Public bug reported:

[Availability]
Source-only package currently available in universe.

[Rationale]
Build-dependency for juju. This is part of our on-going work for bug 1508120, 
to stop bundling our dependencies in our source package.

[Security]
This is a source package which will only be used by other Go projects that 
build-depend on it.
Standard practices in the Go ecosystem unfortunately is not to do any 
release/tag, nor publish changelogs, bugfix announcements or other advisory 
information.
Most of those projects will therefore have a 0.0+git-hash kind of version 
scheme for their packaged form.
Update to those will typically be a completely new snapshot and refresh of 
their downstreams to match or be a one-off cherry-pick after a specific issue 
is reported.

[Quality assurance]
Source-only, arch:all package.
There are currently no bug reports filed against this source package.
The package is either maintained in Debian or maintained by its upstream 
directly in Ubuntu.
Most of those packages do not have a debian/watch file due to their upstream 
never pushing out versioned releases.

[Dependencies]
We are only interested in the -dev source-only package. None of those have 
build-dependencies due to being source-only.

[Maintenance]
This package already has a maintainer, and exists in the archive already.
The Juju QA team has been subscribed to all bug mails for this package, and all 
others which we are requesting promotion into main as part of of work on bug 
1508120.

[Background information]
These MIRs are being filed in support of the ongoing work on bug 1508120, at 
the behest of the Security team, and the FFe for juju-core's inclusion in main 
for xenial, bug 1545913.


Note, the juju package will continue to bundle this dependency for trusty and 
older release, due to lack of go support and resources to backport and maintain 
these dependencies in trusty. However, these dependencies are used for all new 
builds, and have priority whenever present. This is in-line with the security 
team's recommendations and agreement as part of bug 1508120.

** Affects: golang-google-api (Ubuntu)
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1568163

Title:
  [MIR] golang-google-api

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/golang-google-api/+bug/1568163/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to