I think Tyler's proposal makes sense. I maintain snapd with unbundled dependencies in Debian sid, and it's really not been very painful.
One thing we want is for snapd to fairly closely track new versions of its dependencies; any security fixes are likely to be developed for the tip of the dependency fixed, and we want it to be easy to backport any fixes to the version snapd is using. The proposal is a step in that direction. (Ironically, a test failed in snapd in debian builds because one dependency is newer in Debian than the version snapd vendors). -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1658181 Title: snapd bundles golang dependencies despite being in main To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/snapd/+bug/1658181/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs