Your message dated Fri, 16 Jun 2023 04:22:00 +0000
with message-id <e1qa0yg-00gtlf...@fasolo.debian.org>
and subject line Bug#1037064: fixed in maven-verifier 1.8.0-2
has caused the Debian Bug report #1037064,
regarding maven-verifier depends on downloading sources at build time
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
1037064: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1037064
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Source: maven-verifier
Version: 1.8.0-1
Severity: serious
Justification: package in main has dependency on external software
User: ubuntu-de...@lists.ubuntu.com
Usertags: origin-ubuntu mantic
Dear maintainers,
maven-verifier 1.8.0-1 has been failing to build in Ubuntu, because its
build-time tests depend on downloading software from the Internet:
[...]
[ERROR] testWithMavenHome(org.apache.maven.it.Embedded3xLauncherTest) Time
elapsed: 0.581 s <<< FAILURE!
java.lang.AssertionError:
exit code unexpected, build log:
[INFO] Scanning for projects...
Downloading from central:
https://repo.maven.apache.org/maven2/org/apache/maven/shared/maven-shared-components/18/maven-shared-components-18.pom
[ERROR] [ERROR] Some problems were encountered while processing the POMs:
[FATAL] Non-resolvable parent POM for
org.apache.maven.shared:maven-verifier:1.4-SNAPSHOT: Could not transfer
artifact org.apache.maven.shared:maven-shared-components:pom:18 from/to central
(https://repo.maven.apache.org/maven2): transfer failed for
https://repo.maven.apache.org/maven2/org/apache/maven/shared/maven-shared-components/18/maven-shared-components-18.pom
and 'parent.relativePath' points at wrong local POM @ line 23, column 11
@
[...]
(https://launchpad.net/ubuntu/+source/maven-verifier/1.8.0-1/+build/26010073)
This fails because Launchpad does not allow network access during package
builds, unlike Debian buildds which usually have network access.
While this is not a build failure, it does mean building the package has a
dependency on software outside of main, which I believe is a serious policy
violation.
libmaven-parent-java ships maven-shared-components-35.pom and maven-verifier
build-depends on libmaven-parent-java. So perhaps src/test/resources/pom.xml
simply needs updated to point at the current version instead of version 18?
--
Steve Langasek Give me a lever long enough and a Free OS
Debian Developer to set it on, and I can move the world.
Ubuntu Developer https://www.debian.org/
slanga...@ubuntu.com vor...@debian.org
signature.asc
Description: PGP signature
--- End Message ---
--- Begin Message ---
Source: maven-verifier
Source-Version: 1.8.0-2
Done: tony mancill <tmanc...@debian.org>
We believe that the bug you reported is fixed in the latest version of
maven-verifier, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to 1037...@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
tony mancill <tmanc...@debian.org> (supplier of updated maven-verifier package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmas...@ftp-master.debian.org)
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Thu, 15 Jun 2023 20:13:15 -0700
Source: maven-verifier
Architecture: source
Version: 1.8.0-2
Distribution: unstable
Urgency: medium
Maintainer: Debian Java Maintainers
<pkg-java-maintain...@lists.alioth.debian.org>
Changed-By: tony mancill <tmanc...@debian.org>
Closes: 1037064
Changes:
maven-verifier (1.8.0-2) unstable; urgency=medium
.
* Team upload.
* Rework tests patch to disable network access (Closes: #1037064)
* Freshen years in debian/copyright
* Set Rules-Requires-Root: no in debian/control
Checksums-Sha1:
2bea4f4d360a67b33526cb25bec54f0c51d8ee44 2244 maven-verifier_1.8.0-2.dsc
f4fa6106900dd0ec326c13bf0eeaf4ec99d2a05b 4148
maven-verifier_1.8.0-2.debian.tar.xz
7eb163709fdd64b128235e18661da9feab9db0d4 13732
maven-verifier_1.8.0-2_amd64.buildinfo
Checksums-Sha256:
f1f5a06273f401273b045d22a61a8c815cbed6bfdbb1ee944f5672a8a729076e 2244
maven-verifier_1.8.0-2.dsc
617e7096c8031d7ffefb9fa6a512f5905700284d82eace4166751534ed071f56 4148
maven-verifier_1.8.0-2.debian.tar.xz
b6c0afd8e9242f0eecba2b67f4233a23a38742fa817286aa10ae0b1422fb2603 13732
maven-verifier_1.8.0-2_amd64.buildinfo
Files:
f170a5615c99892370015c4ed0b80992 2244 java optional maven-verifier_1.8.0-2.dsc
86e56b335ebfd532e3dbdb177dfeca8d 4148 java optional
maven-verifier_1.8.0-2.debian.tar.xz
7bf3b3d4e36cd4bc49a29e521375b3b3 13732 java optional
maven-verifier_1.8.0-2_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----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=2a0j
-----END PGP SIGNATURE-----
--- End Message ---
