Thanks for the quick investigation and fix! :) I know we're in kind of a pseudo-transition period where some Go packages have switched over to dh-go in their Build-Depends; as we collectively get more experience with the module-aware builds I think we'll become familiar with common errors or other issues that may crop up.
On Sat, 2026-10-24 at 00:14 +0800, Otto Kekäläinen wrote: > Thanks for reporting. We did do a reverse deps build test before > upload and both sigstore packages built fine. Interesting to learn > that this distrobuilder was also dependant of it. Yeah, somewhere in the dependencies of distrobuilder go-tuf exists.... it's interesting to note that `build-rdeps golang-github- theupdateframework-go-tuf-dev` does report 26 reverse dependencies for this library, and distrobuilder is among them. I know that command is also reporting more than immediate, first-level dependencies too. Mathias
signature.asc
Description: This is a digitally signed message part
