Hi!

While rebuilding the python related packages against the Python 3.15rc2 version we found that mercurial fails to build from source [1].

The error is:

body: size=503, sha1=2d8ce8bb3816603b9683a1804a5a02c11224cb01 (py39 !)
\+  body: size=503, sha1=37fff6d86b8569f8be21fcdf937a8ec8463251ca
    % zip and tar.gz disallowed should both give 403

This is due to the default compression level of gz changing.

To fix it, I applied the following upstream commits:
- Drop py38 check (test-archive: drop conditionnal outptu for Python3.8) [2]
- Update sha1 for py315 (test-archive: adapt output to Python 3.15)
- Add python versions (test: add more python version to hghave)

I've applied these fixes in the sandbox [5] to verify that it builds successfully, please consider applying the patch to support the upcoming 3.15 version.

Setting the severity to important for now. Once Python 3.15 is released, it will be added to python3-defaults and this bug will become release critical.

Happy hacking,

[1]: https://debusine.debian.net/debian/r-python-python3.15/artifact/4719448/
[2]: https://foss.heptapod.net/mercurial/mercurial-devel/-/commit/04486a79799e6cccdd499350e3e60bc4f53731fa
[3]: https://foss.heptapod.net/mercurial/mercurial-devel/-/commit/8d20ade7899f2fa61ff226f6d72eec560b1d3c20
[4]: https://foss.heptapod.net/mercurial/mercurial-devel/-/commit/4261e6bb01e94b686e068695b6d64dc88911f520
[5]: https://debusine.debian.net/debian/r-python-python3.15/

Hello,

Bug #1148467 in mercurial reported by you has been fixed in the
Git repository and is awaiting an upload. You can see the commit
message below and you can check the diff of the fix at:

https://salsa.debian.org/python-team/packages/mercurial/-/commit/9c3015d52f131a372f54c0a50ad6dfc24ef13cb7

(this message was generated automatically)
-- 
Greetings

https://bugs.debian.org/1148467

We believe that the bug you reported is fixed in the latest version of
mercurial, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1148467@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Michael R. Crusoe <crusoe@debian.org> (supplier of updated mercurial package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Mon, 19 Oct 2026 12:10:40 +0200
Source: mercurial
Architecture: source
Version: 7.2.4-2
Distribution: unstable
Urgency: medium
Maintainer: Debian Python Team <team+python@tracker.debian.org>
Changed-By: Michael R. Crusoe <crusoe@debian.org>
Closes: 1147349 1148467
Changes:
 mercurial (7.2.4-2) unstable; urgency=medium
 .
   [ Michael R. Crusoe ]
   * Team upload.
   * Merged-in missing upload to packaging VCS of 7.2.4-1.
   * debhelper-compat 14
   * Reorder sequence of d/control VCS fields (cme)
   * Remove Priority field (cme)
   * Build-Depends: s/dh-python/dh-sequence-python3/ (routine-update)
   * Drop 'Rules-Requires-Root: no' from d/control (routine-update)
   * Add missing build-dependency on python3-setuptools.
   * Replace FSF postal address with a reference to
https://www.gnu.org/licenses/.
   * Upgrade upstream signing key to new packet format.
   * Remove 2 obsolete maintscript entries.
   * watch file standard 5 (routine-update)
   * debputy lint --auto-fix (routine-update)
   * d/control: remove more "Breaks" on packages missing old-stable and beyond
   * Update patch metadata headers.
   * Cherry-pick three patches from upstream for Python 3.15 support.
     Closes: #1148467
   * Run the test using pybuild, adapt the autopkgtest to also use
     pybuild-autopkgtest
   * Drop python3-vcr from the autopkgtests, it is too new
   * Skip two tests that need updating for changed svn output
   * Updated doctests patch to work with the installed Python modules
 .
   [ Colin Watson ]
   * Skip test-obsolete-bundle-strip.t on riscv64 due to timeouts.
     Closes: #1147349
 .
   [ Vasyl Vavrychuk ]
   * d/control: package qct is removed from Debian; don't suggest it.
Checksums-Sha1:
 4ec9daafb4f5200a744ce77c71949b99f8def187 2365 mercurial_7.2.4-2.dsc
 3249fbf18b16bcd3bc71c8343f6ff736be00dfe4 56260 mercurial_7.2.4-2.debian.tar.xz
 dfe99454bcb82b92498fe1e50db086e200d839ad 10665 mercurial_7.2.4-2_source.buildinfo
Checksums-Sha256:
 ed2d49637a8073cedb49bdbd363e284a8ad84b47686c4d7c3b1f12b553f257e2 2365 mercurial_7.2.4-2.dsc
 08629fb9929026cfde1a6662dedab6ff24b644b5c1f8f36ba8fcd37e6c467601 56260 mercurial_7.2.4-2.debian.tar.xz
 81fac5a4e26065ab114dd354cc288dbc78c59371d6aeef0d0d77db905bc81725 10665 mercurial_7.2.4-2_source.buildinfo
Files:
 df5b7cc8cc1f068a086527c7ce1752d6 2365 vcs optional mercurial_7.2.4-2.dsc
 b93dbd647d541d5849a899087166e495 56260 vcs optional mercurial_7.2.4-2.debian.tar.xz
 ad3f126b0eabd920e083c482e0b614f6 10665 vcs optional mercurial_7.2.4-2_source.buildinfo
-----BEGIN PGP SIGNATURE-----
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=QiU5
-----END PGP SIGNATURE-----