Package: sponsorship-requests
Severity: normal

Dear mentors,

I am looking for a sponsor for my package "audacious":

  * Package name     : audacious
    Version          : 4.6.1-1
    Upstream contact :https://github.com/audacious-media-player/audacious/issues
  * URL              :https://www.audacious-media-player.org/
  * License          : BSD-2-clause, CC0-1.0, BSD-3-clause
  * Vcs              :https://salsa.debian.org/multimedia-team/audacious
    Section          : sound

The source builds the following binary packages:

   audacious - small and fast audio player which supports lots of formats
   audacious-dev - audacious development files
   libaudcore6 - audacious core engine library
   libaudgui7 - audacious media player (libaudgui shared library)
   libaudtag4 - audacious media player (libaudtag shared library)
   libaudqt4 - audacious media player (libaudqt shared library)

To access further information about this package, please visit the following URL:

https://mentors.debian.net/package/audacious/

Alternatively, you can download the package with 'dget' using this command:

   dget -xhttps://mentors.debian.net/debian/pool/main/a/audacious/audacious_4.6.1-1.dsc

Changes since the last upload:

  audacious (4.6.1-1) unstable; urgency=medium
  .
    * New upstream release (Closes: #1015356):
      + Bump sonames.
      + Update patches.
      + Update symbols files.
    * d/control:
      + Bump Standards-Version to 4.7.4.
      + Update dh version to 14.
      + Drop Priority field.
      + Drop Rules-Requires-Root field.
      + Add qt6-svg-plugins to Recommends. (Closes: #1123666)
    * Update d/copyright.

Regards,

Hello,

Please address this Lintian output on your next upload:

Running lintian...
N:
I: audacious source: older-debian-watch-file-standard 4 [debian/watch]
N:
N:   The version= line in the debian/watch file in this package declares an
N:   older version. Please upgrade when you have a chance.
N:
N:   Please refer to the uscan(1) manual page for details.
N:
N:   Visibility: info
N:   Show-Always: no
N:   Check: debian/watch/standard
N:
N:
X: audacious source: debian-watch-does-not-check-openpgp-signature [debian/watch]
N:
N:   This watch file does not specify a means to verify the upstream tarball
N:   using a cryptographic signature.
N:
N:   If upstream distributions provides such signatures, please use the
N:   pgpsigurlmangle options in this watch file's opts= to generate the URL of
N:   an upstream OpenPGP signature. This signature is automatically downloaded
N:   and verified against a keyring stored in debian/upstream/signing-key.asc
N:
N:   Of course, not all upstreams provide such signatures but you could request
N:   them as a way of verifying that no third party has modified the code after
N:   its release (projects such as phpmyadmin, unrealircd, and proftpd have
N:   suffered from this kind of attack).
N:
N:   Please refer to the uscan(1) manual page for details.
N:
N:   Visibility: pedantic
N:   Show-Always: no
N:   Check: debian/watch
N:   Renamed from: debian-watch-does-not-check-gpg-signature
N:   debian-watch-may-check-gpg-signature
N:   This tag is experimental.
N:
N:
X: libaudtag4: hardening-no-fortify-functions [usr/lib/x86_64-linux-gnu/libaudtag.so.4.0.0]
N:
N:   This package provides an ELF binary that lacks the use of fortified libc
N:   functions. Either there are no potentially unfortified functions called by
N:   any routines, all unfortified calls have already been fully validated at
N:   compile-time, or the package was not built with the default Debian
N:   compiler flags defined by dpkg-buildflags. If built using dpkg-buildflags
N:   directly, be sure to import CPPFLAGS.
N:
N:   NB: Due to false-positives, Lintian ignores some unprotected functions
N:   (e.g. memcpy).
N:
N:   Please refer to https://wiki.debian.org/Hardening and Bug#673112 for
N:   details.
N:
N:   Visibility: info
N:   Show-Always: no
N:   Check: binaries/hardening
N:   This tag is experimental.
N:

I: Lintian run successful (worst tag: info)

Otherwise, enjoy; it will go into the NEW queue, but should get processed shortly:

$ dput ssh-upload ../audacious_4.6.1-1_amd64.changes
Uploading audacious using sftp to ssh-upload (host: ssh.upload.debian.org; directory: /srv/upload.debian.org/UploadQueue/)
running allowed-distribution: check whether a local profile permits uploads to the target distribution
running protected-distribution: warn before uploading to distributions where a special policy applies
running checksum: verify checksums before uploading
running suite-mismatch: check the target distribution for common errors
running gpg: check GnuPG signatures before the upload
Logging into host ssh.upload.debian.org as tsimonq2
Uploading audacious_4.6.1-1.dsc
Uploading audacious_4.6.1.orig.tar.bz2
Uploading audacious_4.6.1-1.debian.tar.xz
Uploading audacious-dbgsym_4.6.1-1_amd64.deb
Uploading audacious-dev_4.6.1-1_amd64.deb
Uploading audacious_4.6.1-1_amd64.buildinfo
Uploading audacious_4.6.1-1_amd64.deb
Uploading libaudcore6-dbgsym_4.6.1-1_amd64.deb
Uploading libaudcore6_4.6.1-1_amd64.deb
Uploading libaudgui7-dbgsym_4.6.1-1_amd64.deb
Uploading libaudgui7_4.6.1-1_amd64.deb
Uploading libaudqt4-dbgsym_4.6.1-1_amd64.deb
Uploading libaudqt4_4.6.1-1_amd64.deb
Uploading libaudtag4-dbgsym_4.6.1-1_amd64.deb
Uploading libaudtag4_4.6.1-1_amd64.deb
Uploading audacious_4.6.1-1_amd64.changes

Best regards,
Simon Quigley
tsimonq2@debian.org