Hi FTP-masters (cc d-devel list),

A package, that I had initially introduced to Debian some months ago and
had been pending in NEW queue since, was rejected few days ago, like
this:

Quoting Debian FTP Masters (2024-05-14 12:00:12)

An exception was raised while processing the package:
Traceback (most recent call last):
File "/srv/ftp-master.debian.org/dak/dak/process_policy.py", line 121, in wrapper
function(upload, srcqueue, comments, transaction)
File "/srv/ftp-master.debian.org/dak/dak/process_policy.py", line 248, in comment_accept
transaction.copy_binary(
File "/srv/ftp-master.debian.org/dak/daklib/archive.py", line 390, in copy_binary
self._ensure_extra_source_exists(filename, db_source, archive, extra_archives=extra_archives)
File "/srv/ftp-master.debian.org/dak/daklib/archive.py", line 214, in _ensure_extra_source_exists
raise ArchiveException('{0}: Built-Using refers to package {1} (= {2}) not in target archive {3}.'.format(filename, source.source, source.version, archive.archive_name))
daklib.archive.ArchiveException: p/pandoc-filter-diagram/pandoc-filter-diagram_0.2.1-1_amd64.deb: Built-Using refers to package rust-ahash (= 0.8.9-2) not in target archive ftp-master.

I it correct to derive from the above, that packages in NEW queue must
be freshly built, and that I (and we, generally) therefore should
routinely rebuild packages pending in NEW queue to ensure that they are acceptably?

Just to clarify, the package in question does not directly depend on
rust-ahash 0.8.9-2, that Built-Using information is (as is the general
purpose of that field, I believe) transitive.

Kind regards,

- Jonas

--
* Jonas Smedegaard - idealist & Internet-arkitekt
* Tlf.: +45 40843136 Website: http://dr.jones.dk/
* Sponsorship: https://ko-fi.com/drjones

[x] quote me freely [ ] ask before reusing [ ] keep private --==============078723152308573362=MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Description: signature
Content-Type: application/pgp-signature; name="signature.asc"; charset="us-ascii"

-----BEGIN PGP SIGNATURE-----

iQIzBAABCgAdFiEEn+Ppw2aRpp/1PMaELHwxRsGgASEFAmZFxTsACgkQLHwxRsGg ASG34A/6AyvODwSUEFHh/7LLS1CY52s67Efe68uIIxx8tEgD3C6TfPuo0noBSLZC nGjCul0vkoVFRke8cSo1JucOg+yHkVNO1xNjgMMfjY+XKFzq/nsomw1rOETH+ahZ I/VoDH4HKsJyo/E/4qtN2MyZbKsMC3IOhP1lxh5qKrpG23XQiJFMXNAtTY1T4bPe uXLvpTvU0Q+l5z+Br33Zk2pekd3l8Oo0xkXTh6RyT6/eLYvtdm54hSGWrXWG6HOX z/WAsAHAB0JUezHX+v44a6Jesz2jIiOW03L0/P9uEIBr0vo5FA//1HC1LYtMnyVb sf5PQEyBbMDwLBMwGdcHNRRKL6hzaKeAo3Pgco6mr6fyZmlWh8SEtYSEE72lDVjN s8KN1XXtTw0SDG+UdAwBpBMrntTH6P8ENqiUr8X8mXZnZm4Rtr5UsYCvvxfhdZxx dJc+Ksgbg9m8MXL8Ssz7ov/SR/XPcqIJQvBJb2pE

To: ftpmaster@ftp-master.debian.org (Debian FTP Masters)
Copy: debian-devel@lists.debian.org (Debian developers)

This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --------------bSmwHcqYYlWoNt8QHEVU8rl0
Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: base64

SGkgSm9uYXMsDQoNCk9uIDE2LTA1LTIwMjQgMTA6MzUgYS5tLiwgSm9uYXMgU21lZGVnYWFy ZCB3cm90ZToNCj4gSnVzdCB0byBjbGFyaWZ5LCB0aGUgcGFja2FnZSBpbiBxdWVzdGlvbiBk b2VzIG5vdCBkaXJlY3RseSBkZXBlbmQgb24NCj4gcnVzdC1haGFzaCAwLjguOS0yLCB0aGF0 IEJ1aWx0LVVzaW5nIGluZm9ybWF0aW9uIGlzIChhcyBpcyB0aGUgZ2VuZXJhbA0KPiBwdXJw b3NlIG9mIHRoYXQgZmllbGQsIEkgYmVsaWV2ZSkgdHJhbnNpdGl2ZS4NCg0KQnVpbHQtVXNp bmcgaXMgdXNlZCBmb3IgbGljZW5zZSBjb21wbGlhbmNlIHNvIHdlIEhBVkUgVE8gaGF2ZSB0 aGUgZXhhY3QgDQp2ZXJzaW9uIGluIHRoZSBhcmNoaXZlLiBJZiB0aGUgdmVyc2lvbiBtZW50 aW9uZWQgaW4gdGhlIEJ1aWx0LVVzaW5nIA0KZmllbGQgaXMgbm8gbG9uZ2VyIGluIHRoZSBh cmNoaXZlLCB0aGUgcGFja2FnZSBjYW4ndCBiZSBhY2NlcHRlZC4NCg0KUGF1bA0KUFM6IEkn bSBubyBmdHAtbWFzdGVyDQo=

