Bug#1064146: Update snakeyaml to v2.2 or later

Mechtilde Stehmann mechtilde at debian.org
Tue Apr 15 19:51:06 BST 2025


Hello at all,

I have no problem if someone else with more knowledge about java do the 
next steps.

Kind regards

Mechtilde

Am 15.04.25 um 18:33 schrieb tony mancill:
> On Tue, Apr 15, 2025 at 03:28:32PM +0200, Pierre Gruet wrote:
>>   >  We probably also need to update reverse dependencies, e.g. testng[1]
>>   > and jtreg7[2]. I will try to look into it.
>>   >
>>   > Best Regards,
>>   >  Vladimir.
>>   >
>>   > [1] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1102778
>>   > [2] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1102767
>>
>> May I suggest that we instead downgrade the version of snakeyaml back to
>> 1.33?
>>
>> Many RC bugs have been filled in (#1102778, #1102767, #1102764, #1102762
>> just to name a few) after version 2.0+ds was uploaded, snakeyaml itself
>> is not migrating because of failing autopkgtests in rdeps, and we are in
>> Soft Freeze so I guess trying to fix all of these issues is not worth
>> our time and is not "small, targeted fixes".
> 
> Since 2.0 introduces breaking API changes - see the "Backwards-incompatible"
> changes in [1], I agree with Pierre that we should downgrade for Trixie.
> 
> I'm not sure how we should version it - perhaps: 2.0+ds+really1.33-1 ?
> 
> And then 2.0+ds+really2.0-1, or better yet skip 2.0 and upload 2.2+ds to
> experimental, or wait until after the trixie release cycle.
> 
> Mechtilde, will you handle the upload?
> 
> Thank you,
> tony
> 
> [1] https://bitbucket.org/snakeyaml/snakeyaml/wiki/Changes

-- 
Mechtilde Stehmann
## Debian Developer
## PGP encryption welcome
## F0E3 7F3D C87A 4998 2899  39E7 F287 7BBA 141A AD7F

-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <http://alioth-lists.debian.net/pipermail/pkg-java-maintainers/attachments/20250415/7db08f30/attachment-0001.sig>


More information about the pkg-java-maintainers mailing list