debian/patches/0001-use-another-gcfg.patch changes
plumbing/format/config/decoder.go to import github.com/src-d/gcfg, but go.mod
still requires github.com/go-git/gcfg. Under GOPATH that did not matter. Under
dh-go, where the toolchain resolves imports from the module graph, every package
that build-depends on golang-github-go-git-go-git-v5-dev now fails:

    src/github.com/go-git/go-git/v5/plumbing/format/config/decoder.go:6:2:
    module github.com/src-d/gcfg provides package github.com/src-d/gcfg and is
    replaced but not required

Adding the matching require to go.mod is enough. I have built 5.19.2-1 that way
in a clean chroot and can send a merge request:

    -	github.com/go-git/gcfg v1.5.1-0.20230307220236-3a3c6141e376
    +	github.com/src-d/gcfg v1.4.0

Dropping the patch instead does not work today: golang-github-go-git-gcfg-dev
2.0.2-3 ships module github.com/go-git/gcfg/v2, while go-git 5.19.2 wants the
v1 path. Moving both the import and go.mod to gcfg/v2 would be the other way
round, and that is your call rather than mine.

No open or archived bug mentions gcfg or go.mod, so I do not think this is a
duplicate.

While there: debian/rules passes --buildsystem=golang without --with=golang.
dh-go 1.68 dropped Provides: dh-sequence-golang, so dh_golang no longer runs and
Static-Built-Using comes out empty.

We believe that the bug you reported is fixed in the latest version of
golang-github-go-git-go-git, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1149024@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Juan Manuel Méndez Rey <juan.mendezr@proton.me> (supplier of updated golang-github-go-git-go-git package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Sat, 26 Sep 2026 15:38:58 +0200
Source: golang-github-go-git-go-git
Architecture: source
Version: 5.19.2-2
Distribution: unstable
Urgency: medium
Maintainer: Debian Go Packaging Team <team+pkg-go@tracker.debian.org>
Changed-By: Juan Manuel Méndez Rey <juan.mendezr@proton.me>
Closes: 1149024
Changes:
 golang-github-go-git-go-git (5.19.2-2) unstable; urgency=medium
 .
   * Declare the gcfg module that the patched import actually uses, so
     that module-aware builds of dependent packages work again (Closes:
     #1149024).
Checksums-Sha1:
 8d0fcd4dba87c3a1b1dd5c8dcb1167966a0f78cf 3673 golang-github-go-git-go-git_5.19.2-2.dsc
 c4c23f35543b53019b28135c00e9812a542baf8a 11848 golang-github-go-git-go-git_5.19.2-2.debian.tar.xz
 bfa3deb346c1ea9d8de50daf778bda8cb9611f42 985336 golang-github-go-git-go-git_5.19.2-2.git.tar.xz
 f58693173d7e053702978224879719eaa1173af8 17808 golang-github-go-git-go-git_5.19.2-2_source.buildinfo
Checksums-Sha256:
 9237e7d846ca4d6774e4a8620d3996f0220489db8917477c2fda97d7c176f4b1 3673 golang-github-go-git-go-git_5.19.2-2.dsc
 64f7bf57c7fcaad3cbd468b655a0332df0d5d81b478f6bc6e903f03c26d2f3ed 11848 golang-github-go-git-go-git_5.19.2-2.debian.tar.xz
 be64872772749624337766380c00822566853d7fe9e082b9c4928307bf279a6c 985336 golang-github-go-git-go-git_5.19.2-2.git.tar.xz
 e9f114858d068f80c97c8e5ae9f93b3203f0bae2c0d0eb7fae1ac753300b7880 17808 golang-github-go-git-go-git_5.19.2-2_source.buildinfo
Files:
 bda623b297dcfbe7c1fb3edcd7890699 3673 golang optional golang-github-go-git-go-git_5.19.2-2.dsc
 fdc1b6536de0dbeb19b26f8d32e72372 11848 golang optional golang-github-go-git-go-git_5.19.2-2.debian.tar.xz
 7ef8dc1e747b0d26994306d089b56082 985336 golang None golang-github-go-git-go-git_5.19.2-2.git.tar.xz
 aaf3b5ed5fb3abbe894758beac4d1648 17808 golang optional golang-github-go-git-go-git_5.19.2-2_source.buildinfo
Git-Tag-Info: tag=7179c551efc1094db127ad4459900cc5badc6853 fp=30de7d1763ab9452c7e0825049a76977942826cb
Git-Tag-Tagger: Reinhard Tartler <siretart@tauware.de>
-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEEN02M5NuW6cvUwJcqYG0ITkaDwHkFAmrGwlcACgkQYG0ITkaD
wHliXxAAhZoaawVawOVB9RqpnpfOVTwIQbxtPaxkwKy+vL52AdrXQhoaRJdSsMJs
g3nODB2Cjl9p9JR50eLesgMOBw0iw7+AiSk3uzG8CA8rqwPFuJePclZ5eqd1DHks
+ncG/JOhznwPpBO/BMT8ArD0D9IhEpipgbI0hvfrkyUi83mFhh5O26TyDHbCSCwe
7vQy2dNvdwpj+M0GxW8ZX6tfUCoFitzXwFIE9GewqTExsBGMKEs7mIRIiWBZp4DA
8meNONNzNtW5ChbxHcoHp3f1ZZW9P1bJQKAeOP06QPNj3a/E2h1/yO7sOyoR/zXb
ITubf1b5akxAhPgUj3zeurFG3u5hFPb7sDENJG/wYlXzqa9Eb1Jj5HU13BGSOPgY
xEpqF2nZTaRT6Sbeof+DUaT+cDfjj0zfAXoJnjJAVTDFXtyTdJtoe9VNDW7pxHCM
BTtSXTsS2Wj+F1oBOAHQuHeaEhEmsI47ibJuxpMr4hvEMY7NbdudskVt5s1u8VZd
1n6jABy55aD3mCPc9pirGoGnrrFOL3cf01Qm7EoQAx1YALA+7NC1op2E0at5ha6l
lv5CDg/vf9xJIjwAXRULhNxqfIpdDk6aJzUjv21ogzwT+ncv0giNIJIxhbA71cGf
VzAnzDLGOPAUBn0EzH1pP9eMvnZ4oXHAF0+0GhJsna0eO+i6R6c=
=Z5ei
-----END PGP SIGNATURE-----