Bug#964496: libjson-validator-perl: URL is gone, this is now RC

Andrius Merkys merkys at debian.org
Mon Nov 30 11:00:46 GMT 2020


Hello,

On 2020-11-29 18:59, Wouter Verhelst wrote:
> This bug is still present. Additionally, the URL for the OpenAPI JSON
> scheme now returns a 404 error, which means that any software using
> OpenAPI on Debian with this bug present will fail to function correctly.>
> Please fix this bug before the release of bullseye.

While I agree that this is an important issue, I do not think severity
"serious" is appropriate here. It is true that the upstream provides
caching mechanism, but any URL may become offline, and a general
approach to prevent failures in such cases is to use Debian-packaged
files. With OpenAPI schemas provided in openapi-specification binary
package, this is as simple as replacing OpenAPI URLs with
/usr/share/openapi-specification/schemas/$VERSION/schema.json in the
using code.

The upstream caching mechanism could indeed be employed, but as said
before [1], preferable way to use it needs transparency of cache hashes.

By the way, could you please provide OpenAPI URL that returns 404 now?

[1] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=964496#24

Best,
Andrius



More information about the pkg-perl-maintainers mailing list