Hi,
I've uploaded an updated pcre2 package (2 actually), which now points
vcs-* to salsa. I think this fixes this bug, so would like to close it,
if that's OK?
On 01/12/17 18:49, Jeremy Bicha wrote:
The problem is that there is important metadata stored as git commits
(information about why this line in this source file was changed) that
is completely missing from the source package. That makes it very
difficult for a downstream like Ubuntu to be able to process security
updates and pcre2 is a security-sensitive package.
My expectation is that anyone who wants to inspect the packaging of
pcre2 would do so using git/dgit
For instance, you pointed out that I needed a Homepage section in
debian/control, so if you clone the published repo or browse it at
https://salsa.debian.org/debian/pcre2
you can see when that line was changed (today) and why (the commit
message credits you):
https://salsa.debian.org/debian/pcre2/commit/f7e2cb2fdc3d57156f9390675814bd8d5c6ab504
Regards,
Matthew
