Hi Sven! On Fri, Dec 11, 2020 at 11:17:55AM +0100, Sven Mueller wrote: > libopencensus-java is used via libgoogle-http-client-java > ... > So libopencensus-java depends on grpc-context in io.grpc (provided by > package libgrpc-java). > But it turns out that we rebuild against debian-testing as of early > November, which had version: 0.23.0+ds-1 - and that had no declared > dependency on libgrpc-java. > 0.24.0-1 does have that dependency.
I am glad that you brought this to the list. It gives us an opportunity to talk about this type of ephemeral bug with transitive dependencies. The package was FTBFS in testing and the declared dependencies didn't help expose that. In retrospect, what I should have done is either: (a) declare a versioned dependency on libopencensus-java (which seems wrong, because it's not the actual version of opencensus that makes the difference); or (b) add libgrpc-java to the build-deps for anything that uses opencensus, as you suggested. Or at a minimum, we could have filed a bug against libopencensus-java and marked it as affecting all reverse build-deps. So, my apologies for the confusion this created. Even though it is resolved now, it could bite us during a backport, so I am going to add the dependency on libgrpc-java in the next upload. Thank you, tony
signature.asc
Description: PGP signature
