Package: src:protobuf
Version: 3.21.12-16
User: debian-python@lists.debian.org
Usertags: python3.15
Tags: patch
Severity: serious

Hi!

While rebuilding the python related packages against the python version
3.15rc1 we found that numba fails to build from source [1], the same
issue is reported by the reproducible rebuilds [2].

It seems that this is cause by a deprecation introduced in gcc 15 when
trying to combine different types of enums. This problems is already
fixed upstream (in the rather opaque merge
6dd8af4ecfa7987bddb309862932886b84f1e4ef), and shipped with versions (\d.)?22+

Please consider adding this or a similar backport in future uploads or
consider uploading a newer version.

Happy hacking,

[1]: https://debusine.debian.net/debian/r-python-python3.15/work-request/1017954/
[2]: https://tests.reproducible-builds.org/debian/rb-pkg/unstable/amd64/protobuf.html

We believe that the bug you reported is fixed in the latest version of
protobuf, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1145000@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Laszlo Boszormenyi (GCS) <gcs@debian.org> (supplier of updated protobuf package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Sun, 27 Sep 2026 21:51:43 +0200
Source: protobuf
Architecture: source
Version: 3.21.12-17
Distribution: unstable
Urgency: medium
Maintainer: Laszlo Boszormenyi (GCS) <gcs@debian.org>
Changed-By: Laszlo Boszormenyi (GCS) <gcs@debian.org>
Closes: 1145000 1148466
Changes:
 protobuf (3.21.12-17) unstable; urgency=medium
 .
   [ Maximiliano Curia <maxy@debian.org> ]
   * Fix FTBFS due to deprecated enum-enum conversion (closes: #1145000).
   * Fix FTBFS due to the use of pkg_resources (closes: #1148466).
Checksums-Sha1:
 7a43368f4d9b10c84c34e325e75f8b74de83ba4a 3070 protobuf_3.21.12-17.dsc
 e9cc6d087edcdf8e3f5d82367d0ed9b14941b60b 51120 protobuf_3.21.12-17.debian.tar.xz
Checksums-Sha256:
 e1db40b3f3653e8538b65e67d8fcc2d3767eaf717d269cdc071a5d0d1cfd8a8d 3070 protobuf_3.21.12-17.dsc
 e8f376db8113b7ccc3d66f8352ac3627ad8eba544876eb3158bbb87c7b6842b4 51120 protobuf_3.21.12-17.debian.tar.xz
Files:
 98d26125159810ead1f51938f128e814 3070 devel optional protobuf_3.21.12-17.dsc
 e0b7626fe3c0c20ff347db49a2fddac3 51120 devel optional protobuf_3.21.12-17.debian.tar.xz
-----BEGIN PGP SIGNATURE-----
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=JuUG
-----END PGP SIGNATURE-----

The Debian NEW review of protobuf 36.2-1 has been completed.

Decision: ACCEPTED
Reviewer: Andrew McMillan

Review comment:

Two minor debian/copyright nits (not DFSG blockers):

- Files: * → BSD-3-Clause at debian/copyright:8-10 over-declares the whole tree, but the separate utf8_range stanza covers the one divergent case, so it's acceptable.

- The Public-Domain license block (debian/copyright:71-74) is defined but never referenced by any Files: stanza — a dead entry.


Other Packaging quality issues
==============================

1. ruby_debug.patch ships leftover debug code (applied in build).

debian/patches/ruby_debug.patch:10 inserts puts "DEBUG GEM SPEC IS: #{spec.inspect}" into the Ruby build. It also differs from every other patch in form (no Description/Forwarded/Last-Update header) and silently drops the :clean prerequisite from the :build rake task while adding tests/**/* to the gem (ruby_debug.patch:27-40). It's active (in .pc/applied-patches and the series), so this debug print runs during the Debian build.

2. libprotobuf-dev is missing a libutf8-range-dev dependency.

external_utf8_range.patch switches to the system utf8-range (debian/patches/external_utf8_range.patch:15). The installed protobuf.pc/protobuf-lite.pc now emit Requires: … utf8_range (cmake/install.cmake:10, cmake/protobuf.pc.cmake), and the exported CMake config does find_package(utf8_range CONFIG) (cmake/utf8_range.cmake:15). But debian/control:113-114 lists only zlib1g-dev, libabsl-dev in libprotobuf-dev's Depends. Downstream consumers using pkg-config/CMake will fail to resolve utf8_range unless they also pull libutf8-range-dev themselves.

