keepass2-plugin-hibpofflinecheck unconditionally build-depends on
cli-common-dev, and its binary package carries the ${cli:Depends}
substitution variable in its Depends field. cli-common has been orphaned
for over a year [1].

As part of a clean-up effort from the Debian Mono Team, cli-common is
scheduled for removal from the archive. Once removed, this package would
be unable to build, and would be removed from the archive as a side
effect.

The fix is straightforward: drop cli-common-dev from Build-Depends,
remove any invocation of dh_clideps from debian/rules, and replace
${cli:Depends} in the binary Depends field with an explicit mono-runtime
dependency, or drop it entirely, since the keepass2 dependency already
pulls in mono-runtime transitively.

[1] https://bugs.debian.org/1079871

A debdiff against 1.7.11-3 is attached. The changes are:

 - Drop cli-common-dev from Build-Depends
 - Remove --with=cli from the dh call in debian/rules
 - Drop ${cli:Depends} from binary Depends; keepass2 already pulls
   in mono-runtime transitively

Tested: builds clean in an unstable sbuild chroot; piuparts
install/remove cycle passes with no errors or warnings.

For context, this is part of a coordinated effort to clear all
remaining reverse-dependencies before requesting cli-common's removal
from the archive [1]. Several other packages have open serious bugs
in the same usertag cluster (vv221@debian.org / cli-common-removal).

[1] https://bugs.debian.org/1079871

Hi Tobias,

Following up on the debdiff I sent on 2026-05-23.  The seven-day NMU
wait expires around 2026-05-30, so wanted to check in.

One piece of good news while I had the package open: I noticed the
tracker is flagging keepass2-plugin-hibpofflinecheck for autoremoval
from testing on 21 June due to libgdiplus #1135544 [1].  That's the
same FTBFS we resolved together on libgdiplus,  the fix landed as
6.1+dfsg-2 on 2026-05-22 and is pending migration to testing.  Once
it migrates the autoremoval flag should clear on its own.

The cli-common-dev fix (this bug) is still needed separately, of
course.  If you'd like to fold it in yourself the debdiff is still
current.  Otherwise I'll ask for a DELAYED/7 upload around 2026-05-30.

[1] https://bugs.debian.org/1135544

Best,
James

Am 26. Mai 2026 20:59:10 UTC schrieb James Montgomery <james_montgomery@disroot.org>:

Hi James,

please do a team upload, the package is in the debian group to allow that, no need to do an NMU and delay it. please push your changes to the git repo afterwards.

Hi Tobias,

The team upload is prepared and the changes are on Salsa [1].

Two commits on debian/unstable:

  7e029fc Drop build-dependency on cli-common-dev (Closes: #1137442)
  5969464 Release 1.7.11-4

The build tested clean in an unstable sbuild chroot and lintian is
happy (exit 0, one pre-existing warning unrelated to this change).
The release tag debian/1.7.11-4 is signed and pushed.

Please merge and upload when convenient.

Best,
James

[1] https://salsa.debian.org/debian/keepass2-plugin-hibpofflinecheck/-/merge_requests/1

Hello,

Bug #1137442 in keepass2-plugin-hibpofflinecheck reported by you has been fixed in the
Git repository and is awaiting an upload. You can see the commit
message below and you can check the diff of the fix at:

https://salsa.debian.org/debian/keepass2-plugin-hibpofflinecheck/-/commit/614f5498d95b6f23f1d5877f3f138ff9bb1aecb2

(this message was generated automatically)
-- 
Greetings

https://bugs.debian.org/1137442

We believe that the bug you reported is fixed in the latest version of
keepass2-plugin-hibpofflinecheck, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1137442@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Tobias Frost <tobi@debian.org> (supplier of updated keepass2-plugin-hibpofflinecheck package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Thu, 28 May 2026 20:15:05 +0200
Source: keepass2-plugin-hibpofflinecheck
Architecture: source
Version: 1.7.11-4
Distribution: unstable
Urgency: medium
Maintainer: Tobias Frost <tobi@debian.org>
Changed-By: Tobias Frost <tobi@debian.org>
Closes: 1137442
Changes:
 keepass2-plugin-hibpofflinecheck (1.7.11-4) unstable; urgency=medium
 .
   * Drop build-dependency on cli-common-dev (Closes: #1137442)
     Thanks to James Montgomery for preparing the changes.
   * Fix permissions of mono dll, after droping dh_cli.
   * Bump S-V to 4.7.4 - no changes.
Checksums-Sha1:
 595d6c2e9983450cd152636a9b387bb51a0d8ecb 2148 keepass2-plugin-hibpofflinecheck_1.7.11-4.dsc
 b86452da25c869e82e58deaead5027be8ba2d31c 50496 keepass2-plugin-hibpofflinecheck_1.7.11.orig.tar.gz
 b315fef85eea7128f618f06f35bef8338b9c2f01 3328 keepass2-plugin-hibpofflinecheck_1.7.11-4.debian.tar.xz
 b920b857a0fc65f256941c8c7c90a3a357e16e97 8599 keepass2-plugin-hibpofflinecheck_1.7.11-4_source.buildinfo
Checksums-Sha256:
 44e78f9365610710235e0d0929d68745b8a93f21ca45e45f10e073d9a4eb9bbf 2148 keepass2-plugin-hibpofflinecheck_1.7.11-4.dsc
 f23f6883dac734b75f7a2ef7a050e00cadf1c330e8b0b2411531ae78cd2bce67 50496 keepass2-plugin-hibpofflinecheck_1.7.11.orig.tar.gz
 7685e3612a59d469d6dbf1dc8e9a52d522e0c30bf4b7b160e7bb560ff9bc6698 3328 keepass2-plugin-hibpofflinecheck_1.7.11-4.debian.tar.xz
 671b3596ea11d14c54f2a0de894c5ff6c008aaa99579c2e27184dce9fba4bb2f 8599 keepass2-plugin-hibpofflinecheck_1.7.11-4_source.buildinfo
Files:
 40a3f82c3b274ca8b94f9865fedbeb79 2148 utils optional keepass2-plugin-hibpofflinecheck_1.7.11-4.dsc
 e94fce8d5789f279f0d9329ae5f3ccb4 50496 utils optional keepass2-plugin-hibpofflinecheck_1.7.11.orig.tar.gz
 7146a3385f77c24272d051af346f57d0 3328 utils optional keepass2-plugin-hibpofflinecheck_1.7.11-4.debian.tar.xz
 2c7247038a1a48c75f86edfd7659f8f3 8599 utils optional keepass2-plugin-hibpofflinecheck_1.7.11-4_source.buildinfo
-----BEGIN PGP SIGNATURE-----
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=/tGM
-----END PGP SIGNATURE-----