Bug#1146144: libmodule-cpants-analyse-perl: trixie version test suite breaks with Archive-Tar fix for CVE-2026-42496

[Niko Tyni]

Source: libmodule-cpants-analyse-perl
Version: 1.02-1
Severity: important
Tags: trixie patch
Control: close -1 1.03-1
Forwarded: https://github.com/Perl/perl5/issues/24452

I'm looking at pushing a trixie fix for Archive-Tar CVE-2026-42496 in
src:perl via a point release.

As seen in https://github.com/Perl/perl5/issues/24452 the fix makes
Module-CPANTS-Analyse fail its test suite.

 not ok 13 - symlinks not listed in MANIFEST is not ignored for a non-local distribution
 
 #   Failed test 'symlinks not listed in MANIFEST is not ignored for a non-local distribution'
 #   at t/analyse/manifest.t line 84.

An easy way to see this is just building libmodule-cpants-analyse-perl_1.02-1 in forky or sid.

This has been fixed upstream in 1.03 with

  https://github.com/cpants/Module-CPANTS-Analyse/commit/fed1a10a9d9170bce71777745d504cd427692e2d

which should works with and without the Archive-Tar fix.

Please consider supplying a point release update of
libmodule-cpants-analyse-perl with this patch to avoid a regression
in stable.

-- 
Niko Tyni	ntyni at debian.org