Your message dated Fri, 11 Sep 2026 17:04:34 +0000
with message-id <[email protected]>
and subject line Bug#1083440: fixed in in-toto 2.0.0-1.1
has caused the Debian Bug report #1083440,
regarding in-toto: (build-)depends on deprecated module python3-pkg-resources
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1083440: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1083440
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: src:in-toto
Version: 2.0.0-1
Severity: normal
Tags: sid trixie
User: [email protected]
Usertags: pkg-resources-deprecation
[This bug is targeted to the upcoming trixie release]
The package build-depends or depends on python3-pkg-resources, which is
deprecated upstream. Details can be found at
https://setuptools.pypa.io/en/latest/pkg_resources.html
Use of pkg_resources is deprecated in favor of importlib.resources,
importlib.metadata and their backports (importlib_resources,
importlib_metadata).
Some useful APIs are also provided by packaging (e.g. requirements and version
parsing). Users should refrain from new usage of pkg_resources and should work
to port to importlib-based solutions.
Python 3.12 in unstable provides both importlib_resources and
importlib_metadata, so no additional dependencies on those packages are needed.
--- End Message ---
--- Begin Message ---
Source: in-toto
Source-Version: 2.0.0-1.1
Done: Alexandre Detiste <[email protected]>
We believe that the bug you reported is fixed in the latest version of
in-toto, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Alexandre Detiste <[email protected]> (supplier of updated in-toto package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Fri, 11 Sep 2026 18:45:25 +0200
Source: in-toto
Architecture: source
Version: 2.0.0-1.1
Distribution: unstable
Urgency: medium
Maintainer: in-toto developers <[email protected]>
Changed-By: Alexandre Detiste <[email protected]>
Closes: 1083440
Changes:
in-toto (2.0.0-1.1) unstable; urgency=medium
.
* Non-maintainer upload.
* Drop unused python3-pkg-resources runtime dep. (Closes: #1083440)
* Drop unused build-dependency on python3-six
Checksums-Sha1:
be01649b5c36fce01f622a81ce56ed5b011218f7 2473 in-toto_2.0.0-1.1.dsc
fc5cb4f3b32ab0c0082e8b37667a764e363d939a 11860 in-toto_2.0.0-1.1.debian.tar.xz
618166311dca033b14de8dd0a8aef404f934fe54 10866
in-toto_2.0.0-1.1_source.buildinfo
Checksums-Sha256:
427825f9ca8499eaa0b8fe7922a0a318086e6cd6209dca6d9306dbc4b7848f10 2473
in-toto_2.0.0-1.1.dsc
c3f6d1e3108e9cedce06bd69408e8fdbf4b96e4d1555c43dbd971853191aad8a 11860
in-toto_2.0.0-1.1.debian.tar.xz
893532891701224c36e0c0078913dbd6c824541a7d3db722a47017f16519d21e 10866
in-toto_2.0.0-1.1_source.buildinfo
Files:
8dcb520344d0b27fb2960b687e96df3b 2473 utils optional in-toto_2.0.0-1.1.dsc
9df75b4b9378a3b87a73f77e1cb6e455 11860 utils optional
in-toto_2.0.0-1.1.debian.tar.xz
a6697de4af514e748cbc3492492f80d8 10866 utils optional
in-toto_2.0.0-1.1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=h9xh
-----END PGP SIGNATURE-----
pgp605uQ1wdeP.pgp
Description: PGP signature
--- End Message ---
