Package: devscripts Version: 2.21.6 Severity: normal -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512
Several packages I maintain is reported at tracker.debian.org as having a newer upstream tarball despite being up-to-date. Seems for all the involved packages a) their main source have been repackaged, and b) an added component has been embedded. Example: emscripten is currently upstream at version 3.0.0, package version is 3.0.0~dfsg+~1.39.6-2 and it contains this watch file: version=4 # check: uscan --report # update: gbp import-orig --upstream-vcs-tag=vX.Y.Z --uscan # post-update: debian/rules get-source-map-footer opts=\ filenamemangle=s/.*?(@ANY_VERSION@@ARCHIVE_EXT@)/@PACKAGE@-$1/,\ repacksuffix=~dfsg,\ dversionmangle=auto \ https://github.com/emscripten-core/emscripten/tags \ .*?@ANY_VERSION@@ARCHIVE_EXT@ group # NPM registry needed for node types (avoid if at all possible!) opts=\ component=Xtypes,\ searchmode=plain,\ pgpmode=none,\ filenamemangle=s/.*?-?(@ANY_VERSION@@ARCHIVE_EXT@)/@PACKAGE@-types-$1/,\ dversionmangle=auto \ https://registry.npmjs.org/@types/emscripten \ https://registry.npmjs.org/@types/emscripten/-/emscripten-@ANY_VERSION@@ARCHIVE_EXT@ group https://tracker.debian.org/pkg/emscripten says "A new upstream version 3.0.0+~1.39.6 is available" which is not true. When I locally do "uscan --report" I get no output. When I locally do "uscan --verbose --report" I get the following which I find too overwhelming to comprehend what exactly it is telling me: uscan info: uscan (version 2.21.6) See uscan(1) for help uscan info: Scan watch files in . uscan info: Check debian/watch and debian/changelog in . uscan info: package="emscripten" version="3.0.0~dfsg+~1.39.6-2" (as seen in debian/changelog) uscan info: package="emscripten" version="3.0.0~dfsg+~1.39.6" (no epoch/revision) uscan info: ./debian/changelog sets package="emscripten" version="3.0.0~dfsg+~1.39.6" uscan info: Process watch file at: debian/watch package = emscripten version = 3.0.0~dfsg+~1.39.6 pkg_dir = . uscan info: opts: filenamemangle=s/.*?((?:[-_]?(\d[\-+\.:\~\da-zA-Z]*))(?i)(?:\.(?:tar\.xz|tar\.bz2|tar\.gz|tar\.zstd?|zip|tgz|tbz|txz)))/emscripten-$1/,repacksuffix=~dfsg,dversionmangle=auto uscan info: line: https://github.com/emscripten-core/emscripten/tags .*?(?:[-_]?(\d[\-+\.:\~\da-zA-Z]*))(?i)(?:\.(?:tar\.xz|tar\.bz2|tar\.gz|tar\.zstd?|zip|tgz|tbz|txz)) group uscan info: Parsing filenamemangle=s/.*?((?:[-_]?(\d[\-+\.:\~\da-zA-Z]*))(?i)(?:\.(?:tar\.xz|tar\.bz2|tar\.gz|tar\.zstd?|zip|tgz|tbz|txz)))/emscripten-$1/ uscan info: Parsing repacksuffix=~dfsg uscan info: Parsing dversionmangle=auto uscan info: line: https://github.com/emscripten-core/emscripten/tags .*?(?:[-_]?(\d[\-+\.:\~\da-zA-Z]*))(?i)(?:\.(?:tar\.xz|tar\.bz2|tar\.gz|tar\.zstd?|zip|tgz|tbz|txz)) group uscan info: Last orig.tar.