Re: tag2upload's support of pristine-tar missing and potential regression in upstream signature verification (Re: Include git commit id and git tree id in *.changes files when uploading?)

Mon, 22 Dec 2025 02:16:44 -0800 

Hello,

On Sun 21 Dec 2025 at 10:35pm +01, Simon Josefsson wrote:

> Given how things are designed right now, I think it is a good idea to
> not pollute the dgit view with non-Debian tags.  How to authenticate
> what is a "upstream tag" and what is not?  What to do when upstream
> modify the tags?  Or changes the content of the tag?  If you rename
> tags, how to deal with tags that carry semantic information used during
> the build?

I think the answer to most of these questions is easy.  It's the version
of the tag that is referenced in the signed tag made by the maintainer
with git-debpush.

-- 
Sean Whitton

Attachment: signature.asc
Description: PGP signature

Reply via email to