Dear Maintainer,

The package fails autopkgtest with the following error:

250s Exception in thread "main" Global tag is not allowed:
tag:yaml.org,2002:brut.androlib.meta.MetaInfo
250s  in 'reader', line 1, column 1:
250s     !!brut.androlib.meta.MetaInfo
250s     ^
250s
250s    at
org.yaml.snakeyaml.composer.Composer.composeMappingNode(Composer.java:310)
250s    at org.yaml.snakeyaml.composer.Composer.composeNode(Composer.java:218)
250s    at org.yaml.snakeyaml.composer.Composer.getNode(Composer.java:141)
250s    at
org.yaml.snakeyaml.composer.Composer.getSingleNode(Composer.java:167)
250s    at
org.yaml.snakeyaml.constructor.BaseConstructor.getSingleData(BaseConstructor.java:179)
250s    at org.yaml.snakeyaml.Yaml.loadFromReader(Yaml.java:508)
250s    at org.yaml.snakeyaml.Yaml.loadAs(Yaml.java:501)
250s    at brut.androlib.meta.MetaInfo.load(MetaInfo.java:70)
250s    at brut.androlib.Androlib.readMetaFile(Androlib.java:280)
250s    at brut.androlib.Androlib.build(Androlib.java:294)
250s    at brut.androlib.Androlib.build(Androlib.java:287)
250s    at brut.apktool.Main.cmdBuild(Main.java:263)

https://objectstorage.prodstack5.canonical.com/swift/v1/AUTH_0f9aae918d5b4744bf7b827671c86842/autopkgtest-
resolute/resolute/amd64/a/apktool/20260220_011935_314fc@/log.gz

The loader options need to register tag inspector that allows MetaInfo global
tag.

Dear Maintainers,

I am attaching the updated snakeyaml2.patch as it seems that the Salsa
repository [1] is no longer updated, and the previous upload was done
as a NMU.
The update patch includes setting a TagInspector that allows
instantiating classes from the top-level tags.

Best Regards,
 Vladimir.

[1] https://salsa.debian.org/android-tools-team/apktool

Control: severity -1 serious
Conform [1] that is RC.

Paul

[1] https://lists.debian.org/debian-devel-announce/2019/07/msg00002.html

Dear maintainer,

I've prepared an NMU for apktool (versioned as 2.7.0+dfsg-7.2) and
uploaded it to DELAYED/15. Please feel free to tell me if I should
cancel it.

cu
Adrian

We believe that the bug you reported is fixed in the latest version of
apktool, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1128802@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Adrian Bunk <bunk@debian.org> (supplier of updated apktool package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Sat, 25 Apr 2026 12:05:51 +0300
Source: apktool
Architecture: source
Version: 2.7.0+dfsg-7.2
Distribution: unstable
Urgency: low
Maintainer: Android Tools Maintainers <android-tools-devel@lists.alioth.debian.org>
Changed-By: Adrian Bunk <bunk@debian.org>
Closes: 1128802
Changes:
 apktool (2.7.0+dfsg-7.2) unstable; urgency=low
 .
   * Non-maintainer upload.
   * Further snakeyaml 2.x fixes from Vladimir Petko. (Closes: #1128802)
Checksums-Sha1:
 51e75f2bea60617192ada3154a0c2c08cd43c590 2319 apktool_2.7.0+dfsg-7.2.dsc
 da37c89977c828e179133f2999711863ad800884 20356 apktool_2.7.0+dfsg-7.2.debian.tar.xz
Checksums-Sha256:
 6c0cf176386dc85a03689025b3d5743ced529ef8add83ec2091d25ec1f49a564 2319 apktool_2.7.0+dfsg-7.2.dsc
 780efc5f9d5209ba6f4bfc46c7dda54bc226ca6d724f506c13591ba78be850c1 20356 apktool_2.7.0+dfsg-7.2.debian.tar.xz
Files:
 34d9470645e8c331f0efbe0fd0bb5ebd 2319 devel optional apktool_2.7.0+dfsg-7.2.dsc
 96b602d2954308bfc35b871bbb9bb339 20356 devel optional apktool_2.7.0+dfsg-7.2.debian.tar.xz
-----BEGIN PGP SIGNATURE-----
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=IE6e
-----END PGP SIGNATURE-----