[This bug is targeted to the upcoming trixie release]

The package build-depends or depends on python3-pkg-resources, which is
deprecated upstream. Details can be found at

https://setuptools.pypa.io/en/latest/pkg_resources.html

Use of pkg_resources is deprecated in favor of importlib.resources,
importlib.metadata and their backports (importlib_resources, importlib_metadata).
Some useful APIs are also provided by packaging (e.g. requirements and version
parsing). Users should refrain from new usage of pkg_resources and should work
to port to importlib-based solutions.

Python 3.12 in unstable provides both importlib_resources and
importlib_metadata, so no additional dependencies on those packages are needed.

Control: tags -1 + upstream moreinfo
Control: forwarded -1 https://github.com/projectmallard/mallard-ducktype/issues/21

mallard-ducktype (#1083471) is in a similar situation, although there don't
seem to be any third-party extensions to it packaged in Debian in practice,
so we might be able to get away with just deleting
/usr/lib/python3/dist-packages/mallard/ducktype/extensions/__init__.py and
hoping it doesn't break anything for unpackaged code.

I've asked upstream whether they are aware of third-party extensions that
are not packaged in Debian. I'm not intending to work on this further in
mallard-ducktype until there is an obvious correct thing to do.

Thanks,
    smcv

The mallard-ducktype package still uses the pkg_resources module.

Raising the severity of this issue. At the end of the
year 2025, raising the severity again to serious.

If the package is a namespace package, then please lower
the severity again to normal.

Control: severity -1 normal

Doing so. As discussed previously, mallard-ducktype's only use of
pkg_resources is:

mallard/ducktype/extensions/__init__.py:__import__('pkg_resources').declare_namespace(__name__)

and if I understand the design correctly, removing that would be a
flag-day change that needs to be made in mallard-ducktype and its
extensions simultaneously.

I queried this upstream,
<https://github.com/projectmallard/mallard-ducktype/issues/21>.

There do not seem to be any third-party mallard-ducktype extensions in
Debian, so if it becomes urgent to remove the use of pkg_resources, we
can probably just delete that file.

     smcv

Hello,

Bug #1083471 in mallard-ducktype reported by you has been fixed in the
Git repository and is awaiting an upload. You can see the commit
message below and you can check the diff of the fix at:

https://salsa.debian.org/gnome-team/mallard-ducktype/-/commit/10452f4005a825522c62bbe5d3ffaf2c88c19fb7
------------------------------------------------------------------------
Remove python3-pkg-resources dependency

Note that this potentially breaks third-party plugins, if any exist;
I am not aware of them existing, and there are none in Debian.

Closes: #1083471, #1146457
------------------------------------------------------------------------

(this message was generated automatically)
-- 
Greetings

https://bugs.debian.org/1083471

We believe that the bug you reported is fixed in the latest version of
mallard-ducktype, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1083471@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Simon McVittie <smcv@debian.org> (supplier of updated mallard-ducktype package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Thu, 10 Sep 2026 18:13:27 +0100
Source: mallard-ducktype
Architecture: source
Version: 1.0.2-5
Distribution: unstable
Urgency: medium
Maintainer: Debian GNOME Maintainers <pkg-gnome-maintainers@lists.alioth.debian.org>
Changed-By: Simon McVittie <smcv@debian.org>
Closes: 1083471 1146457
Changes:
 mallard-ducktype (1.0.2-5) unstable; urgency=medium
 .
   * d/p/Remove-namespace-package-placeholder.patch, d/control:
     Remove python3-pkg-resources dependency.
     Note that this potentially breaks third-party plugins, if any exist;
     I am not aware of them existing, and there are none in Debian.
     (Closes: #1083471, #1146457)
   * d/control: Build using pybuild-plugin-pyproject (PEP 517 style)
   * d/control, d/rules: Select python3 sequence declaratively
   * d/control: Standards-Version: 4.7.4 (no changes required)
   * d/control: Use debhelper compat level 14
Checksums-Sha1:
 7c8d384b89ac5404d68cd1178392d719f691eada 2491 mallard-ducktype_1.0.2-5.dsc
 127c0dae70634002e46a350da4a1438050df250b 4912 mallard-ducktype_1.0.2-5.debian.tar.xz
 0454992c341c30287e5d52f228404b4acb46c52b 230544 mallard-ducktype_1.0.2-5.git.tar.xz
 df0316130831f8a666ab7a29b55d60fc09ff790e 17704 mallard-ducktype_1.0.2-5_source.buildinfo
Checksums-Sha256:
 c0d26e79511f3944928884cf496fff03d3b0696edd5e28eecd3303ba6fc29729 2491 mallard-ducktype_1.0.2-5.dsc
 3ab875f9229bf854dae69eb00837e11346d723a44e84957c685e1129a1c11b2f 4912 mallard-ducktype_1.0.2-5.debian.tar.xz
 926d0e1e6787f986d658d56bba0a64dc9e388c6fa6c91903b27ed2d561a32611 230544 mallard-ducktype_1.0.2-5.git.tar.xz
 001280d883db226f66a85b62dad06a2c09ac5a56c8343336bcd47025a52eeb04 17704 mallard-ducktype_1.0.2-5_source.buildinfo
Files:
 ced16fcd4f870abd7f0b20c6809110e6 2491 python optional mallard-ducktype_1.0.2-5.dsc
 008d03c5e196101e9de1060b5e5d8708 4912 python optional mallard-ducktype_1.0.2-5.debian.tar.xz
 05df4b9ae0fddffe891158d091660cc1 230544 python None mallard-ducktype_1.0.2-5.git.tar.xz
 5cc0f7358fd8ed1f3e47c958413c5ada 17704 python optional mallard-ducktype_1.0.2-5_source.buildinfo
Git-Tag-Info: tag=d25f1882e3559b6d290e8cb4cb5fb4b574e74fa1 fp=7a073ad1ae694fa25bff62e5235c099d3eb33076
Git-Tag-Tagger: Simon McVittie <smcv@debian.org>
-----BEGIN PGP SIGNATURE-----
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=lXOi
-----END PGP SIGNATURE-----