* tarball version (from debian/changelog): 3.0.0~dfsg uscan info: Last orig.tar.* tarball version (dversionmangled): 3.0.0 uscan info: Requesting URL: https://github.com/emscripten-core/emscripten/tags uscan info: Matching pattern: (?:(?:https://github.com)?\/emscripten\-core\/emscripten\/)?.*?(?:[-_]?(\d[\-+\.:\~\da-zA-Z]*))(?i)(?:\.(?:tar\.xz|tar\.bz2|tar\.gz|tar\.zstd?|zip|tgz|tbz|txz)) uscan info: Found the following matching hrefs on the web page (newest first): https://github.com/emscripten-core/emscripten/archive/refs/tags/3.0.0.tar.gz (3.0.0) index=3.0.0-1 https://github.com/emscripten-core/emscripten/archive/refs/tags/3.0.0.tar.gz (3.0.0) index=3.0.0-1 https://github.com/emscripten-core/emscripten/archive/refs/tags/3.0.0.zip (3.0.0) index=3.0.0-0 https://github.com/emscripten-core/emscripten/archive/refs/tags/3.0.0.zip (3.0.0) index=3.0.0-0 https://github.com/emscripten-core/emscripten/archive/refs/tags/2.0.34.tar.gz (2.0.34) index=2.0.34-1 https://github.com/emscripten-core/emscripten/archive/refs/tags/2.0.34.tar.gz (2.0.34) index=2.0.34-1 https://github.com/emscripten-core/emscripten/archive/refs/tags/2.0.34.zip (2.0.34) index=2.0.34-0 https://github.com/emscripten-core/emscripten/archive/refs/tags/2.0.34.zip (2.0.34) index=2.0.34-0 https://github.com/emscripten-core/emscripten/archive/refs/tags/2.0.33.tar.gz (2.0.33) index=2.0.33-1 https://github.com/emscripten-core/emscripten/archive/refs/tags/2.0.33.tar.gz (2.0.33) index=2.0.33-1 https://github.com/emscripten-core/emscripten/archive/refs/tags/2.0.33.zip (2.0.33) index=2.0.33-0 https://github.com/emscripten-core/emscripten/archive/refs/tags/2.0.33.zip (2.0.33) index=2.0.33-0 https://github.com/emscripten-core/emscripten/archive/refs/tags/2.0.32.tar.gz (2.0.32) index=2.0.32-1 https://github.com/emscripten-core/emscripten/archive/refs/tags/2.0.32.tar.gz (2.0.32) index=2.0.32-1 https://github.com/emscripten-core/emscripten/archive/refs/tags/2.0.32.zip (2.0.32) index=2.0.32-0 https://github.com/emscripten-core/emscripten/archive/refs/tags/2.0.32.zip (2.0.32) index=2.0.32-0 https://github.com/emscripten-core/emscripten/archive/refs/tags/2.0.31.tar.gz (2.0.31) index=2.0.31-1 https://github.com/emscripten-core/emscripten/archive/refs/tags/2.0.31.tar.gz (2.0.31) index=2.0.31-1 https://github.com/emscripten-core/emscripten/archive/refs/tags/2.0.31.zip (2.0.31) index=2.0.31-0 https://github.com/emscripten-core/emscripten/archive/refs/tags/2.0.31.zip (2.0.31) index=2.0.31-0 https://github.com/emscripten-core/emscripten/archive/refs/tags/2.0.30.tar.gz (2.0.30) index=2.0.30-1 https://github.com/emscripten-core/emscripten/archive/refs/tags/2.0.30.tar.gz (2.0.30) index=2.0.30-1 https://github.com/emscripten-core/emscripten/archive/refs/tags/2.0.30.zip (2.0.30) index=2.0.30-0 https://github.com/emscripten-core/emscripten/archive/refs/tags/2.0.30.zip (2.0.30) index=2.0.30-0 https://github.com/emscripten-core/emscripten/archive/refs/tags/2.0.29.tar.gz (2.0.29) index=2.0.29-1 https://github.com/emscripten-core/emscripten/archive/refs/tags/2.0.29.tar.gz (2.0.29) index=2.0.29-1 https://github.com/emscripten-core/emscripten/archive/refs/tags/2.0.29.zip (2.0.29) index=2.0.29-0 https://github.com/emscripten-core/emscripten/archive/refs/tags/2.0.29.zip (2.0.29) index=2.0.29-0 https://github.com/emscripten-core/emscripten/archive/refs/tags/2.0.28.tar.gz (2.0.28) index=2.0.28-1 https://github.com/emscripten-core/emscripten/archive/refs/tags/2.0.28.tar.gz (2.0.28) index=2.0.28-1 https://github.com/emscripten-core/emscripten/archive/refs/tags/2.0.28.zip (2.0.28) index=2.0.28-0 https://github.com/emscripten-core/emscripten/archive/refs/tags/2.0.28.zip (2.0.28) index=2.0.28-0 https://github.com/emscripten-core/emscripten/archive/refs/tags/2.0.27.tar.gz (2.0.27) index=2.0.27-1 https://github.com/emscripten-core/emscripten/archive/refs/tags/2.0.27.tar.gz (2.0.27) index=2.0.27-1 https://github.com/emscripten-core/emscripten/archive/refs/tags/2.0.27.zip (2.0.27) index=2.0.27-0 https://github.com/emscripten-core/emscripten/archive/refs/tags/2.0.27.zip (2.0.27) index=2.0.27-0 https://github.com/emscripten-core/emscripten/archive/refs/tags/2.0.26.tar.gz (2.0.26) index=2.0.26-1 https://github.com/emscripten-core/emscripten/archive/refs/tags/2.0.26.tar.gz (2.0.26) index=2.0.26-1 https://github.com/emscripten-core/emscripten/archive/refs/tags/2.0.26.zip (2.0.26) index=2.0.26-0 https://github.com/emscripten-core/emscripten/archive/refs/tags/2.0.26.zip (2.0.26) index=2.0.26-0 uscan info: Looking at $base = https://github.com/emscripten-core/emscripten/tags with $filepattern = .*?(?:[-_]?(\d[\-+\.:\~\da-zA-Z]*))(?i)(?:\.(?:tar\.xz|tar\.bz2|tar\.gz|tar\.zstd?|zip|tgz|tbz|txz)) found $newfile = https://github.com/emscripten-core/emscripten/archive/refs/tags/3.0.0.tar.gz $newversion = 3.0.0 $lastversion = 3.0.0~dfsg uscan info: Matching target for downloadurlmangle: https://github.com/emscripten-core/emscripten/archive/refs/tags/3.0.0.tar.gz uscan info: Upstream URL(+tag) to download is identified as https://github.com/emscripten-core/emscripten/archive/refs/tags/3.0.0.tar.gz uscan info: Matching target for filenamemangle: https://github.com/emscripten-core/emscripten/archive/refs/tags/3.0.0.tar.gz uscan info: Filename (filenamemangled) for downloaded file: emscripten-3.0.0.tar.gz uscan info: Newest version of emscripten on remote site is 3.0.0, local version is 3.0.0~dfsg (mangled local version is 3.0.0) uscan info: => Package is up to date from: => https://github.com/emscripten-core/emscripten/archive/refs/tags/3.0.0.tar.gz uscan info: opts: component=Xtypes,searchmode=plain,pgpmode=none,filenamemangle=s/.