Public bug reported:
[Availability]
Source-only package currently available in universe.
[Rationale]
Build-dependency for juju. This is part of our on-going work for bug 1508120,
to stop bundling our dependencies in our source package.
[Security]
This is a source package which will only be used by other Go projects that
build-depend on it.
Standard practices in the Go ecosystem unfortunately is not to do any
release/tag, nor publish changelogs, bugfix announcements or other advisory
information.
Most of those projects will therefore have a 0.0+git-hash kind of version
scheme for their packaged form.
Update to those will typically be a completely new snapshot and refresh of
their downstreams to match or be a one-off cherry-pick after a specific issue
is reported.
[Quality assurance]
Source-only, arch:all package.
There are currently no bug reports filed against this source package.
The package is either maintained in Debian or maintained by its upstream
directly in Ubuntu.
Most of those packages do not have a debian/watch file due to their upstream
never pushing out versioned releases.
[Dependencies]
We are only interested in the -dev source-only package. None of those have
build-dependencies due to being source-only.
[Maintenance]
This package already has a maintainer, and exists in the archive already.
The Juju QA team has been subscribed to all bug mails for this package, and all
others which we are requesting promotion into main as part of of work on bug
1508120.
[Background information]
These MIRs are being filed in support of the ongoing work on bug 1508120, at
the behest of the Security team, and the FFe for juju-core's inclusion in main
for xenial, bug 1545913.
Note, the juju package will continue to bundle this dependency for trusty and
older release, due to lack of go support and resources to backport and maintain
these dependencies in trusty. However, these dependencies are used for all new
builds, and have priority whenever present. This is in-line with the security
team's recommendations and agreement as part of bug 1508120.
** Affects: golang-golang-x-oauth2 (Ubuntu)
Importance: Undecided
Status: New
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1568165
Title:
[MIR] golang-golang-x-oauth2
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/golang-golang-x-oauth2/+bug/1568165/+subscriptions
--
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
