Package: devscripts Version: 2.18.6 Severity: important -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512
uscan fails to create git archives when using mode=git in debian/watch. The specific watch file is <https://salsa.debian.org/mediawiki-team/php-luasandbox/blob/d0993f04cca15ee109938406d1a7605df7bf01b4/debian/watch>, which has worked without modification in the past. See the attached log. - -- Package-specific info: - --- /etc/devscripts.conf --- - --- ~/.devscripts --- Not present - -- System Information: Debian Release: buster/sid APT prefers unstable APT policy: (500, 'unstable') Architecture: amd64 (x86_64) Kernel: Linux 4.18.12-200.fc28.x86_64 (SMP w/4 CPU cores) Locale: LANG=C, LC_CTYPE=C (charmap=UTF-8) (ignored: LC_ALL set to C.UTF-8), LANGUAGE=C (charmap=UTF-8) (ignored: LC_ALL set to C.UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) Versions of packages devscripts depends on: ii dpkg-dev 1.19.2 ii libc6 2.27-6 ii libfile-homedir-perl 1.004-1 ii perl 5.26.2-7 ii python3 3.6.6-1 ii sensible-utils 0.0.12 Versions of packages devscripts recommends: ii apt 1.7.0 ii at 3.1.23-1 ii curl 7.61.0-1 ii dctrl-tools 2.24-3 ii debian-keyring 2018.09.30 ii dput-ng [dput] 1.21 ii equivs 2.1.0 ii fakeroot 1.23-1 ii file 1:5.34-2 ii gnupg 2.2.10-3 ii libdistro-info-perl 0.18 ii libdpkg-perl 1.19.2 ii libencode-locale-perl 1.05-1 ii libfile-which-perl 1.22-1 ii libgit-wrapper-perl 0.048-1 ii libipc-run-perl 20180523.0-1 ii liblist-compare-perl 0.53-1 ii liblwp-protocol-https-perl 6.07-2 ii libmoo-perl 2.003004-1 ii libsoap-lite-perl 1.27-1 ii libstring-shellquote-perl 1.04-1 ii libtry-tiny-perl 0.30-1 ii liburi-perl 1.74-1 ii libwww-perl 6.35-2 ii licensecheck 3.0.31-2 ii lintian 2.5.108 ii man-db 2.8.4-2 ii patch 2.7.6-3 ii patchutils 0.3.4-2 ii python3-apt 1.7.0~rc1 ii python3-debian 0.1.33 ii python3-magic 2:0.4.15-2 ii python3-requests 2.18.4-2 ii python3-unidiff 0.5.4-1 ii python3-xdg 0.25-4 ii strace 4.21-1 ii unzip 6.0-21 ii wdiff 1.2.2-2+b1 ii wget 1.19.5-2 ii xz-utils 5.2.2-1.3 Versions of packages devscripts suggests: pn adequate <none> pn autopkgtest <none> pn bls-standalone <none> ii build-essential 12.5 pn check-all-the-things <none> pn cvs-buildpackage <none> pn devscripts-el <none> pn diffoscope <none> pn disorderfs <none> pn dose-extra <none> pn duck <none> pn faketime <none> pn gnuplot <none> ii gpgv 2.2.10-3 pn how-can-i-help <none> ii libauthen-sasl-perl 2.1600-1 pn libdbd-pg-perl <none> ii libfile-desktopentry-perl 0.22-1 pn libnet-smtps-perl <none> pn libterm-size-perl <none> ii libtimedate-perl 2.3000-2 pn libyaml-syck-perl <none> ii mailutils [mailx] 1:3.4-1+b1 pn mozilla-devscripts <none> pn mutt <none> ii openssh-client [ssh-client] 1:7.8p1-1 pn piuparts <none> ii postgresql-client 10+193 ii postgresql-client-10 [postgresql-client] 10.5-1 pn quilt <none> pn ratt <none> pn reprotest <none> pn svn-buildpackage <none> pn w3m <none> - -- no debconf information -----BEGIN PGP SIGNATURE----- iQJHBAEBCgAxFiEE+h6fmkHn9DUCyl1jUvyOe+23/KIFAlu9an4THGxlZ29rdG1A ZGViaWFuLm9yZwAKCRBS/I577bf8ojcyEACDyRBoKJjx3zMH4U/7zyBUaijWDBiV mj4yddcK2Ci2xJxRNVz9SC2w6B3iwHOhO0PhHFRvoTbtFx7cRD96xMFH6jowfHAq U5xJtetdcwKboQBHqZB6WbOT8HikegfQOTaC7qmPNPmzM8EKO8WIO9uMHr7i5Paq rSL83v84zeI+19e734W1Kh2R5sz1Vl9ueY9poKk/Hg2WB8e8QpyrucSH3DxruGuH hUEWnHkzwkFLEW1qaMR6ds/C2VzKcvaye9Rnk21aBOCIALEH/tp7i6bmFnjrKtMK jTogFA/05hn6wlAMO3dbcggm9nbGRmMtEWKx+qL46u+J0RVHbFFkf0uP7leGdZoO fY2bf9qccCdHLA0uBUfOjmlBDVpHtnOHB/yMe/6n8z8GqJhkwcbmJud11dyhecAx 0sJxLC7+FV+MNknP2sEm60QYMM+0KfDcX3Hju169M/hBSWUtdppMDfxuRiDO2Grv VpNiPQ2KHJ36QTvIaKf0TXg91U0d9cldrZ9zXOwBAj1pcXU6bSSNf9ti2jdM9RBM nzDZ5bqFBOGkL1stYAErVr+VdOosM4jKEXhmkwvGqCiMNzIbdWmAsHwuVU0gU3w8 N2/tAQGvIt5jQWA+SU/JGS7KLN+PQPNXnXBbHHF61NNf5JKRj52vNfXVbB/wHFlm YXVguAiADKkujg== =97+7 -----END PGP SIGNATURE-----
