On 24/02/18 15:41, Jeremy Bicha wrote:
On Sat, Feb 24, 2018 at 10:12 AM, Matthew Vernon <matt...@debian.org> wrote:
I've uploaded an updated pcre2 package (2 actually), which now points vcs-*
to salsa. I think this fixes this bug, so would like to close it, if that's
OK?
I appreciate that it uses Vcs headers now. But my original bug report
is still unsolved. pcre2 not using 3.0 (quilt) creates extra burden
for doing security updates in Ubuntu.
How so? Is there some difficulty with "git cherry-pick" or similar that
I'm missing?
That burden has been enough for me to not invest the time in doing
those security updates (especially since I have no real responsibility
to do so for a package neither I nor most Ubuntu users use yet).
Could you investigate switching to the dgit-maint-gbp workflow?
I have considered it, and I don't think it's appropriate for pcre2. I
think the primarily git-based workflow dgit-maint-merge provides is the
most natural way to manage the package in Debian.
Regards,
Matthew
