[This bug is targeted to the upcoming trixie release]

The package build-depends or depends on python3-pkg-resources, which is
deprecated upstream. Details can be found at

https://setuptools.pypa.io/en/latest/pkg_resources.html

Use of pkg_resources is deprecated in favor of importlib.resources,
importlib.metadata and their backports (importlib_resources, importlib_metadata).
Some useful APIs are also provided by packaging (e.g. requirements and version
parsing). Users should refrain from new usage of pkg_resources and should work
to port to importlib-based solutions.

Python 3.12 in unstable provides both importlib_resources and
importlib_metadata, so no additional dependencies on those packages are needed.

We believe that the bug you reported is fixed in the latest version of
cylc-flow, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1083351@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Alastair McKinstry <mckinstry@debian.org> (supplier of updated cylc-flow package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Thu, 10 Oct 2024 15:15:41 +0100
Source: cylc-flow
Architecture: source
Version: 8.2.3-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Science Maintainers <debian-science-maintainers@lists.alioth.debian.org>
Changed-By: Alastair McKinstry <mckinstry@debian.org>
Closes: 1083351
Changes:
 cylc-flow (8.2.3-1) unstable; urgency=medium
 .
   * New upstream release
   * Standards-Version: 4.6.2
   * Set Debian Science Maint. as maintainer
   * Fix broken vcs url
   * Standards-Version: 4.7.0; no changes required
   * bash-completion name change; fix d/rules
   * Drop Dep on pkg-resources; unnecessary. Closes: #1083351
Checksums-Sha1:
 cca36913ed400dbca79d71cfc3404b491c361587 2171 cylc-flow_8.2.3-1.dsc
 362268b50e96cce04ffa40e7b1327795879388a6 872720 cylc-flow_8.2.3.orig.tar.xz
 0259eee63c854ad534dd07e3b563e533b0ca85b2 8692 cylc-flow_8.2.3-1.debian.tar.xz
Checksums-Sha256:
 031779eb4322e45c57fad343ef6528159f0ca5737a0c0acc69b870cfb92b88c1 2171 cylc-flow_8.2.3-1.dsc
 49e2249f6844f05a44a1d77416e6d291184f5c79f3b6b5705915c8ce20c5e5cf 872720 cylc-flow_8.2.3.orig.tar.xz
 4a67251242070773baea756a8171f2fc0a6fec842b019bf662f93ef1d163ed07 8692 cylc-flow_8.2.3-1.debian.tar.xz
Files:
 0924ce71ea4369cde426bdcfc846b03c 2171 utils optional cylc-flow_8.2.3-1.dsc
 bb73152f8b6e98199c08de8ef6f0c52a 872720 utils optional cylc-flow_8.2.3.orig.tar.xz
 10a32203f3722afd48b8ef988c5961b2 8692 utils optional cylc-flow_8.2.3-1.debian.tar.xz
-----BEGIN PGP SIGNATURE-----
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=kvfF
-----END PGP SIGNATURE-----

reopen, dependency is still there according to the build log

The cylc-flow package still uses the pkg_resources module.

Raising the severity of this issue. At the end of the
year 2025, raising the severity again to serious.

If the package is a namespace package, then please lower
the severity again to normal.

close 1083351 8.6.0-1
thanks

It's gone