD/YqF5Pkx8KqBl
sTdgVfdzR+Ii6RtUgeWvsotIYGYnXwg=
=RDIU
-----END PGP SIGNATURE-----

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 228 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-go-maintainers/attachments/20240707/bea03f63/attachment.sig>

From owner at bugs.debian.org  Sun Jul  7 14:21:03 2024
From: owner at bugs.debian.org (Debian Bug Tracking System)
Date: Sun, 07 Jul 2024 13:21:03 +0000
Subject: [pkg-go] Bug#960546: marked as done (mark easygen Multi-Arch:
 foreign)
References: <E1sQRnO-00H9Ac-IY@fasolo.debian.org>
 <20200513191049.GA11861@alf.mars>
Message-ID: <handler.960546.D960546.17203583581657318.ackdone@bugs.debian.org>

Your message dated Sun, 07 Jul 2024 13:19:14 +0000
with message-id <E1sQRnO-00H9Ac-IY at fasolo.debian.org>
and subject line Bug#960546: fixed in easygen 5.3.0-1
has caused the Debian Bug report #960546,
regarding mark easygen Multi-Arch: foreign
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner at bugs.debian.org
immediately.)


-- 
960546: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=960546
Debian Bug Tracking System
Contact owner at bugs.debian.org with problems
-------------- next part --------------
An embedded message was scrubbed...
From: Helmut Grohne <helmut at subdivi.de>
Subject: mark easygen Multi-Arch: foreign
Date: Wed, 13 May 2020 21:10:49 +0200
Size: 3353
URL: <http://alioth-lists.debian.net/pipermail/pkg-go-maintainers/attachments/20240707/bdf097d4/attachment-0002.eml>
-------------- next part --------------
An embedded message was scrubbed...
From: Debian FTP Masters <ftpmaster at ftp-master.debian.org>
Subject: Bug#960546: fixed in easygen 5.3.0-1
Date: Sun, 07 Jul 2024 13:19:14 +0000
Size: 6807
URL: <http://alioth-lists.debian.net/pipermail/pkg-go-maintainers/attachments/20240707/bdf097d4/attachment-0003.eml>