On Sat, 10 Aug 2019 at 01:54, Stéphane Glondu <glo...@debian.org> wrote: > > Source: zeroinstall-injector > Version: 2.12.3-2 > Severity: serious > > Dear Maintainer, > > zeroinstall-injector build depends on obus, which is affected by > [1]. According to [2], it is an optional dependency. Please provide a > version of zeroinstall-injector without the dependency on obus.
obus is only optional on systems that don't use D-BUS. It is needed on Debian. https://github.com/ocaml-community/obus/blob/master/CHANGES.md says: 1.2.0 (2019-07-04) - remove all Camlp4 dependencies So I think Debian can just update to that. > It also seems that the latest upstream version of zeroinstall-injector > is buildable without camlp4. Please drop the dependency in the Debian > package as well. I don't believe there is a dependency in the Debian package at the moment (except indirectly via Debian's old version of obus). According to https://github.com/0install/0install-debian/commit/dbea82da611eb9091cf36cbf8668dd40b8915057 the direct dependency was removed on Sun, 19 Nov 2017. > [1] https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=933992 > [2] https://opam.ocaml.org/packages/0install/ -- talex5 (GitHub/Twitter) http://roscidus.com/blog/ GPG: 5DD5 8D70 899C 454A 966D 6A51 7513 3C8F 94F6 E0CC