Hi,

AFAIUI resty-core doesn't depend on libnginx-mod-http-lua ?

If I don't understand well, at least I find it dubious that
lua-resty-core:amd64 Depends libnginx-mod-http-lua (< 1:0.10.29.1~)

The reverse is true, though. The nginx lua module should have a tight
dependency on lua-resty-core.

Hi,

It uses LuaJIT FFI to call C functions exported by a
specific ngx_http_lua_module version. Upstream therefore performs an exact
version check when resty.core is loaded.

For example, lua-resty-core 0.1.32 contains the following check in
lib/resty/core/base.lua:

     if subsystem == 'http' then
         if not ngx.config
            or not ngx.config.ngx_lua_version
            or ngx.config.ngx_lua_version ~= 10029
         then
             error("ngx_http_lua_module 0.10.29 required")
         end
     end

This is an equality check, not a minimum-version check. The corresponding
upstream compatibility pairs are currently:

     lua-resty-core 0.1.32  <-> ngx_http_lua 0.10.29
     lua-resty-core 0.1.33  <-> ngx_http_lua 0.10.30
     lua-resty-core 0.1.34  <-> ngx_http_lua 0.10.31
     lua-resty-core 0.1.35  <-> ngx_http_lua 0.10.32

Hmm, the dependency is incorrect. That lower bound is insufficient :(


To avoid circular dependencies,
fix can be:  fix dependencies in libnginx-mod-http-lua and add ‘Breaks’ to  lua-resty-core,

  lua-resty-core:

   Depends:
    libluajit-5.1-2,
  - libnginx-mod-http-lua (<< 1:0.10.29.1~),
  - libnginx-mod-http-lua (>= 1:0.10.29),
    lua-resty-lrucache (>= 0.13-11),
  +Breaks:
  + libnginx-mod-http-lua (<< 1:0.10.29),


libnginx-mod-http-lua:

  -Depends: lua-resty-core (>= 0.1.32),
  +Depends:
  + lua-resty-core (>= 0.1.32),
  + lua-resty-core (<< 0.1.32.1~),



Jan

Le sam. 22 août 2026 à 22:32, Jan Mojzis <jan.mojzis@gmail.com> a écrit :

LGTM

We believe that the bug you reported is fixed in the latest version of
lua-resty-core, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1142077@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Jan Mojžíš <janmojzis@debian.org> (supplier of updated lua-resty-core package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Sat, 22 Aug 2026 21:18:50 +0000
Source: lua-resty-core
Architecture: source
Version: 0.1.32-3
Distribution: unstable
Urgency: medium
Maintainer: Debian Lua Team <pkg-lua-devel@lists.alioth.debian.org>
Changed-By: Jan Mojžíš <janmojzis@debian.org>
Closes: 1142077
Changes:
 lua-resty-core (0.1.32-3) unstable; urgency=medium
 .
   * d/control: replace the versioned libnginx-mod-http-lua dependency with
     Breaks against versions older than 0.10.29, avoiding a circular
     dependency. (Closes: #1142077)
Checksums-Sha1:
 7b6734c66f6997648e85109b07e5e484eb76242f 2339 lua-resty-core_0.1.32-3.dsc
 e23eb8d4501284dab2d06fd61d5d31f1c6fd5f2d 4888 lua-resty-core_0.1.32-3.debian.tar.xz
 a5a5ef7812b8fcd4aab0d42bf5399f5479a78606 496012 lua-resty-core_0.1.32-3.git.tar.xz
 cf860680dc673471a6deb79e2b53edf028eb9da4 17692 lua-resty-core_0.1.32-3_source.buildinfo
Checksums-Sha256:
 ebee3720165e7fa2380e3c4ec6b87e51c3985527ab9cab1e20d28d1fc655077b 2339 lua-resty-core_0.1.32-3.dsc
 7ac2eb24c792b165b62d313d48f751733b28cfddf33a93baef37ad8d0a91804b 4888 lua-resty-core_0.1.32-3.debian.tar.xz
 79a9b449ee2adf1fd7a7571e71620da47bfbb3eb0a13e00089f07c7facf78ecd 496012 lua-resty-core_0.1.32-3.git.tar.xz
 c0269a90ef09aee7369f58db5ad7c7140d4609c9b9368afbff6bb1f211117ceb 17692 lua-resty-core_0.1.32-3_source.buildinfo
Files:
 bfa9bf209c27e9d919c9050880da17c6 2339 net optional lua-resty-core_0.1.32-3.dsc
 0d1751a9bfa1593189ab6a9dba051d7b 4888 net optional lua-resty-core_0.1.32-3.debian.tar.xz
 c2c2da370b54b1a2249cb43bbf0583d9 496012 net None lua-resty-core_0.1.32-3.git.tar.xz
 8afba839bbc3d6065542771b075d8655 17692 net optional lua-resty-core_0.1.32-3_source.buildinfo
Git-Tag-Info: tag=86af8922c84003fdabf991040c473d811d436c44 fp=d008b0c23d8479e46b9fcb9045da517496939ff9
Git-Tag-Tagger: Jan Mojžíš <jan.mojzis@gmail.com>
-----BEGIN PGP SIGNATURE-----
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=DOLa
-----END PGP SIGNATURE-----