3. ffi.rake_path.patch uses a brittle 12-level relative path.

debian/patches/ffi.rake_path.patch:11 rewrites the import to '../../../../../../../../../../../../ruby/lib/google/tasks/ffi.rake', which depends on the exact in-tree nesting depth.

4. Contradictory/confusing Python test block in debian/rules:156-164.

It runs $$PYTHON setup.py test for each interpreter but then unconditionally emits @echo Python testing is gone..., and the whole block is flagged off-and-on. The message contradicts the code above it.

5. Multi-arch path inconsistency in debian/rules.

The Ruby GEM_DEST_DIR uses $(DEB_HOST_MULTIARCH) (debian/rules:207) while the .so install uses $(DEB_BUILD_MULTIARCH) (debian/rules:236). These differ under cross-building.

6. no_javax.patch/no_errorprone.patch disable code via commented-out imports.

They leave //import javax.annotation.Nullable;-style lines in place and strip annotations (e.g. no_javax.patch:25) rather than cleanly removing them — cosmetic, but leaves dead commented code in the shipped Java source.

I hope this is useful!

Thanks.

Full review details: https://dfsg-new-queue.debian.org/reviews/protobuf

We believe that the bug you reported is fixed in the latest version of
protobuf, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1145000@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Laszlo Boszormenyi (GCS) <gcs@debian.org> (supplier of updated protobuf package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Sun, 27 Sep 2026 23:09:53 +0200
Source: protobuf
Binary: elpa-protobuf-mode libprotobuf-dev libprotobuf-java libprotobuf-lite36 libprotobuf-lite36-dbgsym libprotobuf36 libprotobuf36-dbgsym libprotoc-dev libprotoc36 libprotoc36-dbgsym php-google-protobuf protobuf-compiler protobuf-compiler-dbgsym python3-protobuf ruby-google-protobuf ruby-google-protobuf-dbgsym
Architecture: source all amd64
Version: 36.2-1
Distribution: experimental
Urgency: medium
Maintainer: Laszlo Boszormenyi (GCS) <gcs@debian.org>
Changed-By: Laszlo Boszormenyi (GCS) <gcs@debian.org>
Description:
 elpa-protobuf-mode - Emacs addon for editing protocol buffers
 libprotobuf-dev - protocol buffers C++ library (development files) and proto files
 libprotobuf-java - Java bindings for protocol buffers
 libprotobuf-lite36 - protocol buffers C++ library (lite version)
 libprotobuf36 - protocol buffers C++ library
 libprotoc-dev - protocol buffers compiler library (development files)
 libprotoc36 - protocol buffers compiler library
 php-google-protobuf - PHP bindings for protocol buffers
 protobuf-compiler - compiler for protocol buffer definition files
 python3-protobuf - Python 3 bindings for protocol buffers
 ruby-google-protobuf - Protocol Buffers
Closes: 1145000 1148466
Changes:
 protobuf (36.2-1) experimental; urgency=medium
 .
   * New major upstream release:
     - no longer uses deprecated enum-enum conversion (closes: #1145000),
