Bug#1129623: maven-debian-helper uses dependency pom version in Maven:* substvars

[Vladimir Petko]

Source: maven-debian-helper
Version: 2.6.7build1
Severity: wishlist

Dear Maintainer,

maven-debian-helper uses dependency pom version when generating substvars.
This creates unsatisfiable constraints when the pom version and package
upstream version do not match.

Example is async-http-client that depends on libnetty-reactive-streams-java (>=
2.0.9-SNAPSHOT), where the package version of netty-reactive-streams is
2.0.8[1].

Please consider using Debian package version of the dependency rather than POM
version to generate version constraints in substvars.



[1] https://tracker.debian.org/news/1397448/netty-reactive-
streams-208-1-migrated-to-testing/


-- System Information:
Debian Release: forky/sid
  APT prefers questing-updates
  APT policy: (500, 'questing-updates'), (500, 'questing-security'), (500, 'questing'), (100, 'questing-backports')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 6.17.0-14-generic (SMP w/32 CPU threads; PREEMPT)
Kernel taint flags: TAINT_PROPRIETARY_MODULE, TAINT_OOT_MODULE
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled