#1092818 devscripts: uscan ought support packages using minisign for verification

Package:
devscripts
Source:
devscripts
Description:
scripts to make the life of a Debian Package maintainer easier
Submitter:
Nick Black (Public gmail account)
Date:
2025-01-12 22:39:01 UTC
Severity:
normal
Tags:
#1092818#5
Date:
2025-01-12 00:15:30 UTC
From:
To:
Dear Maintainer,

some upstreams use minisign, derived from OpenBSD's signify, for tarball
verification. see my mail to debian-devel:

https://lists.debian.org/debian-devel/2025/01/msg00178.html

i'd like to add this using the new uscan option "sigtype". See my mail for
details. In addition, minisign should then be made either a Recommends: or
Depends: imho; i'd like to hear the team's opinion on that.

if such a patch is unwelcome, please let me know asap. thanks!
--- /etc/devscripts.conf ---
Empty.

--- ~/.devscripts ---
DEBSIGN_KEYID=9A2FFF747994E287BEC422F15F43400C21CBFACC
#1092818#10
Date:
2025-01-12 09:37:48 UTC
From:
To:
Dear Nick,

thanks for your bug report. Do you have any numbers on how many are "some"?
10? 100? 1000?
#1092818#15
Date:
2025-01-12 14:15:25 UTC
From:
To:
i know of precisely one, which is not yet packaged.

there is not great demand.

however, i'm almost done with the changes, and they're not very
intrusive. i've also updated the documentation, and intend to
add tests, if that sweetens the deal.
#1092818#20
Date:
2025-01-12 22:17:47 UTC
From:
To:
btw, this work is ongoing in https://salsa.debian.org/nickblack/devscripts/-/commits/nickblack/uscan-minisign

i'm slowly rememebering my perl from twenty-five years ago, but
things are moving forward reasonably enough.
#1092818#25
Date:
2025-01-12 22:37:08 UTC
From:
To:
looking at
https://salsa.debian.org/debian/devscripts/-/merge_requests/460
i see the necessity of ensuring this code works in stable,
testing, etc. environments. that's a good thing to consider,
though it doesn't seem to obviously cause any problems for this
work?