Hi Simon, On Tue, Jul 14, 2026 at 11:43 AM Simon Josefsson <[email protected]> wrote: > > "Dr. Tobias Quathamer" <[email protected]> writes: > > > golang-github-cespare-xxhash > > I think this is a false positive -- I don't see any added go.mod after > rebuilding. Could you analyze why your script identified this package? > There could be more like it. > > https://packages.debian.org/sid/all/golang-github-cespare-xxhash-dev/filelist > > /usr/share/gocode/src/github.com/cespare/xxhash/go.mod > /usr/share/gocode/src/github.com/cespare/xxhash/go.sum
I tried to rebuild ratt in phase 2. I got: dh_auto_build -O--builddirectory=debian/.build/upstream -O--buildsystem=golang go: workspace module github.com/cespare/xxhash/v2 is replaced at all versions in the go.work file. To fix, remove the replacement from the go.work file or specify the version at which to replace the module. cd debian/.build/upstream && go install -trimpath -v -p 14 The XS-Go-Import-Path in golang-github-cespare-xxhash mismatch with the go.mod file. We should update XS-Go-Import-Path and also create a debian/links for legacy path: usr/share/gocode/src/github.com/cespare/xxhash/v2 usr/share/gocode/src/github.com/cespare/xxhash Best regards, -- -Andrew