     - no longer uses deprecated pkg_resources (closes: #1148466).
Checksums-Sha1:
 2928b6f605b3c775326cf8cffae347ad6d2f59b2 3097 protobuf_36.2-1.dsc
 038b2f5052459e9525f7910d1cc938abc74c1811 7349015 protobuf_36.2.orig.tar.gz
 65578e9d4b5b964b20e4f606da1494bb64ce2a2c 39176 protobuf_36.2-1.debian.tar.xz
 9c607c509a3ae77be4826654ee5c0f735dc7f595 9144 elpa-protobuf-mode_36.2-1_all.deb
 76a1f505d2a7668aad7c3c0f73102f8ccdccd205 2640348 libprotobuf-dev_36.2-1_amd64.deb
 e7a3a51b8cb49e20818b2a6eb04e7506cb4c8e18 1234944 libprotobuf-java_4.36.2-1_all.deb
 e4c6d5911798795147fa17b5aff5bfd03466dc8e 4092240 libprotobuf-lite36-dbgsym_36.2-1_amd64.deb
 9c04a74481f1fa68b05462b1f8253100e3eafb9e 309720 libprotobuf-lite36_36.2-1_amd64.deb
 4820246c22056d8ac1af5f5cc482d5132cbfa095 25868060 libprotobuf36-dbgsym_36.2-1_amd64.deb
 4f88cd4b69ee2cf1eb09bcc1f9f78cc209449706 1402704 libprotobuf36_36.2-1_amd64.deb
 8ae369dc84ce49f93cc34e4a695e6d23d0f7ddc5 2471796 libprotoc-dev_36.2-1_amd64.deb
 de7295b78689365c37bae173a4c184735526b795 57876472 libprotoc36-dbgsym_36.2-1_amd64.deb
 45005dd3388364f88e8f833f299d1ae62d73f5eb 1707872 libprotoc36_36.2-1_amd64.deb
 4a4212b75a6784edfab27af5424a13bd44245d83 81476 php-google-protobuf_5.36.2-1_all.deb
 75278736c0e3e2ce44ebcbb291363bbe72b23a44 8040356 protobuf-compiler-dbgsym_36.2-1_amd64.deb
 dc92cd17bcbb6d0ddf436d5637ed0bee11be8ff8 328672 protobuf-compiler_36.2-1_amd64.deb
 5cd6039cbdf107f45dbd5e896edfe3273924802b 21301 protobuf_36.2-1_amd64.buildinfo
 864d60218ff49e6fd79f42ca7827d14036e33d62 121936 python3-protobuf_7.36.2-1_amd64.deb
 d4fee688de785cf52ae31577c17550aedf3c24f3 881324 ruby-google-protobuf-dbgsym_4.36.2-1_amd64.deb
 3ac203a262f8c6cffb32879e6cd6ee27e8632044 180388 ruby-google-protobuf_4.36.2-1_amd64.deb
Checksums-Sha256:
 e548a3f9b303b3680aa08d1fc48313ea9d2beb546536899ec41167dd45bae68f 3097 protobuf_36.2-1.dsc
 7e7eaf580ec77f1a392ff1ab1013c13d3b04a6716f002f697f67f3c1113f0530 7349015 protobuf_36.2.orig.tar.gz
 31657c938a688c28f572029d445c275faa2ccea4a36f2ccbe8cf1b1976c79902 39176 protobuf_36.2-1.debian.tar.xz
 8485af234c668485d1b9a57d0390d797a093b1d42fad1daeee7aa0f56c955de1 9144 elpa-protobuf-mode_36.2-1_all.deb
 48bc9e93073d93956f5d0ce62c21f5340edf39e7cb91161099774230462a3cb7 2640348 libprotobuf-dev_36.2-1_amd64.deb
 0d0827ad59f9f78ca7a2bb265ebdc3af32f796a40ce9e8b39de224edd314c945 1234944 libprotobuf-java_4.36.2-1_all.deb
 1449563768c2af49e7fd6cb7c1723f214c20271c48644768c3200303eaba69fb 4092240 libprotobuf-lite36-dbgsym_36.2-1_amd64.deb
 133135f7095afe2b930a856cfe9c01e40e1886d45c3a55c9c8745ec75acda250 309720 libprotobuf-lite36_36.2-1_amd64.deb
 1d516a14e95b3b8f38c2d01f7c2f3b4bbb34af7d464fd9524cb3eacbff0e48aa 25868060 libprotobuf36-dbgsym_36.2-1_amd64.deb
 92fba6d338da86f31f980199293ccab50db9f099d4cb85635c76afb83eab7011 1402704 libprotobuf36_36.2-1_amd64.deb
 9415f32e780d93edba5956a050f946f616146168d1371bb30e73b274d278f406 2471796 libprotoc-dev_36.2-1_amd64.deb