*?-?((?:[-_]?(\d[\-+\.:\~\da-zA-Z]*))(?i)(?:\.(?:tar\.xz|tar\.bz2|tar\.gz|tar\.zstd?|zip|tgz|tbz|txz)))/emscripten-types-$1/,dversionmangle=auto uscan info: line: https://registry.npmjs.org/@types/emscripten https://registry.npmjs.org/@types/emscripten/-/emscripten-(?:[-_]?(\d[\-+\.:\~\da-zA-Z]*))(?i)(?:\.(?:tar\.xz|tar\.bz2|tar\.gz|tar\.zstd?|zip|tgz|tbz|txz)) group uscan info: Parsing component=Xtypes uscan info: Parsing searchmode=plain uscan info: Parsing pgpmode=none uscan info: Parsing filenamemangle=s/.*?-?((?:[-_]?(\d[\-+\.:\~\da-zA-Z]*))(?i)(?:\.(?:tar\.xz|tar\.bz2|tar\.gz|tar\.zstd?|zip|tgz|tbz|txz)))/emscripten-types-$1/ uscan info: Parsing dversionmangle=auto uscan info: line: https://registry.npmjs.org/@types/emscripten https://registry.npmjs.org/@types/emscripten/-/emscripten-(?:[-_]?(\d[\-+\.:\~\da-zA-Z]*))(?i)(?:\.(?:tar\.xz|tar\.bz2|tar\.gz|tar\.zstd?|zip|tgz|tbz|txz)) group uscan info: Last orig.tar.* tarball version (from debian/changelog): 1.39.6 uscan info: Last orig.tar.* tarball version (dversionmangled): 1.39.6 uscan info: Requesting URL: https://registry.npmjs.org/@types/emscripten uscan info: Found the following matching hrefs on the web page (newest first): https://registry.npmjs.org/@types/emscripten/-/emscripten-1.39.6.tgz (1.39.6) index=1.39.6-0 https://registry.npmjs.org/@types/emscripten/-/emscripten-1.39.5.tgz (1.39.5) index=1.39.5-0 https://registry.npmjs.org/@types/emscripten/-/emscripten-1.39.4.tgz (1.39.4) index=1.39.4-0 https://registry.npmjs.org/@types/emscripten/-/emscripten-1.39.3.tgz (1.39.3) index=1.39.3-0 https://registry.npmjs.org/@types/emscripten/-/emscripten-1.39.2.tgz (1.39.2) index=1.39.2-0 https://registry.npmjs.org/@types/emscripten/-/emscripten-1.39.1.tgz (1.39.1) index=1.39.1-0 https://registry.npmjs.org/@types/emscripten/-/emscripten-1.39.0.tgz (1.39.0) index=1.39.0-0 https://registry.npmjs.org/@types/emscripten/-/emscripten-1.38.0.tgz (1.38.0) index=1.38.0-0 https://registry.npmjs.org/@types/emscripten/-/emscripten-0.0.34.tgz (0.0.34) index=0.0.34-0 https://registry.npmjs.org/@types/emscripten/-/emscripten-0.0.33.tgz (0.0.33) index=0.0.33-0 https://registry.npmjs.org/@types/emscripten/-/emscripten-0.0.32.tgz (0.0.32) index=0.0.32-0 https://registry.npmjs.org/@types/emscripten/-/emscripten-0.0.31.tgz (0.0.31) index=0.0.31-0 https://registry.npmjs.org/@types/emscripten/-/emscripten-0.0.30.tgz (0.0.30) index=0.0.30-0 https://registry.npmjs.org/@types/emscripten/-/emscripten-0.0.29.tgz (0.0.29) index=0.0.29-0 https://registry.npmjs.org/@types/emscripten/-/emscripten-0.0.28.tgz (0.0.28) index=0.0.28-0 https://registry.npmjs.org/@types/emscripten/-/emscripten-0.0.27-alpha.tgz (0.0.27-alpha) index=0.0.27-alpha-0 https://registry.npmjs.org/@types/emscripten/-/emscripten-0.0.26-alpha.tgz (0.0.26-alpha) index=0.0.26-alpha-0 https://registry.npmjs.org/@types/emscripten/-/emscripten-0.0.25-alpha.tgz (0.0.25-alpha) index=0.0.25-alpha-0 https://registry.npmjs.org/@types/emscripten/-/emscripten-0.0.24-alpha.tgz (0.0.24-alpha) index=0.0.24-alpha-0 https://registry.npmjs.org/@types/emscripten/-/emscripten-0.0.23-alpha.tgz (0.0.23-alpha) index=0.0.23-alpha-0 https://registry.npmjs.org/@types/emscripten/-/emscripten-0.0.22-alpha.tgz (0.0.22-alpha) index=0.0.22-alpha-0 https://registry.npmjs.org/@types/emscripten/-/emscripten-0.0.21-alpha.tgz (0.0.21-alpha) index=0.0.21-alpha-0 https://registry.npmjs.org/@types/emscripten/-/emscripten-0.0.16-alpha.tgz (0.0.16-alpha) index=0.0.16-alpha-0 https://registry.npmjs.org/@types/emscripten/-/emscripten-0.0.15-alpha.tgz (0.0.15-alpha) index=0.0.15-alpha-0 uscan info: Looking at $base = https://registry.npmjs.org/@types/emscripten with $filepattern = https://registry.npmjs.org/@types/emscripten/-/emscripten-(?:[-_]?(\d[\-+\.:\~\da-zA-Z]*))(?i)(?:\.(?:tar\.xz|tar\.bz2|tar\.gz|tar\.zstd?|zip|tgz|tbz|txz)) found $newfile = https://registry.npmjs.org/@types/emscripten/-/emscripten-1.39.6.tgz $newversion = 1.39.6 $lastversion = 1.39.6 uscan info: Matching target for downloadurlmangle: https://registry.npmjs.org/@types/emscripten/-/emscripten-1.39.6.tgz uscan info: Upstream URL(+tag) to download is identified as https://registry.npmjs.org/@types/emscripten/-/emscripten-1.39.6.tgz uscan info: Matching target for filenamemangle: https://registry.npmjs.org/@types/emscripten/-/emscripten-1.39.6.tgz uscan info: Filename (filenamemangled) for downloaded file: emscripten-types-1.39.6.tgz uscan info: Newest version of Xtypes on remote site is 1.39.6, local version is 1.39.6 uscan info: => Package is up to date from: => https://registry.npmjs.org/@types/emscripten/-/emscripten-1.39.6.tgz uscan info: Scan finished - Jonas - -- Package-specific info: - --- /etc/devscripts.conf --- Empty. - --- ~/.devscripts --- DEBSIGN_KEYID=2C7C3146C1A00121! NMUDIFF_MUTT=no - -- System Information: Debian Release: bookworm/sid APT prefers buildd-unstable APT policy: (500, 'buildd-unstable'), (500, 'unstable'), (1, 'buildd-experimental'), (1, 'experimental') Architecture: amd64 (x86_64) Kernel: Linux 5.14.0-4-amd64 (SMP w/2 CPU threads) Locale: LANG=da_DK.UTF-8, LC_CTYPE=da_DK.UTF-8 (charmap=UTF-8), LANGUAGE not set Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) LSM: AppArmor: enabled Versions of packages devscripts depends on: ii dpkg-dev 1.20.9 ii fakeroot 1.26-1 ii file 1:5.41-2 ii gnupg 2.2.27-2 ii gnupg2 2.2.27-2 ii gpgv 2.2.27-2 ii libc6 2.32-4 ii libfile-dirlist-perl 0.05-2 ii libfile-homedir-perl 1.006-1 ii libfile-touch-perl 0.12-1 ii libfile-which-perl 1.23-1 ii libipc-run-perl 20200505.0-1 ii libmoo-perl 2.005004-2 ii libwww-perl 