km@km-pt:~/debian/php-luasandbox$ uscan --verbose uscan info: The directory to store downloaded files($destdir): .. uscan info: uscan (version 2.18.6) See uscan(1) for help uscan info: Scan watch files in . uscan info: Check debian/watch and debian/changelog in ./.git/refs/tags uscan info: Check debian/watch and debian/changelog in . uscan info: package="php-luasandbox" version="3.0.1-3" (as seen in debian/changelog) uscan info: package="php-luasandbox" version="3.0.1" (no epoch/revision) uscan info: ./debian/changelog sets package="php-luasandbox" version="3.0.1" uscan info: Process watch file at: debian/watch package = php-luasandbox version = 3.0.1 pkg_dir = . uscan info: Set passive mode: default uscan info: opts: mode=git,pgpmode=none uscan info: line: https://gerrit.wikimedia.org/r/mediawiki/php/luasandbox refs/tags/([\d\.]+) debian uupdate uscan info: Parsing mode=git uscan info: Parsing pgpmode=none uscan info: line: https://gerrit.wikimedia.org/r/mediawiki/php/luasandbox refs/tags/([\d\.]+) debian uupdate uscan info: Last orig.tar.* tarball version (from debian/changelog): 3.0.1 uscan info: Last orig.tar.* tarball version (dversionmangled): 3.0.1 Use of uninitialized value in concatenation (.) or string at /usr/share/perl5/Devscripts/Uscan/git.pm line 100. uscan info: Execute: git ls-remote uscan info: Found the following matching refs: refs/tags/3.0.2 (3.0.2) refs/tags/3.0.1 (3.0.1) refs/tags/3.0.0 (3.0.0) refs/tags/2.0.14 (2.0.14) refs/tags/2.0.13 (2.0.13) HEAD () refs/cache-automerge/64/2c006bb2a891f7d01d8a936044028174532996 () refs/cache-automerge/93/eeb173b3f6ec9b191573d38310253802f12c6b () refs/changes/00/129100/1 () refs/changes/00/129100/2 () refs/changes/00/129100/3 () refs/changes/00/129100/meta () refs/changes/00/408700/1 () refs/changes/00/408700/meta () refs/changes/00/41000/1 () refs/changes/00/41000/2 () refs/changes/00/41000/3 () refs/changes/00/41000/meta () refs/changes/01/149001/1 () refs/changes/01/149001/2 () refs/changes/01/149001/meta () refs/changes/01/361201/1 () refs/changes/01/361201/meta () refs/changes/01/362301/1 () refs/changes/01/362301/2 () refs/changes/01/362301/meta () refs/changes/03/410503/1 () refs/changes/03/410503/meta () refs/changes/05/150905/1 () refs/changes/05/150905/2 () refs/changes/05/150905/3 () refs/changes/05/150905/meta () refs/changes/06/415306/1 () refs/changes/06/415306/meta () refs/changes/09/22709/1 () refs/changes/09/22709/meta () refs/changes/10/212510/1 () refs/changes/10/212510/meta () refs/changes/10/298310/1 () refs/changes/10/298310/meta () refs/changes/11/159011/1 () refs/changes/11/159011/2 () refs/changes/11/159011/3 () refs/changes/11/159011/4 () refs/changes/11/159011/5 () refs/changes/11/159011/meta () refs/changes/12/298312/1 () refs/changes/12/298312/2 () refs/changes/12/298312/meta () refs/changes/13/109413/1 () refs/changes/13/109413/meta () refs/changes/15/150215/1 () refs/changes/15/150215/2 () refs/changes/15/150215/3 () refs/changes/15/150215/meta () refs/changes/15/69315/1 () refs/changes/15/69315/meta () refs/changes/16/149016/1 () refs/changes/16/149016/meta () refs/changes/18/295018/1 () refs/changes/18/295018/meta () refs/changes/18/39718/1 () refs/changes/18/39718/2 () refs/changes/18/39718/3 () refs/changes/18/39718/4 () refs/changes/18/39718/5 () refs/changes/18/39718/meta () refs/changes/20/210920/1 () refs/changes/20/210920/meta () refs/changes/21/210321/1 () refs/changes/21/210321/meta () refs/changes/21/213521/1 () refs/changes/21/213521/2 () refs/changes/21/213521/meta () refs/changes/21/27921/1 () refs/changes/21/27921/2 () refs/changes/21/27921/3 () refs/changes/21/27921/meta () refs/changes/22/159822/1 () refs/changes/22/159822/2 () refs/changes/22/159822/3 () refs/changes/22/159822/4 () refs/changes/22/159822/5 () refs/changes/22/159822/meta () refs/changes/22/210322/1 () refs/changes/22/210322/meta () refs/changes/23/218423/1 () refs/changes/23/218423/meta () refs/changes/24/19424/1 () refs/changes/24/19424/meta () refs/changes/24/204724/1 () refs/changes/24/204724/meta () refs/changes/25/144125/1 () refs/changes/25/144125/meta () refs/changes/25/38725/1 () refs/changes/25/38725/meta () refs/changes/27/38727/1 () refs/changes/27/38727/2 () refs/changes/27/38727/meta () refs/changes/28/465528/1 () refs/changes/28/465528/meta () refs/changes/28/97928/1 () refs/changes/28/97928/meta () refs/changes/29/107329/1 () refs/changes/29/107329/meta () refs/changes/29/367129/1 () refs/changes/29/367129/meta () refs/changes/30/107330/1 () refs/changes/30/107330/meta () refs/changes/30/143930/1 () refs/changes/30/143930/meta () refs/changes/30/367130/1 () refs/changes/30/367130/meta () refs/changes/31/107331/1 () refs/changes/31/107331/meta () refs/changes/31/51331/1 () refs/changes/31/51331/meta () refs/changes/31/97931/1 () refs/changes/31/97931/2 () refs/changes/31/97931/3 () refs/changes/31/97931/4 () refs/changes/31/97931/meta () refs/changes/35/367935/1 () refs/changes/35/367935/2 () refs/changes/35/367935/meta () refs/changes/35/55535/1 () refs/changes/35/55535/meta () refs/changes/36/97936/1 () refs/changes/36/97936/meta () refs/changes/37/131637/1 () refs/changes/37/131637/meta () refs/changes/37/297737/1 () refs/changes/37/297737/meta () refs/changes/41/339441/1 () refs/changes/41/339441/2 () refs/changes/41/339441/meta () refs/changes/42/133842/1 () refs/changes/42/133842/meta () refs/changes/42/135942/1 () refs/changes/42/135942/2 () refs/changes/42/135942/meta () refs/changes/42/339442/1 () refs/changes/42/339442/2 () refs/changes/42/339442/meta () refs/changes/42/51342/1 () refs/changes/42/51342/meta () refs/changes/43/375743/1 () refs/changes/43/375743/meta () refs/changes/43/377243/1 () refs/changes/43/377243/2 () refs/changes/43/377243/3 () refs/changes/43/377243/meta () refs/changes/44/149544/1 () refs/changes/44/149544/meta () refs/changes/44/375744/1 () refs/changes/44/375744/meta () refs/changes/44/462744/1 () refs/changes/44/462744/2 () refs/changes/44/462744/meta () refs/changes/48/26448/1 () refs/changes/48/26448/meta () refs/changes/48/339448/1 () refs/changes/48/339448/2 () refs/changes/48/339448/meta () refs/changes/49/205549/1 () refs/changes/49/205549/meta () refs/changes/49/38249/1 () refs/changes/49/38249/2 () refs/changes/49/38249/meta () refs/changes/51/339451/1 () refs/changes/51/339451/meta () refs/changes/54/156954/1 () refs/changes/54/156954/2 () refs/changes/54/156954/meta () refs/changes/54/38354/1 () refs/changes/54/38354/2 () refs/changes/54/38354/meta () refs/changes/55/407455/1 () refs/changes/55/407455/meta () refs/changes/57/159757/1 () refs/changes/57/159757/meta () refs/changes/57/18657/1 () refs/changes/57/18657/meta () refs/changes/57/91857/1 () refs/changes/57/91857/meta () refs/changes/58/156758/1 () refs/changes/58/156758/2 () refs/changes/58/156758/3 () refs/changes/58/156758/meta () refs/changes/58/464758/1 () refs/changes/58/464758/2 () refs/changes/58/464758/3 () refs/changes/58/464758/meta () refs/changes/59/145159/1 () refs/changes/59/145159/2 () refs/changes/59/145159/meta () refs/changes/60/415360/1 () refs/changes/60/415360/meta () refs/changes/60/46660/1 () refs/changes/60/46660/meta () refs/changes/61/415361/1 () refs/changes/61/415361/meta () refs/changes/63/139763/1 () refs/changes/63/139763/2 () refs/changes/63/139763/3 () refs/changes/63/139763/4 () refs/changes/63/139763/5 () refs/changes/63/139763/6 () refs/changes/63/139763/meta () refs/changes/63/409463/1 () refs/changes/63/409463/meta () refs/changes/64/297864/1 () refs/changes/64/297864/2 () refs/changes/64/297864/3 () refs/changes/64/297864/meta () refs/changes/64/409464/1 () refs/changes/64/409464/meta () refs/changes/64/52764/1 () refs/changes/64/52764/meta () refs/changes/65/52765/1 () refs/changes/65/52765/meta () refs/changes/65/63565/1 () refs/changes/65/63565/2 () refs/changes/65/63565/3 () refs/changes/65/63565/4 () refs/changes/65/63565/meta () refs/changes/67/22867/1 () refs/changes/67/22867/meta () refs/changes/67/54867/1 () refs/changes/67/54867/meta () refs/changes/68/143668/1 () refs/changes/68/143668/2 () refs/changes/68/143668/meta () refs/changes/68/298168/1 () refs/changes/68/298168/2 () refs/changes/68/298168/meta () refs/changes/68/52568/1 () refs/changes/68/52568/meta () refs/changes/69/402169/1 () refs/changes/69/402169/meta () refs/changes/69/409469/1 () refs/changes/69/409469/2 () refs/changes/69/409469/3 () refs/changes/69/409469/meta () refs/changes/72/159672/1 () refs/changes/72/159672/2 () refs/changes/72/159672/3 () refs/changes/72/159672/meta () refs/changes/72/53472/1 () refs/changes/72/53472/meta () refs/changes/73/298273/1 () refs/changes/73/298273/2 () refs/changes/73/298273/meta () refs/changes/73/409473/1 () refs/changes/73/409473/2 () refs/changes/73/409473/3 () refs/changes/73/409473/meta () refs/changes/73/49973/1 () refs/changes/73/49973/meta () refs/changes/75/216975/1 () refs/changes/75/216975/meta () refs/changes/77/53477/1 () refs/changes/77/53477/meta () refs/changes/79/151679/1 () refs/changes/79/151679/meta () refs/changes/80/159680/1 () refs/changes/80/159680/meta () refs/changes/81/43181/1 () refs/changes/81/43181/2 () refs/changes/81/43181/3 () refs/changes/81/43181/4 () refs/changes/81/43181/5 () refs/changes/81/43181/6 () refs/changes/81/43181/meta () refs/changes/82/298182/1 () refs/changes/82/298182/meta () refs/changes/82/366782/1 () refs/changes/82/366782/meta () refs/changes/82/38082/1 () refs/changes/82/38082/meta () refs/changes/82/424982/1 () refs/changes/82/424982/meta () refs/changes/82/52882/1 () refs/changes/82/52882/meta () refs/changes/84/49084/1 () refs/changes/84/49084/2 () refs/changes/84/49084/3 () refs/changes/84/49084/meta () refs/changes/85/142585/1 () refs/changes/85/142585/meta () refs/changes/85/295485/1 () refs/changes/85/295485/meta () refs/changes/85/366785/1 () refs/changes/85/366785/meta () refs/changes/85/52585/1 () refs/changes/85/52585/meta () refs/changes/85/84985/1 () refs/changes/85/84985/2 () refs/changes/85/84985/3 () refs/changes/85/84985/4 () refs/changes/85/84985/5 () refs/changes/85/84985/meta () refs/changes/86/142586/1 () refs/changes/86/142586/meta () refs/changes/86/145586/1 () refs/changes/86/145586/meta () refs/changes/86/149886/1 () refs/changes/86/149886/meta () refs/changes/86/52586/1 () refs/changes/86/52586/meta () refs/changes/86/70186/1 () refs/changes/86/70186/meta () refs/changes/87/295487/1 () refs/changes/87/295487/2 () refs/changes/87/295487/3 () refs/changes/87/295487/meta () refs/changes/87/298387/1 () refs/changes/87/298387/meta () refs/changes/87/96687/1 () refs/changes/87/96687/2 () refs/changes/87/96687/meta () refs/changes/88/295488/1 () refs/changes/88/295488/2 () refs/changes/88/295488/3 () refs/changes/88/295488/meta () refs/changes/88/298388/1 () refs/changes/88/298388/meta () refs/changes/89/212789/1 () refs/changes/89/212789/2 () refs/changes/89/212789/3 () refs/changes/89/212789/meta () refs/changes/89/298389/1 () refs/changes/89/298389/meta () refs/changes/89/39589/1 () refs/changes/89/39589/2 () refs/changes/89/39589/meta () refs/changes/91/127891/1 () refs/changes/91/127891/meta () refs/changes/93/39593/1 () refs/changes/93/39593/2 () refs/changes/93/39593/meta () refs/changes/94/190794/1 () refs/changes/94/190794/2 () refs/changes/94/190794/meta () refs/changes/94/401894/1 () refs/changes/94/401894/meta () refs/changes/95/51395/1 () refs/changes/95/51395/meta () refs/changes/98/274098/1 () refs/changes/98/274098/meta () refs/changes/98/465298/1 () refs/changes/98/465298/meta () refs/changes/99/410099/1 () refs/changes/99/410099/2 () refs/changes/99/410099/3 () refs/changes/99/410099/meta () refs/heads/debian () refs/heads/master () refs/meta/config () refs/notes/commits () refs/notes/review () uscan info: Looking at $base = https://gerrit.wikimedia.org/r/mediawiki/php/luasandbox with $filepattern = refs/tags/([\d\.]+) found $newfile = refs/tags/3.0.2 $newversion = 3.0.2 which is newer than $lastversion = 3.0.1 uscan info: Upstream URL(+tag) to download is identified as https://gerrit.wikimedia.org/r/mediawiki/php/luasandbox refs/tags/3.0.2 uscan info: Filename (filenamemangled) for downloaded file: php-luasandbox-3.0.2.tar.xz uscan: Newest version of php-luasandbox on remote site is 3.0.2, local version is 3.0.1 uscan: => Newer package available from https://gerrit.wikimedia.org/r/mediawiki/php/luasandbox refs/tags/3.0.2 uscan info: Downloading upstream package: php-luasandbox-3.0.2.tar.xz uscan info: Execute: git clone --bare --depth=1 https://gerrit.wikimedia.org/r/mediawiki/php/luasandbox ../php-luasandbox-temporary.12551.git... Cloning into bare repository '../php-luasandbox-temporary.12551.git'... remote: Counting objects: 52, done remote: Finding sources: 100% (52/52) remote: Getting sizes: 100% (50/50) remote: Compressing objects: 100% (114032/114032) remote: Total 52 (delta 1), reused 33 (delta 1) Unpacking objects: 100% (52/52), done. uscan info: Execute: git --git-dir=../php-luasandbox-temporary.12551.git archive --format=tar --prefix=php-luasandbox-3.0.2/ --output=/home/km/debian/php-luasandbox-3.0.2.tar refs/tags/3.0.2... fatal: Not a valid object name uscan die: git archive failed [Devscripts::Uscan::Downloader: 134]