 f3e1aebabdb2876de99744fc14f268d98531940cacf12bfe12adf79e5cfbe7c1 57876472 libprotoc36-dbgsym_36.2-1_amd64.deb
 1c0ba011931e54ea54a5137e242c9fcb09a959030455a5444f9165ba6832d966 1707872 libprotoc36_36.2-1_amd64.deb
 4f5f82eda5787857da5a379f9e0654d13f844156e561baaef31e9eb039442b54 81476 php-google-protobuf_5.36.2-1_all.deb
 b7f1e86ea156c196958319bdf7b05d89b55f24acf68200faa6fce94c7e23e7bf 8040356 protobuf-compiler-dbgsym_36.2-1_amd64.deb
 da2ef12d66d7a973826e9d3bb75d812a7c6a8f86ac44da6b304aca033a723849 328672 protobuf-compiler_36.2-1_amd64.deb
 fbdc839ce708ca50371ff9b09ab32b71589ae20bfb2ffff20c2815b486aa7ef1 21301 protobuf_36.2-1_amd64.buildinfo
 a706ae4ae6b96eb7a519c687148f1c353b9328cfbc839c30f6844d004b1326a5 121936 python3-protobuf_7.36.2-1_amd64.deb
 12e8a549dd056e50ff316a1acd79fd1e80956d991d157bb2c9f8d1adb79b6c23 881324 ruby-google-protobuf-dbgsym_4.36.2-1_amd64.deb
 c0fa41da21959d17f43b78654e68ff554a794828b6304594c2f622e503d7d5f5 180388 ruby-google-protobuf_4.36.2-1_amd64.deb
Files:
 280dff58970d6a40cde8943dfdfd5b34 3097 devel optional protobuf_36.2-1.dsc
 c55d81e36f6825a5c1e338b8a0383dfc 7349015 devel optional protobuf_36.2.orig.tar.gz
 0b76aa9dc7be977c03acbef22bc683a1 39176 devel optional protobuf_36.2-1.debian.tar.xz
 42b1fa52e6530b28503c42e7b2766d8f 9144 editors optional elpa-protobuf-mode_36.2-1_all.deb
 4f83b2924ac0db69affe1973a062491f 2640348 libdevel optional libprotobuf-dev_36.2-1_amd64.deb
 9a0285d3c0a77dc71806cb2473edd799 1234944 java optional libprotobuf-java_4.36.2-1_all.deb
 6596f812729b2dabc0a24d5f7a067caa 4092240 debug optional libprotobuf-lite36-dbgsym_36.2-1_amd64.deb
 58716b8c8b24f7d1dbd35bb90cb51049 309720 libs optional libprotobuf-lite36_36.2-1_amd64.deb
 3ddc9ab48e9835017c824da301c6f0c7 25868060 debug optional libprotobuf36-dbgsym_36.2-1_amd64.deb
 d744aa45a84db11926292cc23867e8d7 1402704 libs optional libprotobuf36_36.2-1_amd64.deb
 734e90b31741b95ec9f601d73553226d 2471796 libdevel optional libprotoc-dev_36.2-1_amd64.deb
 0119ab5f86a4853288950df75165b898 57876472 debug optional libprotoc36-dbgsym_36.2-1_amd64.deb
 b192683ce99c88a19d4003fd96338508 1707872 libs optional libprotoc36_36.2-1_amd64.deb
 a6a7679b8690d9621c6d3a8bd90450d5 81476 php optional php-google-protobuf_5.36.2-1_all.deb
 6b9fa18ef028ca11668a65ce602153f6 8040356 debug optional protobuf-compiler-dbgsym_36.2-1_amd64.deb
 1182e741c504044ebcbb25796daf73bb 328672 devel optional protobuf-compiler_36.2-1_amd64.deb
 13b212138958eca88f50856b7f35991d 21301 devel optional protobuf_36.2-1_amd64.buildinfo
 e5914bb12b9269d4f4f2e2d078e93448 121936 python optional python3-protobuf_7.36.2-1_amd64.deb
 e9464edbf8117b56dd3e77395a4868eb 881324 debug optional ruby-google-protobuf-dbgsym_4.36.2-1_amd64.deb
 e445adcfc80c06511d695af7ee326150 180388 ruby optional ruby-google-protobuf_4.36.2-1_amd64.deb
-----BEGIN PGP SIGNATURE-----
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=2wgm
-----END PGP SIGNATURE-----