6.58-1 ii patchutils 0.4.2-1 ii perl 5.32.1-6 ii pseudo [fakeroot] 1.9.0+git20200626+067950b-2 ii python3 3.9.8-1 ii sensible-utils 0.0.17 ii wdiff 1.2.2-2+b1 Versions of packages devscripts recommends: ii apt 2.3.13 ii curl 7.79.1-2 ii dctrl-tools 2.24-3+b1 ii debian-keyring 2021.09.25 ii dput-ng [dput] 1.33 ii dupload 2.9.7 ii equivs 2.3.1 ii libdistro-info-perl 1.1 ii libdpkg-perl 1.20.9 ii libencode-locale-perl 1.05-1.1 ii libgit-wrapper-perl 0.048-1 ii libgitlab-api-v4-perl 0.26-1 ii liblist-compare-perl 0.55-1 ii liblwp-protocol-https-perl 6.10-1 ii libsoap-lite-perl 1.27-1 ii libstring-shellquote-perl 1.04-1 ii libtry-tiny-perl 0.31-1 ii liburi-perl 5.10-1 ii licensecheck 3.2.14-2 ii lintian 2.114.0 ii man-db 2.9.4-2 ii patch 2.7.6-7 ii pristine-tar 1.49 ii python3-apt 2.3.0+b1 ii python3-debian 0.1.42 ii python3-magic 2:0.4.24-2 ii python3-requests 2.25.1+dfsg-2 ii python3-unidiff 0.5.5-2 ii python3-xdg 0.27-2 ii strace 5.10-1 ii unzip 6.0-26 ii wget 1.21.2-2+b1 ii xz-utils 5.2.5-2 Versions of packages devscripts suggests: pn adequate <none> pn at <none> pn autopkgtest <none> pn bls-standalone <none> ii bsd-mailx [mailx] 8.1.2-0.20180807cvs-2 ii build-essential 12.9 pn check-all-the-things <none> pn cvs-buildpackage <none> ii debhelper 13.5.2 pn diffoscope <none> pn disorderfs <none> ii dose-extra 6.0.1-2+b4 pn duck <none> pn elpa-devscripts <none> ii faketime 0.9.8-9 pn gnuplot <none> pn how-can-i-help <none> ii libauthen-sasl-perl 2.1600-1.1 pn libdbd-pg-perl <none> ii libfile-desktopentry-perl 0.22-2 pn libnet-smtps-perl <none> pn libterm-size-perl <none> ii libtimedate-perl 2.3300-2 pn libyaml-syck-perl <none> ii mmdebstrap 0.8.1-1 pn mozilla-devscripts <none> ii mutt 2.1.3-1 ii openssh-client [ssh-client] 1:8.7p1-2 pn piuparts <none> pn postgresql-client <none> pn pristine-lfs <none> ii quilt 0.66-2.1 pn ratt <none> pn reprotest <none> pn svn-buildpackage <none> ii w3m 0.5.3+git20210102-6 - -- no debconf information -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEn+Ppw2aRpp/1PMaELHwxRsGgASEFAmGnz6cACgkQLHwxRsGg ASF8Zw/+Jgj9uRTKEYkh2zfPIISzxMwG2mSimskRtozFovVxfJc/I5vh3ruqMDaP zP1InMPToIcWSEWt18k1oxt7y3xptuGjQ3RpGQG4OzBYAjRi35d8Dk5xieX589nE LQ3Q7Nr29ojZ2pqp25QEHzysG1xEwMkCYI3EZitahxyj1aITve18IuNYPzqEuB0R cEq4siX6SWWrDRi+dsu/AhwmmaWL6jKFQmHJ4uoZtfHEUuVTe4nziuhOSDi3+fpr 0KzJe1ZAIy/nKNIVgM7htJapLHCpCgvXMRPI5kHJ2PGMTQxNg3PFpgCzH7l+9IIr C0DPrcxw8D07YA5eVnXqVFfrBeL4ry7+NaFyXvFHH5Ay6nozz+kApjQoUhlaYRxh WEC5ZipAnSnpizmn4F7trbFxcSHLXGB/Lq8AW2gFrubxKD33Lq+z+wYh6sY6Yy9K 3TPwUg/WUWPQqvBuWl5cEBYWruL8AZOiFt9asga0H3cv4UVBk+5y+he7jlpu+MeY 7K7ciIeTBEQvkEgqdOEU2IAxnugLffdpFWLPX8o1x+5W497gEc+lcEZiiEHLgoJz pycFgDyE+5usd92bsvL2ymnJyr0TKMI2tTlMZSdQGQiqJHbruvdFphXx3qaPz1Gp NhIqeb3G5o3SLrW53+iYTUwN51nyc4khPeQI/jMq8nJQayxrXis= =EMGj -----END PGP SIGNATURE-----