--------------bSmwHcqYYlWoNt8QHEVU8rl0--

-----BEGIN PGP SIGNATURE-----

wsB5BAABCAAjFiEEWLZtSHNr6TsFLeZynFyZ6wW9dQoFAmZF0/IFAwAAAAAACgkQnFyZ6wW9dQqi zAf/YXeBs0Lt3uEKyTA3Vb47p0GMBl/Ut5CQy5fzrgzIlm3F3jBe9Ohyq+s9KfgHw04HQVfUls5B y/00t0AJyjRd8ElWbSSExuH2ZyaHfa4E7NLUaSU8hDFvJP4hnN2/jy6lo1FbbKk0630CChHp62UK vshTEJK0l3D1JeBZwOF5HMJNe890PCpGprgiWh8T74wcpjTbtcioXIZd02TYTesZfyVouRbAXbYB Hpk6B8SP60VQWkMp6NjyESBLEw5Wp94zl3uXi2yUgBHE9IkWbV7GRTNVBFZ0ee1ZjXvX/Crcou2C +PY57wwjgjNoSqyA3R3ciAPxUSiStf7PMeThmvh/aw==
=NksJ
-----END PGP SIGNATURE-----

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)

On Thu, May 16, 2024 at 4:35 PM Jonas Smedegaard <dr@jones.dk> wrote:

Hi FTP-masters (cc d-devel list),

A package, that I had initially introduced to Debian some months ago and
had been pending in NEW queue since, was rejected few days ago, like
this:

Quoting Debian FTP Masters (2024-05-14 12:00:12)

An exception was raised while processing the package:
Traceback (most recent call last):
File "/srv/ftp-master.debian.org/dak/dak/process_policy.py", line 121, in wrapper
function(upload, srcqueue, comments, transaction)
File "/srv/ftp-master.debian.org/dak/dak/process_policy.py", line 248, in comment_accept
transaction.copy_binary(
File "/srv/ftp-master.debian.org/dak/daklib/archive.py", line 390, in copy_binary
self._ensure_extra_source_exists(filename, db_source, archive, extra_archives=extra_archives)
File "/srv/ftp-master.debian.org/dak/daklib/archive.py", line 214, in _ensure_extra_source_exists
raise ArchiveException('{0}: Built-Using refers to package {1} (= {2}) not in target archive {3}.'.format(filename, source.source, source.version, archive.archive_name))
daklib.archive.ArchiveException: p/pandoc-filter-diagram/pandoc-filter-diagram_0.2.1-1_amd64.deb: Built-Using refers to package rust-ahash (= 0.8.9-2) not in target archive ftp-master.

I it correct to derive from the above, that packages in NEW queue must
be freshly built, and that I (and we, generally) therefore should
routinely rebuild packages pending in NEW queue to ensure that they are acceptably?

Not a ftp-master, but if you see such a message, it means that your
package has already been accepted, and you can continue uploading
without going through the NEW queue again.

--
Shengjing Zhu

--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)

Quoting Paul Gevers (2024-05-16 11:37:54)

On 16-05-2024 10:35 a.m., Jonas Smedegaard wrote:

Just to clarify, the package in question does not directly depend on rust-ahash 0.8.9-2, that Built-Using information is (as is the general purpose of that field, I believe) transitive.

Built-Using is used for license compliance so we HAVE TO have the exact version in the archive. If the version mentioned in the Built-Using
field is no longer in the archive, the package can't be accepted.

Makes great sense. Thanks, Paul.

I will try in future to pay attention specifically to Built-Using for long-pending NEW packages.

