#1028653 elan: dependency updates

Package:
elan
Source:
elan
Description:
tool for managing installations of the Lean theorem prover
Submitter:
Peter Green
Date:
2023-01-16 22:09:03 UTC
Severity:
normal
#1028653#5
Date:
2023-01-14 10:02:11 UTC
From:
To:
Severity: serious

01234567890123456789012345678901234567890123456789012345678901234567890123456789
elan build-depends on a number of unversioned clap feature packages. Some of
these are virtual packages provided by multiple versions of clap. Some of them
are also cruft physical packages which I would like to see crufted as I belive
they are the cause of spurious puiparts regressions in the testing migration
of rust-clap.

Your cargo dependency on clap is versioned as 2.33.3, per semver this allows
any 2.x version greater than or equal to 2.33.3. Therefore your
build-dependencies should be on librust-clap-3+{feature}-dev (>= 2.33.3).
(replacing {feature} with the requred feature).

Fortunately a couple of the features you use are currently only provided
by clap 2, so this can't cause a FTBFS with the current packages, but
there is the  potential for that to change in the future. Depending explicitly
on the required version also makes it easier to keep track of which software
is using which version of clap

Elan also build-depends on librust-zstd-dev, which was recently updated from
0.11 to 0.12, this means that the Debian dependency is satisfied but the cargo
dependency is not, causing your package to FTBFS. Because your Debian
dependencies did not reflect your cargo dependencies this dependency issue
will only show up in actual rebuild tests, not in mere archive metadata checks.

A debdiff updating the dependencies is attatched, if I get no response
I will likely NMU this in a week or so.
#1028653#10
Date:
2023-01-16 22:05:38 UTC
From:
To:
We believe that the bug you reported is fixed in the latest version of
elan, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1028653@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Christopher Hoskin <mans0954@debian.org> (supplier of updated elan package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Mon, 16 Jan 2023 21:17:12 +0000
Source: elan
Architecture: source
Version: 1.4.2-4
Distribution: unstable
Urgency: medium
Maintainer: Christopher Hoskin <mans0954@debian.org>
Changed-By: Christopher Hoskin <mans0954@debian.org>
Closes: 1028653 1028872
Changes:
 elan (1.4.2-4) unstable; urgency=medium
 .
   [ Peter Michael Green ]
   * Build-depend explicitly on clap 2.x (Closes: #1028653)
   * Update cargo dependency for zstd 0.11 and update Debian dependency
     to match. (Closes: #1028872)
 .
   [ Christopher Hoskin ]
   * Update copyright
Checksums-Sha1:
 3b2eee285db70dc9ff5320f9371faf7fff55afd1 2742 elan_1.4.2-4.dsc
 eacbf82ac90d3fdcd7bbae5f9337e0eb968a4e51 6404 elan_1.4.2-4.debian.tar.xz
 a52f115385bb4a43ca63d7aed2941e95954b18a9 18222 elan_1.4.2-4_amd64.buildinfo
Checksums-Sha256:
 b2f04eea8f867bd1548b02b45df6333e90cb3323c0994ea64d82b75a76b377c0 2742 elan_1.4.2-4.dsc
 56bfd88c405f2a00df07a1d6e14b19437b1a5066dfab16b48ddd44046d827e7f 6404 elan_1.4.2-4.debian.tar.xz
 29fbce2a3efe3630651867bd77a8634b7bac67db1d822d73155f4c6ee12c1cf2 18222 elan_1.4.2-4_amd64.buildinfo
Files:
 31d6ac2595e225f04b61268da5ae8718 2742 math optional elan_1.4.2-4.dsc
 9bbd56253c58123a252271081a28fbaa 6404 math optional elan_1.4.2-4.debian.tar.xz
 9a7dfd3ccbe40a21a5e5893e1c764352 18222 math optional elan_1.4.2-4_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEbctJ5K6JlvFsvhGhf6qUsnUUSpoFAmPFv64ACgkQf6qUsnUU
SpoOZw/+JgoR0xwdhu2NeHOW2mgdZK8mWEk//nJtJihxI2SUjqDmrDYtnZLY1t2x
Ys5BquLW688WtV0kaJi+SUpFf0FhlT1eHZ66AQnbgwFHREj7yuKIcgzaU1YhsY7z
9iBG2xoY3JY/a2A019sn4J+qrVHGLet1dJtiASsiBfQ4hFllP44G7tsIe3KLBCnE
ykgdOBljd7a2eBAAbscMXaCm2AmtpnvgwxtyDBw5VAH1ch1P6mtL7l2YeiFldRLZ
YvLH0++71LN/RTCKcUgfDcsvW3RjmwCyWRLuZwQ33oQOP06rcSvUvmpg5VP0snCf
U+8U9wkkthbNeDPHpObRNUXo+KjHtPBxtRbEBr4kWtS1uIldl+XA5qRZV11z+O2V
ELiRtibAA/++hSrDnQEZlhvu6rlCj7mRAA7KI29GDQygCeuZd42nGrMxDIywEzlw
ncQyX1Wz9LEJ2OE5+R3bsIdaKg45nmkxJKVnQeBGAgaTmGIO5sgThmbjibmnK+cu
IUnBygc5402l9hJI3TRqkcaeE5fHNKpzx4p2Ji09N1dhQg9b+WCwS4UqovheU3U7
JQUAYRTCL4vUCEXcUcUqpcasPJw08M++DJx6M1Y7BSJZe4oztuBzroyIFG2QArE6
p97RqPsz8X+0wMcQLGcApxJRu02A/aOb8XIUry3IdmJTMhK0jDQ=
=tjpK
-----END PGP SIGNATURE-----