Hi Simon, Yes, and no. :)
The latest `imaginary` version `1.2.4` is using `gopkg.in/throttled/throttled.v2 v2.0.3`. See this from: https://github.com/h2non/imaginary/blob/v1.2.4/go.mod Unless we packaging the latest git HEAD that is using `github.com/throttled/throttled/v2 v2.15.0`. See this from: https://github.com/h2non/imaginary/blob/master/go.mod But this should be decided by maintainer with more tests. Best regards, -Andrew > > `gopkg.in/throttled/throttled.v2`(which is version 2.2.5). It should > > not use `github.com/throttled/throttled/v2` with version (>> 2.2.5). On Thu, Aug 27, 2026 at 1:56 PM Simon Josefsson <[email protected]> wrote: > > Hi > > Sounds like a good plan. I'm happy to help with the new properly named > package if needs to. > > However maybe we actually don't need to remove this package nor add a > new one. We could just bump 'golang-github-throttled-throttled' to > latest v2 upstream and close this bug. So many packages in Debian uses > > In theory, shouldn't the "proper" package name be > > golang-github-throttled-throttled-v2 > > ? > > The upstream go.mod import path is github.com/throttled/throttled/v2 > according to: > > https://github.com/throttled/throttled/blob/master/go.mod > https://github.com/throttled/throttled/blob/v2.15.0/go.mod > > The README on > > https://pkg.go.dev/gopkg.in/throttled/throttled.v2#section-readme > > says: > > Installation > go get -u github.com/throttled/throttled > > So I think imaginary should be using the recommended import path of > github.com/throttled/throttled and thus the Debian package > should follow that naming. > > I may be mistaken, of course, the naming rules are a bit complex... > > /Simon > > tor 2026-08-27 klockan 11:37 +0200 skrev Andrew Lee: > > Hi Simon, (cc'ed David) > > > > Thanks for finding this and filing a bug. > > > > This package is used by another package called `imaginary`: > > https://salsa.debian.org/go-team/packages/imaginary/-/blob/debian/sid/debian/patches/debian/0001-imaginary-throttled-package-update.patch > > > > If you search the Go import paths on https://pkg.go.dev, you can see > > their details on it's versioning and `go.mod` file: > > https://pkg.go.dev/gopkg.in/throttled/throttled.v2 > > https://pkg.go.dev/github.com/throttled/throttled/v2 > > > > This shows that `imaginary` needs > > `gopkg.in/throttled/throttled.v2`(which is version 2.2.5). It should > > not use `github.com/throttled/throttled/v2` with version (>> 2.2.5). > > > > So, we should fork and rename this package to > > `golang-gopkg-throttled-throttled.v2` to match its import path, and > > then update it to the latest version 2.2.5 instead of only removal > > it. > > After that, we can remove the hacks from `imaginary`. > > > > @David, could you please do the following? > > > > 1. Fork the repository under Go team namespace on salsa. > > 2. Rename the package and update vcs-tags to match its Go import path > > and new salsa repo path. > > 3. Update it to the latest version. > > 4. Remove your workaround patch from the `imaginary` package. > > > > I can review your MR and sponsor the upload. > > > > Best regards, > > -Andrew > > > > On Thu, Aug 27, 2026 at 9:23 AM Simon Josefsson <[email protected]> > > wrote: > > > > > > Package: golang-github-throttled-throttled > > > Severity: serious > > > Tags: sid forky > > > > > > This package ships upstream code (orig.tar) from 2019-12-20. It > > > has no > > > reverse dependencies in Debian testing, see dak output at the end > > > of > > > this e-mail. > > > > > > https://tracker.debian.org/pkg/golang-github-throttled-throttled > > > > > > Having golang-*-dev packages in testing, and consequently the next > > > stable release, has a QA cost. These packages normally have no use > > > for Debian users, but are intended for building other Debian > > > packages > > > that rely on them. No package in Debian testing rely on this > > > package. > > > > > > This bug is filed to trigger discussion if the package is still > > > useful > > > to keep in Debian testing, and also (when no discussion occurs > > > after > > > one week) trigger testing autoremoval of the package. > > > > > > Please don't take this as disrespect of the amount of work that > > > went > > > into the upstream code, or its packaging -- this bug report is part > > > of > > > a QA effort to remove 100+ unused golang-*-dev packages. The QA > > > cost > > > associated with keeping all the packages in testing is assumed to > > > be > > > larger than the cost to (hopefully rarely) have some discussion, > > > re-evaluation and closing of this bug report, if there is ever any > > > reasonable need to keep this package in testing. > > > > > > If you discover this bug report when doing QA work on this package, > > > please consider avoid doing any QA upload, and instead evaluate if > > > the > > > package still has any use in Debian, and consider re-assigning this > > > to > > > a ftp-master RM bug to finally trigger removal of it. > > > > > > /Simon > > > > > > ssh mirror.ftp-master.debian.org dak rm -Rn -s=testing golang- > > > github-throttled-throttled > > > Will remove the following packages from testing: > > > > > > golang-github-throttled-throttled | 2.2.4-3 | source > > > golang-github-throttled-throttled-dev | 2.2.4-3 | all > > > > > > Maintainer: Debian Go Packaging Team > > > <[email protected]> > > > > > > ------------------- Reason ------------------- > > > > > > ---------------------------------------------- > > > > > > Checking reverse dependencies... > > > No dependency problem found. > > > > -- -Andrew _______________________________________________ Pkg-go-maintainers mailing list [email protected] https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/pkg-go-maintainers