- Jonas

--
* Jonas Smedegaard - idealist & Internet-arkitekt
* Tlf.: +45 40843136 Website: http://dr.jones.dk/
* Sponsorship: https://ko-fi.com/drjones

[x] quote me freely [ ] ask before reusing [ ] keep private --==============F62207426178634404=MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Description: signature
Content-Type: application/pgp-signature; name="signature.asc"; charset="us-ascii"

-----BEGIN PGP SIGNATURE-----

iQIzBAABCgAdFiEEn+Ppw2aRpp/1PMaELHwxRsGgASEFAmZF4fYACgkQLHwxRsGg ASHu+A/+NPymKH7TZ0/MeJjtvFJJJpiq3eSRKsqj6ifvBjrc+UPM7JrVhn+ZWOpP Ob727Cxt+MG1BW2DcRtf1w5u8UQKd7S53J37VPM8Fe0ZpXwYCeu+UTOw5QzadCdI 6xKsSg/gJCgh94uZl+69/65MIavqTOmr7MNHvgjj5hx4KmKNe3Y2l91Fg5NweVKn qj0GR/Ida2xWwD+jZvpiIWJ3P4Ttx/Gs1e69jVXYICVwpgrw2PgDgIGHugi0xSf0 WnRXVbQPZmxdEfhXSgBr4Ckzk5I5qm2TIVS+aK1WePVG99Lkh52vcJJdi8ocSrRT ovlcvxLNcJGo+vrg4MQxFw1B7Wp1g5lSFoOVMSKeFGNLdBQBWZLgce3NTehwn1fA fEzgw+95J2/wIgNyoLaQfCqo0GeA8sypj8Q9XKud/c979RR+lHO3cSRkqEQwjjPG rVUjuHoO0tHmsxFsTbFKsE56Je6876/Lo/3EVT+B

Quoting Shengjing Zhu (2024-05-16 12:14:57)

On Thu, May 16, 2024 at 4:35 PM Jonas Smedegaard <dr@jones.dk> wrote:

Hi FTP-masters (cc d-devel list),

A package, that I had initially introduced to Debian some months ago and had been pending in NEW queue since, was rejected few days ago, like
this:

Quoting Debian FTP Masters (2024-05-14 12:00:12)

An exception was raised while processing the package:
Traceback (most recent call last):
File "/srv/ftp-master.debian.org/dak/dak/process_policy.py", line 121, in wrapper
function(upload, srcqueue, comments, transaction)
File "/srv/ftp-master.debian.org/dak/dak/process_policy.py", line 248, in comment_accept
transaction.copy_binary(
File "/srv/ftp-master.debian.org/dak/daklib/archive.py", line 390, in copy_binary
self._ensure_extra_source_exists(filename, db_source, archive, extra_archives=extra_archives)
File "/srv/ftp-master.debian.org/dak/daklib/archive.py", line 214, in _ensure_extra_source_exists
raise ArchiveException('{0}: Built-Using refers to package {1} (= {2}) not in target archive {3}.'.format(filename, source.source, source.version, archive.archive_name))
daklib.archive.ArchiveException: p/pandoc-filter-diagram/pandoc-filter-diagram_0.2.1-1_amd64.deb: Built-Using refers to package rust-ahash (= 0.8.9-2) not in target archive ftp-master.

I it correct to derive from the above, that packages in NEW queue must
be freshly built, and that I (and we, generally) therefore should
routinely rebuild packages pending in NEW queue to ensure that they are acceptably?

Not a ftp-master, but if you see such a message, it means that your
package has already been accepted, and you can continue uploading
without going through the NEW queue again.

Thanks, Shengjing Zhu - you are right, althought the concrete *release*
of the package was rejected, the package was nonetheless approved.

Confusing. I learned something new that day.

- Jonas

--
* Jonas Smedegaard - idealist & Internet-arkitekt
* Tlf.: +45 40843136 Website: http://dr.jones.dk/
* Sponsorship: https://ko-fi.com/drjones

[x] quote me freely [ ] ask before reusing [ ] keep private --==============q83326450792203826=MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Description: signature
Content-Type: application/pgp-signature; name="signature.asc"; charset="us-ascii"

-----BEGIN PGP SIGNATURE-----

iQIzBAABCgAdFiEEn+Ppw2aRpp/1PMaELHwxRsGgASEFAmZZcT0ACgkQLHwxRsGg ASHPwQ//Sl8rT4qJtt5zofrks56A6TevdajmkXjiiiME1VzULBFpW0GzhQmTMHUR owvK7SoutvJEJmTLGEel7Qx2YGHGnEo+3geGhXLn/R9S+h3lV4tVaNdfsEFlmRQq sNP3e4vBx121i9xwpbC/eYOx4QhxRh6M9E8aN7Bksx95BCNg0F1zXSMY2/twO+Sb g4lfcwClILzxGESgFcsbW3N9N1P3+aj4H0AYnT84UCrcPQBTIXCvTzIdDCU9vQZC JmSdsSr/y83jnJZJQPNSr6p3lG3hTDCw4OL0Y1ZsmrgIUvKSxhmZbMqggiY+65OU dmdJakij/19Iwq2wkSoXJmVopWSYytxwC1JLhODjofi/Mnm6iJXhTTCM1RJdRhvs dpcFEQnrvrmtfUSbBdhxoDWJxP7sorhqe9Zwk7Z6uzcrZABbzQpw6klchcmssv5x 13aj2JKcJbS/cHXHG8f9SkPAvRxNbZix0kwKnw9J